Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
File:                     odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json)
Hash identifier:          ivvWxklFtEiNE7OYk+b28YLWcP1XWNayjHgBk4IoZkE=
Subject key identifier:   D0:5D:7D:7B:96:60:CA:48:32:6A:F0:2C:06:E9:7C:DB:D4:00:58:35
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
Manifest number:          02A9
Signing time:             Sun 27 Apr 2025 01:09:13 +0000
Manifest this update:     Sun 27 Apr 2025 01:09:13 +0000
Manifest next update:     Sun 04 May 2025 01:09:13 +0000
Files and hashes:         1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: rny0tgK0+9rfureBqokDoQE3nDNfhp0FFF2bGhLYiT0=)
                          2: 692F8290AF1D11EFA7108387C4F9AE02.roa (hash: WDaHtMQWTwJWQkeIMiJU8NUrdki0tCHjoldLxpeTYvo=)
                          3: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: bzAyLuYRUMBSf4vl6Z05UJcWg+7dmLiTXnPYXge8oFY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
                          rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Apr 27 01:09:13 2025 GMT
            Not After : May  4 01:09:13 2025 GMT
        Subject: CN=680d83b9-0f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:bf:57:c2:11:03:60:b7:b3:65:53:54:ba:
                    8f:56:ab:f1:04:1a:e5:d4:e3:2d:28:23:a6:2d:79:
                    f4:67:ee:21:30:36:59:6d:24:1f:bc:46:7a:40:d2:
                    8e:08:05:d3:73:a7:ed:38:09:19:76:27:3e:0c:ee:
                    b4:90:14:fe:2c:f9:c1:29:82:ab:83:de:3b:9d:4a:
                    4d:94:4a:c1:d9:c5:0f:71:d1:25:d6:e2:89:69:5c:
                    95:17:ed:8a:4e:9b:79:35:96:e1:c7:59:de:3b:f2:
                    a3:57:0e:f3:6f:f9:93:15:51:a9:b7:9d:19:35:6e:
                    98:5b:6d:a4:86:31:34:47:43:2c:44:a4:4f:92:3e:
                    1b:6c:2c:6b:65:c1:c4:69:e5:20:12:e8:a0:0e:73:
                    12:d9:88:c0:ce:63:17:39:0c:70:21:fa:f2:7a:0a:
                    66:b5:1a:cf:82:89:ac:e7:43:e4:dc:cd:69:f6:db:
                    e0:8d:9d:86:86:a5:61:6f:89:c0:c3:77:d7:ec:c5:
                    13:21:a1:5f:9a:c7:04:3b:22:62:08:10:d6:5c:06:
                    4b:d5:da:eb:df:2b:b7:c6:2d:4b:fb:d6:37:e6:44:
                    9a:a3:eb:44:eb:77:c8:98:eb:b8:24:7c:ee:c1:40:
                    1c:f7:6a:49:02:25:58:db:04:38:42:43:88:6d:a1:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:7D:7B:96:60:CA:48:32:6A:F0:2C:06:E9:7C:DB:D4:00:58:35
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a8:c9:7d:89:6d:2b:1f:8a:8c:87:43:db:fb:46:c5:3b:f8:
         7f:5c:7e:c5:97:80:a3:f9:88:0f:fc:fb:b4:b3:27:80:56:e3:
         e0:bd:15:fd:8c:55:7e:db:b6:d7:9c:32:6c:88:72:a4:1e:06:
         c6:02:23:fe:61:91:51:16:e4:9e:20:30:f7:11:ea:07:4d:5e:
         6e:99:04:8f:75:cb:67:ca:37:00:81:51:22:19:a5:43:7f:7e:
         b1:14:2c:d2:d8:51:a8:04:6c:6f:ff:73:57:c9:3c:b6:56:eb:
         7b:06:b6:7e:00:35:93:ff:c6:d5:59:53:ce:7d:ac:b8:54:a5:
         86:c6:c8:b7:94:c7:c7:00:8d:f6:99:30:43:e0:b4:4e:92:6c:
         6c:7e:bd:66:90:5c:ec:2c:31:70:89:6f:40:7e:d9:2e:b5:93:
         9c:cb:18:60:c0:9a:e5:fc:ec:f3:8f:ae:2b:df:be:62:bb:05:
         57:63:67:54:f5:18:a8:9f:ea:62:1d:0d:9e:9b:8d:e4:1c:e1:
         21:f1:d2:b5:49:99:2c:7c:6c:16:ce:7d:d8:c3:f5:a3:86:f4:
         8a:18:4e:3a:5b:37:27:33:ed:26:c8:a9:9e:cd:2c:c2:cc:5c:
         3d:09:98:bf:f2:4b:dc:02:19:5c:e4:44:b8:71:16:ad:91:ad:
         6c:f8:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net