Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
File:                     JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json)
Hash identifier:          EToKX9OnIkNhvfT+KhkttCaolQaSkZxmf47CHVy0upI=
Subject key identifier:   EA:74:9D:36:E8:CA:20:4E:94:CD:57:74:E7:40:61:14:49:F5:C8:19
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Certificate issuer:       /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
Manifest number:          93
Signing time:             Sun 27 Apr 2025 05:14:08 +0000
Manifest this update:     Sun 27 Apr 2025 05:14:08 +0000
Manifest next update:     Sun 04 May 2025 05:14:08 +0000
Files and hashes:         1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: tE+Iag4l0AWLOtP1o1kII42dvEh69nDSHmrbT22jLno=)
                          2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=)
                          3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
        Validity
            Not Before: Apr 27 05:14:08 2025 GMT
            Not After : May  4 05:14:08 2025 GMT
        Subject: CN=680dbd20-54d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:c4:01:b3:37:eb:02:32:1b:6e:51:0c:01:
                    97:12:3e:7c:5d:bc:93:92:3e:ec:2a:b6:dd:1a:07:
                    a8:48:1c:b8:dd:d2:85:c1:eb:2d:f6:8f:02:a6:0b:
                    c5:14:22:5c:d9:47:84:b1:c2:c3:13:2e:3a:4d:27:
                    33:08:d0:38:36:a6:29:ce:11:e0:10:3f:33:01:c0:
                    97:ff:b2:fd:c8:5d:99:6a:98:8e:4b:79:49:14:c7:
                    e5:df:9e:72:e7:ac:3b:3f:28:8e:e5:d4:64:9c:e5:
                    b1:e6:d5:da:39:1e:43:4d:5c:5d:84:6e:d6:17:31:
                    05:1b:1b:a2:35:e0:44:a1:ef:e1:26:89:d8:59:3f:
                    0d:ee:3e:54:79:73:7b:90:46:9d:42:20:d5:08:ea:
                    2c:a0:f4:05:c9:62:48:22:d3:e3:38:8d:0b:68:df:
                    31:ea:30:76:19:14:e8:68:40:d3:b5:27:88:67:55:
                    b7:69:71:99:9a:58:c4:6a:9b:7f:06:dd:aa:1f:f0:
                    ed:38:50:c0:53:a2:8b:df:25:7c:53:50:3f:80:5f:
                    31:70:40:db:84:da:b6:a0:c5:10:71:2d:b7:b8:b3:
                    e9:ff:7b:84:8d:88:2c:16:02:d5:d8:4f:04:44:df:
                    19:3d:45:9b:c9:e5:41:34:dd:73:7c:22:4e:33:80:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:74:9D:36:E8:CA:20:4E:94:CD:57:74:E7:40:61:14:49:F5:C8:19
            X509v3 Authority Key Identifier:
                keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fa:24:1f:30:75:fe:c2:b2:2b:2e:96:83:f2:73:04:9a:83:
         23:fc:d8:06:4a:f5:85:6d:19:36:4a:30:72:7e:3c:f9:0c:92:
         1c:34:5e:25:4b:f2:e4:a5:99:1e:19:63:19:bd:93:79:f7:a5:
         fd:4a:39:fe:56:d8:c4:81:c7:d8:92:39:49:ba:b3:a2:5f:04:
         10:af:aa:e4:33:8a:41:05:dc:2f:35:d3:8d:d5:3b:be:66:11:
         cc:21:f3:87:ba:b3:77:2b:ba:b3:01:83:dd:f7:4a:c0:93:5a:
         db:f7:d3:9b:bc:98:2b:35:f4:7e:25:fb:8e:fa:d9:0f:53:6a:
         26:90:0b:9b:f9:a7:2b:6a:da:58:56:72:c4:86:ec:54:87:f7:
         f1:48:2c:29:72:67:02:be:a8:af:51:b4:df:b6:ee:f3:06:6a:
         64:e8:9c:c7:ac:df:b0:1a:e7:b4:04:cc:e3:4d:1b:8b:99:a4:
         28:57:d0:d2:d6:85:ce:af:33:9c:28:9e:5d:75:45:2d:94:0f:
         1d:c3:a7:c2:52:31:cc:67:6e:54:20:5d:3d:ee:6c:36:01:2b:
         b2:3d:6e:7c:21:29:a6:0c:bb:8e:72:e1:97:ff:a0:e1:52:20:
         eb:cf:a9:0c:14:69:5d:a2:68:2f:a4:9b:3b:e0:41:7f:fb:99:
         35:02:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net