Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
File:                     Fs6MGXC4akr081Y5EEZo0JWz1Og.mft (raw, json)
Hash identifier:          TjPEDcHprPLz/LzBZfnG8oauZGGPouxsNTgFYC7REXQ=
Subject key identifier:   CA:0E:70:59:62:4C:80:F0:B9:67:52:5D:B8:81:7F:A1:0E:9A:F2:5A
Authority key identifier: 16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8
Certificate issuer:       /CN=A911C075/serialNumber=16CE8C1970B86A4AF4F35639104668D095B3D4E8
Certificate serial:       174C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
Manifest number:          1737
Signing time:             Mon 28 Apr 2025 16:48:31 +0000
Manifest this update:     Mon 28 Apr 2025 16:48:31 +0000
Manifest next update:     Mon 05 May 2025 16:48:31 +0000
Files and hashes:         1: Fs6MGXC4akr081Y5EEZo0JWz1Og.crl (hash: mBB/BM4Pqp1DNkutEaLbDmrddaSnrX/lSko1xh4/UVk=)
                          2: 3EB855ACDE3A11E781926D6DC4F9AE02.roa (hash: AMcNfp7F2XxS6fYEUJYfNIYxis7dlQgn+VV4onEe0GY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.crl
                          rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 16:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5964 (0x174c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C075, serialNumber=16CE8C1970B86A4AF4F35639104668D095B3D4E8
        Validity
            Not Before: Apr 28 16:48:31 2025 GMT
            Not After : May  5 16:48:31 2025 GMT
        Subject: CN=680fb15f-940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:07:fc:78:ff:b3:99:e9:7a:05:ef:63:5d:
                    56:61:c3:84:35:ae:f0:9c:fa:77:7c:c8:b3:5d:c0:
                    d3:51:2c:c8:79:18:46:03:c0:bb:7b:fc:42:44:ca:
                    34:2c:a4:7d:95:2d:cb:4a:b7:0e:f7:30:aa:0c:fe:
                    ca:fc:80:fc:6f:ed:81:e2:2d:50:f7:42:f8:e8:68:
                    02:7e:84:68:4f:97:ee:5f:8f:f6:c2:32:de:99:64:
                    cb:f9:5d:9d:1a:68:b2:6c:5a:91:7e:0d:4c:81:78:
                    cd:aa:dd:a5:d5:53:15:19:62:be:56:ba:ef:53:da:
                    29:de:6d:8b:bb:22:ef:bc:80:37:0d:6b:39:dd:e7:
                    03:92:7f:8b:cc:1b:45:0e:c6:80:6d:83:87:17:31:
                    a1:7f:59:2e:dc:75:70:0a:6f:82:a1:14:44:b2:1a:
                    b8:54:4a:f6:f3:98:0a:7b:e9:c6:2e:e5:4a:0f:b6:
                    b4:88:af:99:2e:c3:d7:83:9c:96:2c:86:e5:98:b5:
                    0e:6f:7d:f8:91:ad:49:d2:f7:42:54:c1:9b:78:d3:
                    86:49:eb:07:49:fb:9f:61:b7:29:3f:a3:10:9c:2a:
                    85:cd:57:dc:6a:b6:39:c6:50:59:3c:f2:10:53:fa:
                    e3:98:f3:e4:15:02:58:57:6d:66:ce:76:15:8b:b1:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0E:70:59:62:4C:80:F0:B9:67:52:5D:B8:81:7F:A1:0E:9A:F2:5A
            X509v3 Authority Key Identifier:
                keyid:16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:59:48:dc:85:cf:20:97:11:da:f3:94:6e:1f:f8:0e:5e:
         5d:d1:2e:aa:6e:78:0f:e8:f9:d7:14:dc:b1:95:78:e8:09:ad:
         7f:73:3e:e0:35:20:6a:05:85:41:d6:39:30:51:5e:26:4b:04:
         aa:57:90:57:fa:d9:4a:b7:4e:3f:f5:0d:31:ac:d8:a0:1a:7c:
         f1:81:50:50:7b:65:34:e5:d8:2f:5d:52:ce:ac:d9:33:2a:87:
         df:7f:b4:c6:66:86:d3:3a:91:a9:81:43:98:89:cb:54:ed:95:
         44:ad:42:66:52:8f:76:bd:0b:86:af:cc:45:bd:73:a8:9b:dc:
         6a:fe:b2:1a:75:0d:e0:60:01:3f:bb:45:2b:11:00:fb:34:8e:
         8d:a3:5a:11:2e:6f:fb:1a:e2:5e:15:01:94:4c:0d:73:64:07:
         12:ca:b7:16:18:1e:b2:c8:7b:48:1d:da:52:ea:a4:2a:15:d1:
         8b:db:cd:d4:e8:cf:f1:86:6c:4f:89:82:5d:8d:ff:e1:a8:22:
         f7:0d:4f:21:8a:2b:01:89:bc:ee:76:9a:7e:4e:27:65:2e:e7:
         a8:9c:ff:c6:0c:8f:a8:4d:ec:93:32:d4:57:28:d4:bf:8e:69:
         a9:9f:f1:13:c0:2c:4e:ab:5b:6a:13:29:be:cc:83:47:a6:a2:
         92:ac:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:23 2025 by rpki-client on console.sobornost.net