Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File:                     MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier:          uQs/WH49aAi4EIT3Y6l1vI+yCzhZx1qOh8LyBxxdRbo=
Subject key identifier:   79:F9:41:86:30:F4:49:3B:23:0A:4A:EC:A6:E4:E6:4C:CB:57:69:59
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer:       /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial:       05DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number:          05BD
Signing time:             Thu 24 Apr 2025 23:00:07 +0000
Manifest this update:     Thu 24 Apr 2025 23:00:07 +0000
Manifest next update:     Thu 01 May 2025 23:00:07 +0000
Files and hashes:         1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: nTn8zvCXwKX5TpjMYoouBrReMgAoJtaygZUa3RJJIqc=)
                          2: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: 7DnrOBV+2NUrU5X6zz5SZm2S9etq/L6sq71V5Wzy0Aw=)
                          3: B9A42F96FEA211EDB9013076C4F9AE02.roa (hash: Vz2c1dAL2tzLijBpz5XdkyV8FKeYtLOeinzLmhM0fXs=)
                          4: B902532EFEA211EDB9013076C4F9AE02.roa (hash: +Adzl6dQW/LWPhNaA+sU3D3mSM91CUnI4jOcuyhxVQU=)
                          5: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: t289a4y8avgJBiwqGqR/a8EAfFLv6r10DhXTfUzfCdQ=)
                          6: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: LpmTyVuFiKxNlNatqdTKbndN71cWDdkV/vAgDWE3yxI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
                          rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
        Validity
            Not Before: Apr 24 23:00:07 2025 GMT
            Not After : May  1 23:00:07 2025 GMT
        Subject: CN=680ac277-4614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9e:15:87:83:99:c2:ce:0b:8d:2c:91:84:16:
                    a7:b1:30:b7:3d:24:cd:b0:75:e4:e8:49:9c:fb:bf:
                    d1:fc:33:b9:39:b6:a5:bb:2f:32:35:2a:f3:5f:a8:
                    27:91:36:ae:39:fc:4b:ed:3c:57:ee:1c:73:67:6f:
                    31:d4:72:d3:82:9c:83:f4:52:9c:f3:e3:ad:d5:9f:
                    be:33:c6:08:e5:f2:b0:12:66:dc:8a:30:85:2d:e8:
                    27:83:00:36:c0:e3:2a:e0:ba:0a:27:25:1b:2c:8c:
                    18:ef:86:7d:1b:fa:25:66:c4:64:3a:9d:f9:b7:15:
                    82:7e:61:15:cb:ea:98:40:f0:d7:e1:1f:34:d9:7f:
                    d7:2f:0b:ec:03:63:54:7c:1b:dd:22:78:c5:e1:f7:
                    94:74:3f:77:f2:66:50:0f:33:88:f8:9c:e2:16:22:
                    cc:a2:08:b2:00:cb:9f:b9:c3:45:ed:38:4f:e1:ba:
                    c1:a8:60:07:6b:03:03:a8:12:c2:fc:30:2c:b8:2c:
                    1e:85:c3:6d:4e:7a:d7:c1:b7:bb:73:bc:e1:c5:2e:
                    1a:f4:17:d0:fb:f9:a3:f7:c4:4a:c3:03:d9:57:ad:
                    95:eb:3d:4d:d5:28:e0:60:97:f3:2f:12:23:55:3c:
                    de:71:cf:db:7b:e1:3f:aa:1f:76:53:a2:b4:75:9f:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F9:41:86:30:F4:49:3B:23:0A:4A:EC:A6:E4:E6:4C:CB:57:69:59
            X509v3 Authority Key Identifier:
                keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:db:48:6b:20:85:46:8b:5f:53:47:86:cc:13:a9:08:6e:e5:
         cb:29:37:92:b7:96:d0:3e:ff:60:15:1b:8d:19:2a:eb:89:08:
         42:1e:4e:c1:08:fc:50:32:ba:7a:e3:9b:36:4d:fc:8a:2d:ff:
         90:b5:f7:cc:3f:1d:93:f8:65:57:ab:14:95:e7:49:c1:31:b3:
         2c:44:0b:db:5b:8d:93:b3:f0:9a:68:0d:fd:83:96:d8:9c:2b:
         5c:67:c3:53:52:05:f3:f3:b2:17:9d:ec:76:25:2e:2d:b2:e6:
         1d:cd:86:42:d8:de:05:95:fb:4f:12:e5:38:3b:94:64:55:fe:
         53:9c:6c:1f:7c:b8:a9:fe:0f:66:aa:7e:e3:44:86:a3:df:2e:
         c4:7f:dc:04:09:ab:2c:4e:05:f7:56:c4:23:68:ff:4b:7c:1e:
         20:81:dd:38:d7:b6:5b:c8:b0:f1:e5:17:9f:84:ab:78:49:95:
         cd:40:1b:06:6e:0b:9b:08:ec:ca:91:fd:18:9b:58:c5:89:69:
         84:72:b5:46:0f:d1:20:7f:c0:b1:4d:2f:89:4f:92:30:53:16:
         9d:fa:20:df:b9:4d:c5:20:57:0a:9c:d7:f5:7d:c3:4a:d3:ce:
         39:07:d7:c6:3e:0a:96:47:d5:c8:9e:2e:e3:88:36:fb:de:24:
         f7:8c:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:36 2025 by rpki-client on console.sobornost.net