Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File:                     gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier:          JxWdyME1Gf3oGXIi7uwH/ofA7MIZj9SeRGuXkV7eTwk=
Subject key identifier:   6C:8E:09:82:22:EE:85:40:C8:BA:E1:C2:91:50:FF:69:AF:66:2D:46
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer:       /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number:          01DB
Signing time:             Sun 27 Apr 2025 01:46:18 +0000
Manifest this update:     Sun 27 Apr 2025 01:46:18 +0000
Manifest next update:     Sun 04 May 2025 01:46:18 +0000
Files and hashes:         1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: shVTj9t/5CV3kQswJMXZj3QNN9wmR4UFu0cglYMHZ7Y=)
                          2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
                          rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
        Validity
            Not Before: Apr 27 01:46:18 2025 GMT
            Not After : May  4 01:46:18 2025 GMT
        Subject: CN=680d8c6a-74fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:6a:76:76:ee:f1:e9:1b:5b:c3:a1:5a:bb:
                    a8:84:35:be:69:d0:b2:a7:bb:3b:70:48:17:fa:73:
                    fe:37:4c:67:22:a8:a2:ce:ad:30:7f:bb:35:8c:24:
                    d6:37:3b:18:78:4b:4c:af:d2:6c:af:d7:b3:cd:71:
                    a9:49:5e:c3:19:dd:e0:b2:12:1b:50:bb:1c:2f:d4:
                    7e:55:82:ef:c8:cb:99:a3:39:f0:6d:a5:fc:fb:b8:
                    84:b8:a7:81:af:6d:e3:60:43:ff:45:00:8c:ea:5b:
                    cf:02:94:f2:81:85:cc:9b:8c:5b:34:f2:ee:7d:9b:
                    01:fb:22:61:f0:0f:7f:bc:09:2e:63:6f:f9:6d:11:
                    73:68:35:2d:0d:d4:63:c0:f1:ea:fc:b2:6f:bf:66:
                    14:4e:d3:b7:ab:47:96:bb:1d:cf:1e:b4:df:a8:f5:
                    31:f7:91:43:da:35:4d:61:4b:56:ba:de:75:f7:6a:
                    3a:c3:62:9d:06:2d:02:3a:6c:87:01:7d:73:90:26:
                    cd:96:79:ea:d9:82:4e:4f:df:87:99:f8:b2:07:ba:
                    4d:ba:22:ce:bb:b8:e1:fc:d3:ea:00:b1:91:b5:f9:
                    d9:4d:41:4f:8b:f9:ac:36:34:11:8a:c8:a8:1f:7b:
                    35:21:f6:a4:36:c7:da:c2:bf:7a:ba:7e:52:73:14:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8E:09:82:22:EE:85:40:C8:BA:E1:C2:91:50:FF:69:AF:66:2D:46
            X509v3 Authority Key Identifier:
                keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:4b:c1:8e:27:cb:64:ed:d3:26:54:38:3f:3c:40:02:17:
         0f:4f:98:f3:2b:0f:2b:bd:a9:85:99:3b:5c:6a:be:84:d6:f4:
         91:88:70:ea:51:0d:bd:e1:6c:a1:7c:8c:44:4c:db:be:b6:7c:
         d5:e2:81:35:3d:93:2d:22:02:1c:83:8e:19:d7:d4:da:97:4d:
         41:f7:17:86:5d:20:44:49:4c:69:55:55:ac:40:84:0a:03:48:
         b7:ed:ce:d7:87:17:71:b3:e0:6a:58:08:9b:f4:b1:ea:e6:03:
         df:66:6f:02:e1:53:27:90:49:11:df:47:47:26:64:06:44:22:
         39:d6:ff:50:15:f9:0b:e8:07:5b:9a:39:e4:f9:cd:96:73:70:
         1d:2d:18:34:18:f0:95:5d:9c:40:c6:d5:f3:2a:f4:dc:46:b4:
         5c:59:c8:55:68:14:5d:81:ae:0c:31:8d:0a:79:82:11:ad:36:
         c2:93:b4:8c:84:00:24:ea:a1:66:6a:ad:3b:b3:bf:f9:a3:43:
         88:c0:a8:fe:fe:8d:b5:13:ef:97:93:24:2d:15:f0:01:df:cf:
         f9:c3:54:8c:1a:e2:9f:89:a1:88:95:9d:a3:8b:43:2b:14:35:
         68:a7:0f:71:75:11:9e:e5:6a:78:7f:17:c0:8c:72:c5:82:b6:
         8b:2d:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net