Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
File:                     vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json)
Hash identifier:          CYM/TOuIBENskHdT18kgqAVDdm2UsV62xu46Yhxvdw4=
Subject key identifier:   F0:24:06:46:12:9F:7A:D6:74:89:03:B8:B9:35:3C:64:2C:AC:BE:C3
Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
Certificate issuer:       /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
Manifest number:          01E1
Signing time:             Sun 27 Apr 2025 01:44:23 +0000
Manifest this update:     Sun 27 Apr 2025 01:44:22 +0000
Manifest next update:     Sun 04 May 2025 01:44:22 +0000
Files and hashes:         1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: qYa+bza0HSlO+T1ha0ew3t3ueHaSTsy/anPGoxe2sEU=)
                          2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: MoE7MEPCOyGB/9EMlTXV0tN9ZG/UinteAkee65hBGJ0=)
                          3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: IgAv5ZJEhwoH7uEYAUCxosir/fX/9UUdUT7CtlM0EKU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
                          rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
        Validity
            Not Before: Apr 27 01:44:22 2025 GMT
            Not After : May  4 01:44:22 2025 GMT
        Subject: CN=680d8bf7-d959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:fe:2d:a2:93:9f:97:81:7b:f0:80:1c:88:
                    2d:82:b2:07:7c:2a:39:da:c3:71:8f:48:10:e4:d9:
                    44:f8:56:6e:c5:e0:1e:ba:8d:fa:b4:6d:eb:1e:d0:
                    6d:06:48:97:9b:31:41:02:18:8e:d9:9e:df:79:9c:
                    e6:e2:61:29:5a:65:28:77:53:1f:13:4a:f8:5b:48:
                    af:58:32:c9:bd:cd:0c:86:a3:36:9f:b6:71:ce:28:
                    81:6a:89:52:a9:f4:29:de:de:ac:4b:1c:93:a6:88:
                    ba:ad:01:52:00:4b:5e:0c:06:5d:3d:b6:e2:6f:49:
                    61:b4:02:c1:ca:7a:bb:47:32:b3:fe:3c:2d:81:e5:
                    c9:8d:d1:3b:4c:e3:0c:2e:f0:68:f0:15:74:c0:51:
                    0c:55:be:6e:9e:29:dc:76:1a:9f:dc:27:3a:69:45:
                    6c:ca:5b:38:32:ba:58:c8:aa:1f:73:a8:4e:c9:bd:
                    bb:47:d7:2d:24:7b:08:ec:dc:63:2c:9e:d9:ff:98:
                    e0:6a:d5:dc:46:3e:58:b7:bb:9c:56:f7:5c:bd:af:
                    39:92:9c:0a:cc:6b:5f:ee:4e:cf:44:1b:2e:26:85:
                    ba:83:bb:cd:f4:5d:fd:8c:1a:08:89:fb:26:a1:2b:
                    96:fa:cb:d6:bb:44:4f:68:a6:51:ef:cb:5d:ca:fa:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:24:06:46:12:9F:7A:D6:74:89:03:B8:B9:35:3C:64:2C:AC:BE:C3
            X509v3 Authority Key Identifier:
                keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:3d:b2:01:a6:e4:1f:fd:42:36:2e:b1:04:36:fa:0e:1a:
         fc:60:63:bb:7b:bf:ef:77:48:48:9d:f4:5c:fa:4d:e6:66:b6:
         0a:d2:24:6d:a0:eb:26:7f:d9:68:ee:19:56:00:d1:d8:aa:2b:
         9d:7c:54:74:0d:3d:c6:09:44:dc:c8:c0:03:d3:ed:3e:e0:54:
         14:31:64:a1:c2:37:ab:50:44:a7:5a:ae:e0:b4:e5:0d:7d:4d:
         f3:08:e9:60:56:a7:7e:70:27:c2:d6:d1:00:da:f1:a9:75:c1:
         c7:9a:16:8e:16:76:70:84:34:43:55:df:36:6f:8f:21:06:b1:
         91:8c:0e:2c:49:fd:a7:8e:94:8c:79:0b:bf:42:73:49:a8:e6:
         2f:87:a9:76:23:3b:4e:df:36:ce:5e:03:e1:d5:b4:a3:51:ba:
         04:7d:3e:47:d6:2c:df:33:bd:1f:fe:ca:4d:b1:e3:49:ef:5f:
         80:f2:39:c7:93:8f:75:37:df:29:8b:55:a6:72:2d:c2:fc:69:
         77:1f:40:ef:f3:ad:63:8b:aa:75:fe:fb:a7:72:b0:fb:3f:73:
         47:d9:45:2c:7b:99:4a:a6:0d:8f:a7:f9:54:1a:eb:3a:82:b8:
         5c:c8:a9:1d:dc:aa:91:88:fb:8d:7d:f0:21:a7:95:b6:8b:7d:
         2d:ae:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net