Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File:                     LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier:          UAIf7sb5F0bugR9P2GIP20lkhhkBaYANamwzicPKf2E=
Subject key identifier:   66:3D:5D:75:72:AF:18:2F:B7:3F:CF:F3:3D:F7:BE:0F:82:C6:77:F2
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer:       /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number:          0625
Signing time:             Sat 26 Apr 2025 22:25:36 +0000
Manifest this update:     Sat 26 Apr 2025 22:25:35 +0000
Manifest next update:     Sat 03 May 2025 22:25:35 +0000
Files and hashes:         1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: AjIX7puo6nAP3b+ZHyHqfQaBG9hILRw/UFzVRE5LAuE=)
                          2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: OWvKVTifRt9Iu2tVWtoXO+U1lovVBowFKNMDPAP9PZY=)
                          3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: 9Ald5xMfp6PS+kyx1BsQkwiBFoLKe14yvlhyEiXrANQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
                          rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
        Validity
            Not Before: Apr 26 22:25:35 2025 GMT
            Not After : May  3 22:25:35 2025 GMT
        Subject: CN=680d5d60-6d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:45:d8:1e:07:fb:60:06:d9:fb:c1:e8:eb:
                    5e:11:32:71:20:a7:52:ee:89:c2:e0:cb:73:af:b8:
                    b4:78:e1:2d:99:fa:51:1b:43:08:f4:49:af:93:3b:
                    6a:7e:cc:6e:8e:fe:90:88:1f:cf:89:1f:32:2a:28:
                    f5:41:83:72:63:8b:c7:e9:24:e0:de:07:aa:95:97:
                    9e:3d:30:da:e4:86:b1:a6:1a:66:ed:c1:9b:ff:91:
                    89:fc:c5:48:ec:b0:60:fb:b4:c7:a9:40:f8:79:dd:
                    ae:13:ee:73:59:56:c7:60:f1:0b:69:d2:72:10:2e:
                    d7:be:38:dd:5f:03:34:73:31:b5:d4:5b:2d:5f:e2:
                    22:3d:42:84:71:75:2b:74:b1:04:87:31:50:3d:18:
                    b8:c4:09:d8:64:5d:7e:a5:75:cc:23:fc:e4:dd:8e:
                    16:96:35:38:80:c9:fb:ed:8f:05:68:c3:38:e0:2c:
                    72:69:b1:ae:64:f1:6c:2b:61:9d:96:0c:ce:6a:a0:
                    a9:c2:64:b6:13:76:85:ee:7e:fd:e6:b9:ba:88:47:
                    a0:c2:5e:d9:26:ff:47:4e:02:27:4f:f6:6c:b0:aa:
                    8c:ce:aa:48:37:fe:af:59:0b:13:a4:ff:de:e3:c1:
                    6c:24:6f:0d:88:0e:6b:7f:e9:9f:1d:6a:a2:b7:af:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3D:5D:75:72:AF:18:2F:B7:3F:CF:F3:3D:F7:BE:0F:82:C6:77:F2
            X509v3 Authority Key Identifier:
                keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:9f:6d:bf:a0:2d:b9:f0:01:87:57:60:f7:74:8d:47:36:
         03:57:dc:89:18:bc:9d:f6:7b:4c:6d:55:84:b4:2f:ac:12:82:
         6c:45:e8:76:ab:8d:e4:55:65:b6:86:c3:d4:b8:87:78:f5:36:
         04:b0:9f:22:6c:62:f8:5d:de:c0:f7:fe:7f:dc:93:be:cd:c4:
         1c:bc:b7:69:68:76:98:a1:2c:27:49:5b:be:34:28:f1:a9:76:
         11:88:f4:fc:7d:ba:19:c0:1f:7a:70:49:8b:43:67:78:b5:d8:
         c5:55:da:2a:e9:c5:10:c4:f6:55:b2:9f:ef:ca:92:99:b5:a5:
         b2:14:e8:5e:8a:11:f0:75:ac:ba:77:8f:be:e9:d7:5f:7c:ee:
         df:d1:e7:a7:79:53:e1:32:ea:25:c0:1f:22:49:19:a2:98:71:
         c3:22:b2:bb:66:cd:48:ad:3c:a3:6b:1d:59:f9:88:bb:f1:b2:
         ac:08:9e:d0:34:52:48:b5:0b:f5:d0:d2:bf:08:b0:12:d2:83:
         98:c8:c7:fc:21:a5:41:7e:81:c7:a8:d7:d6:05:fd:dc:a2:47:
         3d:1c:15:1a:20:07:36:ca:d7:bf:be:c3:f2:92:e5:eb:66:5a:
         2c:99:c1:dc:ac:1e:26:90:2f:1b:fb:7c:5a:2c:63:c8:4b:60:
         7b:15:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net