Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
File:                     yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json)
Hash identifier:          +U7ckrKuwRyhJdr1SSlMlycZ9crnnoLlUeFl87G6T4o=
Subject key identifier:   C7:43:03:A4:EE:0E:8C:CA:1D:86:C3:4F:BE:99:47:F5:6B:E4:18:8A
Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56
Certificate issuer:       /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
Certificate serial:       103B
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
Manifest number:          103B
Signing time:             Sat 26 Apr 2025 17:19:45 +0000
Manifest this update:     Sat 26 Apr 2025 17:19:45 +0000
Manifest next update:     Sat 03 May 2025 17:19:45 +0000
Files and hashes:         1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: UII9FfmI6Zp285KOYMA2viWzMesS1BEEXV51qOOT+A8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4155 (0x103b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556
        Validity
            Not Before: Apr 26 17:19:45 2025 GMT
            Not After : May  3 17:19:45 2025 GMT
        Subject: CN=680d15b1-c4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f7:91:4e:0d:f8:9b:df:ea:87:ca:0c:13:21:
                    77:5e:6c:5d:4c:dd:96:43:11:fd:59:b9:c4:1c:a9:
                    6c:9b:f0:0a:2b:00:41:db:ab:6e:07:bd:fc:d3:b0:
                    eb:f1:06:16:53:1d:9a:80:ec:63:34:2c:d8:16:8e:
                    4b:ad:ed:f6:44:36:89:da:50:48:79:aa:55:16:d6:
                    45:c3:28:05:a7:c4:c2:b0:b2:cb:13:d6:8f:c9:4f:
                    d1:63:8e:0b:12:3b:bd:0f:95:10:67:26:39:6f:7c:
                    cf:d4:e2:cc:0b:59:41:a8:d7:03:1f:b4:54:ba:eb:
                    7e:ab:58:37:86:1d:47:6a:e0:ab:82:a8:32:1a:29:
                    31:df:9c:16:71:89:cb:a3:92:ad:4c:59:91:a3:33:
                    54:f5:1d:90:97:f6:39:f8:d5:9f:a9:57:51:17:82:
                    e3:52:a7:d3:a6:ec:4b:dd:10:0f:1d:04:ad:5f:5e:
                    ee:ca:56:73:de:ff:35:fd:db:e3:e2:a7:2f:d4:6a:
                    54:5c:e9:c3:d8:b1:b3:d3:bc:21:c5:ec:41:38:97:
                    16:ae:80:da:96:fe:bf:ed:06:68:ed:5b:03:80:0f:
                    d1:a6:97:a0:ae:ff:f1:ef:64:17:d3:74:09:3a:76:
                    df:cf:8c:26:16:b6:d2:93:cc:c2:5b:25:1a:d0:f6:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:03:A4:EE:0E:8C:CA:1D:86:C3:4F:BE:99:47:F5:6B:E4:18:8A
            X509v3 Authority Key Identifier:
                keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:87:40:88:2a:83:55:e3:cb:66:8f:7b:4d:90:69:ec:2d:
         49:88:26:73:7b:52:0b:1a:9d:f4:9c:a7:a2:13:2b:2a:d4:72:
         0e:fa:cb:81:6a:62:23:bb:e3:93:53:1f:e4:7c:2c:a8:79:84:
         12:9e:99:7c:b0:f1:81:b1:fc:ad:69:ca:cd:06:df:12:49:fb:
         ee:50:14:a9:2f:3a:09:3d:1d:66:de:aa:c4:e5:4c:58:fd:13:
         41:c0:cb:a6:96:60:55:32:d8:d0:f9:85:22:85:4e:49:90:b4:
         55:b4:b4:a7:5b:24:ca:ae:b7:74:b3:59:c0:81:68:32:14:f2:
         3f:4f:09:2e:7b:0c:04:98:b6:2c:b8:db:46:6f:bc:c9:b2:e4:
         f3:93:c5:56:a2:e0:f2:c8:d3:58:e0:57:ac:14:ce:6b:39:2c:
         ae:8b:33:e6:de:e8:80:1d:c3:8a:fc:d6:20:3b:04:c9:d9:e6:
         0c:f2:aa:42:c8:10:47:07:2d:3b:70:7b:0e:a9:27:6e:20:de:
         94:11:91:6d:67:f5:1b:70:52:cc:83:dd:74:10:03:ce:cb:ba:
         fe:46:8d:49:7f:28:53:b6:cf:8f:07:14:ba:31:fe:c0:f7:92:
         c2:b2:ea:6c:f1:6c:95:d8:b7:9a:0b:9a:dc:a1:66:8c:1f:7a:
         e0:27:fa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:49 2025 by rpki-client on console.sobornost.net