Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          9uxlb8lAwmurNzl3N1nmJ7j5AWxamu/5LQIcHKhhok0=
Subject key identifier:   00:04:82:41:B9:11:04:1F:F7:34:9E:A4:72:D0:37:EC:0A:7A:E8:6D
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       1060
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          1056
Signing time:             Mon 28 Apr 2025 17:38:15 +0000
Manifest this update:     Mon 28 Apr 2025 17:38:15 +0000
Manifest next update:     Mon 05 May 2025 17:38:15 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: af4z2mz2RpacFpnm9x6jhqjJIr9oWa2AKcfAy6TWX/U=)
                          2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: EjWAvqG0p06YrvyVbdxSE0MmSKbTzSV0pAzJygZ+3+o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4192 (0x1060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Apr 28 17:38:15 2025 GMT
            Not After : May  5 17:38:15 2025 GMT
        Subject: CN=680fbd07-822a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:73:21:0a:7f:65:8f:c2:a1:1d:0f:ec:35:
                    66:c0:3a:90:d0:3d:8d:5d:07:51:7b:a4:08:1d:c0:
                    64:59:9a:ea:de:02:17:be:a6:37:d1:c6:80:38:25:
                    a5:88:dd:c9:34:e8:23:43:23:71:3f:3c:69:ca:6e:
                    d4:e0:19:0c:ee:14:50:24:28:b0:48:3c:12:9c:62:
                    23:80:0b:fb:cd:b9:f8:5d:09:0e:84:d4:bd:3c:e6:
                    c9:fe:b8:9e:9c:7c:60:fe:41:c8:56:cd:72:3d:fe:
                    09:1d:09:00:53:1c:ca:74:86:c1:ee:e2:47:39:2a:
                    b5:c6:4a:ee:ef:9d:e3:51:39:03:92:52:39:7b:09:
                    00:3d:e6:c5:3d:9a:6f:7a:96:f8:6d:29:9b:de:9f:
                    1d:ce:d0:bf:fb:1e:07:f0:e0:df:8c:0f:c4:36:a1:
                    7a:c9:b2:94:a4:16:ce:94:12:cb:d2:61:a5:40:e5:
                    b7:89:9a:3a:64:39:3b:cd:8c:36:22:a8:de:6c:06:
                    a3:cc:23:05:5f:3d:ce:da:43:53:81:b5:b2:64:ff:
                    a2:14:e1:31:ed:26:7d:07:b8:87:e0:2c:eb:82:da:
                    16:15:7b:44:e5:d0:a4:16:b3:2f:00:6e:d6:8b:88:
                    c4:2b:98:ff:5c:b8:62:19:05:82:0e:df:e2:d1:88:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:04:82:41:B9:11:04:1F:F7:34:9E:A4:72:D0:37:EC:0A:7A:E8:6D
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ad:0e:ef:ae:11:f5:ea:cb:6c:5b:6a:db:85:13:05:d9:aa:
         33:06:df:42:58:99:5f:60:27:cf:83:c0:a1:86:b3:34:9e:a2:
         ee:fa:87:cf:ed:1d:e3:e5:61:a5:f4:55:40:bf:3d:5b:e0:22:
         e7:a2:e8:b9:ed:52:9e:c0:9e:87:c6:1e:64:b0:b9:83:fe:d3:
         4a:dc:48:7b:ec:27:2c:7a:3c:55:d6:7e:aa:e3:fc:a1:03:17:
         67:d3:08:0c:f1:5d:bf:c6:fd:ba:bc:ea:88:41:9e:e9:4e:48:
         5f:e6:02:e2:a7:e5:31:31:05:13:a0:30:63:53:7a:32:b8:c7:
         7d:f3:92:ca:84:a7:da:62:05:05:2d:92:3d:6f:5c:d0:6d:c5:
         79:37:f2:8e:9c:8b:21:45:43:bb:ac:ee:c8:11:31:14:84:12:
         b5:96:39:af:e6:fa:b0:3d:3a:a2:ae:20:6a:76:58:14:0c:fb:
         b6:99:af:e0:28:e1:cc:ac:d4:3a:42:cb:06:7f:e6:94:13:64:
         a7:dd:f2:a9:8d:da:b8:a8:1d:36:7f:f1:01:94:60:7c:5c:fc:
         bd:c3:d7:26:cc:ef:a2:f0:d5:21:c7:58:5b:ca:40:76:17:a3:
         b5:bd:23:11:a2:ca:42:25:12:71:1e:c2:da:2d:b7:d6:e2:8d:
         36:c7:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:24 2025 by rpki-client on console.sobornost.net