Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File:                     _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier:          AI4/C7hYTA95EwnAdAa/EZhe9hCHceHCPNIm44jSkOM=
Subject key identifier:   D5:68:78:7C:3B:66:D7:71:D5:91:82:39:55:83:06:62:E2:9A:08:B1
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer:       /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial:       0530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number:          052C
Signing time:             Sat 26 Apr 2025 23:10:33 +0000
Manifest this update:     Sat 26 Apr 2025 23:10:33 +0000
Manifest next update:     Sat 03 May 2025 23:10:33 +0000
Files and hashes:         1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: IWzmXkhEqkNXeldrBHgmuOaXvZBUvvhXfWQsSL0nrpE=)
                          2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: L6NkrUDLV6Dmkk8kbRWqS9urNPurijV7bD/FqK/kzIo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
                          rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
        Validity
            Not Before: Apr 26 23:10:33 2025 GMT
            Not After : May  3 23:10:33 2025 GMT
        Subject: CN=680d67e9-46b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:1e:77:1f:35:1b:0b:66:5e:4a:c2:f9:9b:
                    79:d4:96:8e:74:1f:10:e6:55:59:64:8a:69:41:68:
                    8e:15:1f:82:cc:ac:0a:e3:6c:8c:95:f0:76:fe:8e:
                    09:70:75:a1:a9:9b:f4:e7:c8:97:5c:08:12:b4:90:
                    8f:89:d4:d7:d6:01:77:c3:c4:ec:d2:be:87:bc:6e:
                    34:a7:12:a9:26:bb:03:5f:ef:48:aa:07:2f:a3:e4:
                    cd:64:7a:84:42:de:cc:65:1a:5d:37:7f:2d:2b:03:
                    b3:bf:d6:96:47:7c:be:77:f8:7f:e3:a7:48:4f:4c:
                    97:2b:e2:14:d1:02:b7:bf:8b:80:ae:55:e0:34:72:
                    76:1b:c2:dc:92:c2:7a:de:19:64:c3:5e:c7:d4:20:
                    be:b7:d0:cb:a7:db:f5:80:d3:ce:24:54:03:ed:b6:
                    5d:f6:57:03:30:4b:b8:a5:88:9c:87:12:65:f2:d5:
                    47:d7:bb:46:69:51:3e:cd:16:67:f1:7c:94:e5:96:
                    83:5e:76:17:01:ef:b4:89:06:30:ae:ec:40:5f:53:
                    90:d5:bd:30:bb:b0:69:87:c3:ce:50:a7:fd:b6:ea:
                    f8:4f:f3:4e:08:ea:d9:95:b7:81:fb:02:0d:c4:da:
                    9c:ec:7e:84:67:5a:59:e5:79:30:1d:06:4e:10:6b:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:68:78:7C:3B:66:D7:71:D5:91:82:39:55:83:06:62:E2:9A:08:B1
            X509v3 Authority Key Identifier:
                keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:e4:28:2b:e2:0d:00:33:bf:ab:4c:17:26:ae:06:9c:70:
         cd:a8:72:46:96:57:6c:b5:a7:10:c5:b0:72:89:97:1e:92:6c:
         cc:b3:0d:4d:e1:ce:f9:af:1d:07:9c:f9:ba:0f:7a:3b:48:74:
         79:8e:aa:33:37:f1:4e:10:eb:f6:46:ec:44:d4:0b:28:3f:9e:
         8f:fe:08:51:e4:3e:42:3a:0e:8b:59:95:2e:ee:3c:e5:16:b9:
         08:3f:35:3b:af:54:88:3d:a6:0e:c9:19:64:ee:f7:32:78:9d:
         c3:e0:9d:25:e2:4c:f8:61:7b:1f:89:22:33:38:06:6b:da:eb:
         25:a9:ef:f4:61:5b:0a:64:31:4b:72:63:70:fc:70:e3:6a:27:
         4c:0e:ae:d3:bb:35:50:9a:a2:ac:0a:6d:51:b1:b2:47:cb:b5:
         66:d5:68:91:2b:f0:31:18:7c:3d:1b:06:2f:89:26:bb:e7:6a:
         59:11:e2:db:ed:ca:c6:eb:f5:cd:b8:ae:90:e9:57:25:98:19:
         d6:f4:ca:a3:c2:23:fa:8c:2c:5c:16:5f:1a:d8:92:7b:ad:61:
         ba:ee:d2:09:ab:71:13:60:04:4e:71:b9:71:d3:15:23:26:2e:
         33:37:d2:57:85:79:26:17:da:54:fa:62:ae:00:dd:07:60:2a:
         97:2d:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net