Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
File:                     Y-N84NAMINhocKc_1uy8iZwbngs.mft (raw, json)
Hash identifier:          rRF4iT8DrwuDT08hit1G3tQvItTTxnV+V5RjWcEQX4M=
Subject key identifier:   09:C0:B6:AF:46:17:17:41:7B:39:D4:9C:43:4A:21:BC:1C:A5:84:D3
Authority key identifier: 63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B
Certificate issuer:       /CN=A9121865/serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
Certificate serial:       06B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
Manifest number:          06A2
Signing time:             Sat 26 Apr 2025 21:53:10 +0000
Manifest this update:     Sat 26 Apr 2025 21:53:10 +0000
Manifest next update:     Sat 03 May 2025 21:53:10 +0000
Files and hashes:         1: Y-N84NAMINhocKc_1uy8iZwbngs.crl (hash: Z9x77lgdCGxuNhMOXzrQadP1nwS5SwmQW7egg6Fy/ZQ=)
                          2: A642A4AC650A11EB83E0FE0FC4F9AE02.roa (hash: eQ2J/fmizWMOory711iqHEB6K5GkScUdEbc7vy/Au7w=)
                          3: 602D049AC1DE11EB98E1AD43C4F9AE02.roa (hash: tOvzYrsalWJNmj9WItm2EeNfbIzeiJCLx/kwvWJGmiM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl
                          rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 21:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713 (0x6b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121865, serialNumber=63E37CE0D00C20D86870A73FD6ECBC899C1B9E0B
        Validity
            Not Before: Apr 26 21:53:10 2025 GMT
            Not After : May  3 21:53:10 2025 GMT
        Subject: CN=680d55c6-035e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:54:79:70:7d:c7:80:79:c4:ae:31:dc:3b:
                    df:e6:60:32:d0:de:3d:ac:7c:52:2e:7e:d4:46:d3:
                    04:e1:83:4a:13:55:ff:6a:6e:24:e0:60:b7:f9:21:
                    7d:a2:50:5c:b4:32:5e:2d:41:3d:98:d9:dc:41:47:
                    86:5e:be:85:f2:d2:5d:88:21:d8:93:06:f6:3d:1d:
                    a7:26:0f:69:78:0d:21:3f:48:69:50:b7:ed:6c:71:
                    41:50:6d:15:7d:0b:89:8d:63:1a:1f:7d:dd:48:85:
                    47:a4:1d:b0:48:b1:8e:b8:6a:34:38:dc:0b:a0:51:
                    e6:3b:14:05:e4:c7:ed:cd:20:69:c0:ff:71:42:51:
                    fc:a7:cd:42:57:91:19:13:ea:ae:2f:e3:75:2e:81:
                    f9:f4:d1:ad:52:02:8d:e4:21:e0:1a:fb:ef:c7:71:
                    79:2e:e5:d4:92:a8:43:be:4a:c7:f8:07:79:3b:33:
                    2f:b9:76:01:01:43:df:13:51:ba:bb:f4:2b:bd:82:
                    74:44:1a:9c:dc:53:4c:b5:fd:8e:d3:e7:dc:37:24:
                    46:61:35:e4:27:a9:45:ee:ff:7b:1a:67:18:9b:a1:
                    7a:bd:d6:78:c8:00:05:61:ac:2f:d8:65:ea:80:8e:
                    bf:d5:e9:4b:d8:f1:16:a8:3b:41:80:fd:01:85:0d:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:B6:AF:46:17:17:41:7B:39:D4:9C:43:4A:21:BC:1C:A5:84:D3
            X509v3 Authority Key Identifier:
                keyid:63:E3:7C:E0:D0:0C:20:D8:68:70:A7:3F:D6:EC:BC:89:9C:1B:9E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-N84NAMINhocKc_1uy8iZwbngs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121865/76B6A0D2650811EB8F26150DC4F9AE02/Y-N84NAMINhocKc_1uy8iZwbngs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:0c:29:35:18:4d:a1:4f:ec:8f:78:0f:fe:38:2d:9b:92:
         58:9d:51:7d:74:a9:9e:71:36:b2:ee:a5:c6:18:47:a4:17:16:
         c1:6f:28:f9:cf:2a:7a:61:70:57:3f:27:59:49:79:d7:39:82:
         bd:8e:e0:eb:e2:64:15:0d:03:f1:2f:dc:11:81:02:a5:5e:8b:
         8b:75:16:e1:12:bf:5a:74:90:05:49:20:f3:70:de:ad:8d:39:
         a1:a8:d2:88:e9:8a:13:78:52:eb:be:22:c8:74:6f:50:a0:6f:
         9e:d1:f4:2c:f4:04:bf:80:6f:4f:f5:d4:99:ee:fb:ce:3e:d2:
         8a:b8:96:63:e5:0c:37:89:4b:2d:d8:01:45:16:fb:df:f2:9e:
         b7:87:79:01:48:50:71:0a:ca:60:23:d6:6a:0e:2f:d4:c8:7f:
         1c:b8:2e:08:78:c8:87:4e:4f:32:62:71:4b:1b:00:61:1d:5e:
         8e:e0:95:81:b4:56:42:a9:c3:07:ed:26:99:8c:ba:26:b1:13:
         2f:59:25:81:eb:34:7a:8c:54:df:97:52:cc:ed:bf:55:cb:ea:
         aa:8a:08:a2:cf:e9:c1:3a:9c:9e:a3:69:08:66:84:5e:76:65:
         c9:53:50:58:0f:ff:f8:41:3f:ff:03:a7:19:77:84:fb:0d:09:
         41:0a:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net