Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File:                     47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier:          jJUz9VyShnZo0Yzk75Uz94jjpH3jUoKQAp0G82N9seI=
Subject key identifier:   C7:45:4B:24:88:CC:0E:20:51:D0:D7:23:2E:5B:91:48:E2:C1:D4:B4
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number:          078B
Signing time:             Sat 26 Apr 2025 21:05:25 +0000
Manifest this update:     Sat 26 Apr 2025 21:05:24 +0000
Manifest next update:     Sat 03 May 2025 21:05:24 +0000
Files and hashes:         1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: huiNV/oYmBBhIH05ertd981Ma9ORHCMriJyXfgpUZ8g=)
                          2: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: XG/yWG4WDbh/MIdJR6dBMm/WynV56cePJGSqotWER4c=)
                          3: 7C8D74D43CC011EFAD90AC3AC4F9AE02.roa (hash: FLuUDUZLzFBpjgjpzZS1FAy/kyT3R1jD8dtHJ+DGsc8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Apr 26 21:05:24 2025 GMT
            Not After : May  3 21:05:24 2025 GMT
        Subject: CN=680d4a94-4aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:27:6c:01:97:06:58:fe:3e:59:7a:4f:61:
                    43:d9:b9:36:8e:31:a7:11:75:9c:89:c2:bb:6e:22:
                    28:a4:ae:1e:67:d5:c4:44:5f:09:11:6c:32:5e:94:
                    4c:f9:39:55:df:6c:c2:cf:3c:b7:ac:e9:56:60:26:
                    eb:12:b8:67:0b:b0:5f:a6:0b:8b:e4:83:fb:cd:70:
                    62:ee:96:1a:c1:ee:78:f6:e7:3f:f6:a5:9e:ad:7b:
                    ba:d9:f3:5f:ad:0a:5e:be:68:1f:8f:d3:be:f0:b3:
                    9d:0f:8b:98:c7:8f:be:6e:76:d5:c1:d5:f1:22:d8:
                    97:1b:92:1d:ad:d7:77:c2:de:96:69:eb:e5:db:69:
                    16:49:fe:4f:f2:8d:65:f8:04:af:75:aa:ac:ba:d7:
                    ea:02:2d:4d:3f:67:f5:29:a3:29:2f:38:df:cc:db:
                    54:c3:3c:50:01:be:27:e9:4e:84:09:3a:a2:21:f5:
                    36:2a:ba:b5:f8:bb:b0:48:8e:f4:c0:38:f0:25:9b:
                    f2:40:4d:db:69:39:e6:2f:29:68:3a:41:7c:2f:11:
                    76:1f:17:29:23:9c:77:f7:e5:ad:a6:3c:20:de:9c:
                    94:f4:f8:31:23:a6:07:93:f9:bf:2d:b4:27:79:46:
                    5a:0c:b0:b7:58:75:db:44:0a:41:01:23:e0:77:62:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:45:4B:24:88:CC:0E:20:51:D0:D7:23:2E:5B:91:48:E2:C1:D4:B4
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7b:01:8e:2f:c7:bb:ed:45:1f:c7:86:86:32:6f:e6:6b:74:
         fe:0b:9e:7b:50:e4:e6:b2:6f:b0:ed:5f:50:37:40:a5:8c:39:
         3e:45:69:27:c8:1e:b5:46:d2:f7:fc:1f:56:b9:55:de:09:e5:
         e6:6a:4b:e2:b1:f7:7f:f6:f8:fd:8c:42:33:c0:c2:35:ad:b9:
         16:23:74:22:35:ed:f4:21:c3:ac:28:62:9f:a1:9c:9a:05:e0:
         a6:9d:63:6e:f1:1d:c2:a3:76:fd:3c:d1:29:e8:40:d0:37:56:
         ee:79:26:c0:6a:c9:dc:35:c4:a5:b8:bf:10:28:36:35:59:80:
         4e:91:49:ec:ff:c8:35:fb:d0:0d:04:32:ed:8a:14:10:14:79:
         55:d1:bc:fe:af:e8:d9:8b:3c:1d:16:9a:f8:6b:61:55:fd:3c:
         b2:3d:cd:29:1c:66:f0:30:43:60:bf:0e:36:76:d0:13:3b:c5:
         df:ca:8b:1e:5a:cd:2a:d1:4f:e1:08:3b:cc:ad:e7:8e:97:19:
         6a:09:6d:ce:04:29:a0:b4:59:17:5e:12:4a:6e:49:3d:2a:d4:
         4b:11:30:b2:a4:e6:73:70:cd:7a:98:a5:72:f5:0e:bb:a3:36:
         8f:a5:b7:8f:46:ce:c4:93:80:1b:26:03:32:ba:4b:56:96:8e:
         7a:1d:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net