Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File:                     yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier:          L/zakgFtWUsuKEPi4KIeMRK25eaOLLIyLbthm1WHZ1k=
Subject key identifier:   5A:C5:24:44:53:7F:B3:DE:F9:38:6D:BA:17:78:0A:12:7C:CA:57:9E
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       0405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number:          03F9
Signing time:             Sun 27 Apr 2025 00:08:18 +0000
Manifest this update:     Sun 27 Apr 2025 00:08:18 +0000
Manifest next update:     Sun 04 May 2025 00:08:18 +0000
Files and hashes:         1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: J04ly3frsviJ3F3qHNxXS0dAYgFzbNV+Ncw8HVL8dig=)
                          2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=)
                          3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Apr 27 00:08:18 2025 GMT
            Not After : May  4 00:08:18 2025 GMT
        Subject: CN=680d7572-9fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:24:63:75:a8:d4:6e:dd:9b:4c:83:8d:2a:
                    2a:53:bf:b6:22:1b:05:cf:2a:19:71:9c:cb:92:c7:
                    4f:c9:17:6d:ae:09:50:12:43:b4:43:af:7e:e3:34:
                    45:ab:7d:34:59:88:f5:d5:f8:af:7e:e7:59:d5:29:
                    df:6e:e1:ad:0a:6f:fd:c8:3d:b5:7b:73:69:78:fd:
                    90:c7:62:90:39:21:7c:e5:0c:d9:c3:b0:92:32:7f:
                    5f:14:d4:1e:4e:62:8e:2c:81:3d:95:00:04:eb:05:
                    19:85:92:14:64:e8:76:cf:b9:d5:7c:45:90:99:c8:
                    2f:45:6a:ea:ff:86:74:82:ae:23:89:b1:51:85:76:
                    78:7e:bd:b1:e8:f8:a7:aa:88:9b:ac:df:e6:20:22:
                    3d:ad:6b:22:19:48:6f:24:4a:ff:67:c0:ee:07:18:
                    72:c3:40:1a:58:1a:5c:06:c0:f0:cb:82:f6:9d:24:
                    a0:08:13:f1:5c:36:16:f0:4a:26:5f:c2:5d:f9:2b:
                    b3:89:6f:15:2b:3f:87:c0:e2:52:64:ce:44:69:f8:
                    3e:13:00:cc:ed:04:62:ca:46:b3:cc:a4:22:02:18:
                    b9:bf:86:f3:8e:5d:ee:73:88:33:12:c5:46:4b:39:
                    79:8c:16:54:76:4d:77:e1:15:50:89:d8:bf:56:a2:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C5:24:44:53:7F:B3:DE:F9:38:6D:BA:17:78:0A:12:7C:CA:57:9E
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e8:86:a5:7e:da:d5:8a:cc:65:f0:bd:23:c9:1a:14:21:73:
         49:69:1b:09:3d:49:14:f5:72:7d:b3:84:03:1e:5e:7a:f8:f4:
         32:c1:6b:8c:ef:50:8a:f7:45:ee:e8:16:6b:f7:39:ae:83:bd:
         86:33:01:ff:89:df:bf:4f:19:54:ef:42:55:d5:2d:0e:3a:26:
         dd:5c:0f:58:f6:0e:ad:8c:d2:6b:f9:b8:c5:fd:ac:ac:21:e9:
         0a:ca:78:ff:de:4e:a0:b2:83:14:38:92:38:65:b8:b0:e3:0c:
         d4:35:5a:49:fd:26:92:47:39:3c:b8:9d:96:74:80:e5:a8:2f:
         cc:0f:8f:0d:bb:4f:68:34:5e:78:9a:6a:a2:30:a2:6f:71:a6:
         b7:27:6e:76:bc:73:fd:d8:6f:4b:c8:bf:05:29:50:02:80:27:
         ef:0f:c8:9b:c1:dd:73:c0:24:40:29:75:58:13:60:29:28:57:
         55:b6:f2:ff:57:68:75:08:5e:d1:f8:9c:84:79:9a:d2:ad:da:
         58:cc:1b:75:59:db:e4:1d:3a:ea:25:0a:bd:99:e1:03:4e:d9:
         82:50:56:08:42:b3:c5:13:4b:f9:31:ce:44:d2:94:da:f1:1e:
         7b:42:eb:3b:cb:db:e0:b7:0b:92:d1:72:98:e9:41:72:39:36:
         ab:06:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net