Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          FUvKJqL/BSgbrQQ1KSNLxhh3PyFfDiYw0NZTN9kGRlE=
Subject key identifier:   85:7A:10:67:40:B2:9F:D9:12:BC:C4:4D:94:AF:15:C2:BA:E4:20:F5
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       079A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          079A
Signing time:             Sat 26 Apr 2025 21:00:34 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:33 +0000
Manifest next update:     Sat 03 May 2025 21:00:33 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: 94bNAxz7wQVF8wLkVBShhI9zMqxlhz4g2WVSmN3D5pM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: Apr 26 21:00:33 2025 GMT
            Not After : May  3 21:00:33 2025 GMT
        Subject: CN=680d4971-05a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:17:8c:73:43:21:c7:e8:fe:4d:9c:77:e5:
                    78:47:0a:c9:33:d9:c4:06:5a:fc:c3:2a:a0:54:ee:
                    b9:83:69:05:38:dc:92:02:21:52:a3:25:ba:ad:e6:
                    27:4e:f9:ba:8c:38:10:70:cd:1f:28:71:19:9a:aa:
                    f4:5a:63:0f:37:77:8b:40:4c:dd:f8:12:7f:a7:fd:
                    55:8e:71:20:0c:80:84:5e:e3:84:45:36:2a:a5:ab:
                    80:41:69:3b:db:0f:85:60:46:9e:c7:23:ae:ce:27:
                    f1:30:93:4c:56:f1:21:47:67:e3:78:55:f3:00:ee:
                    37:4a:e4:c7:f9:44:b3:5b:68:6d:c3:7c:10:0b:e2:
                    96:2d:03:b9:22:62:d7:a6:59:23:d9:91:fe:98:59:
                    0e:f8:13:5d:07:e6:e4:c4:0b:4a:26:33:c9:4c:eb:
                    69:c7:3f:9a:5c:05:20:db:37:47:b0:d7:50:b6:d4:
                    39:d9:93:20:6f:4b:ff:68:e7:12:74:10:88:d5:bc:
                    ab:61:52:c0:12:af:89:4c:a9:2d:29:94:1d:e6:46:
                    0a:d6:aa:9a:60:a5:9f:c7:4d:15:83:9a:bd:c6:86:
                    83:39:a5:40:cc:71:b9:0b:ae:d5:ed:5c:5f:f2:a2:
                    d6:9e:38:29:3b:de:87:7d:75:dd:04:c3:2f:50:21:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7A:10:67:40:B2:9F:D9:12:BC:C4:4D:94:AF:15:C2:BA:E4:20:F5
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:43:8b:17:7c:ad:29:e9:bd:ad:b6:0a:2b:91:6f:f7:7c:26:
         7b:65:52:2a:5d:20:4e:98:32:69:a2:e2:40:bf:09:ca:3e:11:
         30:5e:72:85:ba:70:4e:ab:b4:6b:bb:55:53:21:75:1a:5e:17:
         ce:f7:cb:cc:b5:18:d9:ad:14:2c:9c:53:4a:08:9d:9b:fb:1f:
         2f:e4:c6:f1:84:2f:8a:83:57:03:ab:49:d5:60:bf:69:c1:87:
         53:d1:c4:43:8b:8f:f5:1b:e4:7b:17:4a:2f:d7:40:f4:ae:1d:
         6d:87:b1:8d:00:c6:b9:1d:54:cc:cc:e6:ec:98:61:02:7e:4c:
         2a:54:32:e1:35:07:97:48:2f:0b:99:da:72:69:e7:2f:c7:ba:
         96:13:cc:8e:af:0d:ce:89:fd:24:33:fc:2d:19:bc:0b:b5:16:
         c7:96:01:9b:62:fb:bb:fe:87:4a:42:06:8b:17:55:62:01:45:
         01:a3:37:6d:87:62:bf:1d:cd:63:11:92:4e:72:16:20:e9:60:
         53:57:73:c3:0f:cf:fa:84:3d:ea:4b:91:1c:cb:83:ed:e7:7a:
         8e:97:19:46:55:57:57:ba:c5:c9:67:07:26:45:77:a8:46:33:
         dc:23:f4:b3:75:8c:9f:9e:4f:a1:b9:f3:df:5a:d4:ce:aa:ef:
         9d:15:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net