Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File:                     MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier:          27fRJrvgW9lf/x4ZSYtX35xXq4fOcYTKm4lbUuo02yc=
Subject key identifier:   9C:B8:0E:D2:DF:44:D6:2B:CA:DB:F9:B2:D1:5F:8C:FC:CD:63:6A:86
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer:       /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial:       07B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number:          07AB
Signing time:             Sat 26 Apr 2025 21:00:32 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:31 +0000
Manifest next update:     Sat 03 May 2025 21:00:31 +0000
Files and hashes:         1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: 2+FNvpO5YhrxqO5ArB04vKuHsEL03S6iynBZGSHx+p0=)
                          2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: lS99nYEJf47mH+uz3vQLejaGLFETexj9dK3L1OTP7SM=)
                          3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +9tCipDB0aaHUVuA7yo8ZYQuS8o9q/CaWZgtKqaXci0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
        Validity
            Not Before: Apr 26 21:00:31 2025 GMT
            Not After : May  3 21:00:31 2025 GMT
        Subject: CN=680d496f-e362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:83:30:bc:cb:fd:41:55:d4:46:cc:d4:39:
                    b6:02:c0:ed:e5:7f:de:14:4c:ae:90:cd:78:af:72:
                    8d:6e:e8:d0:f6:6c:4a:86:4e:6e:b5:9a:06:1f:57:
                    aa:b6:86:69:71:f2:6b:49:0a:d0:86:96:17:7c:26:
                    ec:7e:57:85:91:e3:db:ef:2f:c1:98:c3:6d:4e:19:
                    48:0f:4e:32:2a:d2:5a:0d:b2:f5:86:27:95:d9:22:
                    d2:51:a3:23:7c:f2:cb:ce:24:67:fd:e5:50:6d:44:
                    8b:1b:0d:2c:8a:7a:7e:e4:f7:95:f8:b9:6a:36:3f:
                    d7:25:0c:b0:c4:d8:b6:5d:c5:f2:de:fe:9e:66:d1:
                    20:3a:9b:d5:0e:1c:cc:8f:61:7c:0b:c4:2b:59:e9:
                    23:14:7e:58:ed:1f:44:a5:0e:6d:a9:7c:8a:e3:d2:
                    aa:fc:16:2a:c6:cb:e6:bd:09:fd:f3:c9:48:d1:f4:
                    1c:4d:b9:f1:7a:60:a7:10:83:1d:1b:3d:d4:ce:be:
                    25:8a:79:4a:f3:72:44:20:4a:7d:1d:44:07:7f:a6:
                    39:68:a6:e6:e7:2a:34:63:89:8d:7f:11:5e:aa:09:
                    f5:ef:21:af:51:d2:a1:61:7b:87:f5:81:5e:55:c2:
                    1e:e1:4b:3a:89:1b:7f:13:cc:75:d2:60:27:86:8d:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:0E:D2:DF:44:D6:2B:CA:DB:F9:B2:D1:5F:8C:FC:CD:63:6A:86
            X509v3 Authority Key Identifier:
                keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ad:0d:91:61:18:03:b8:be:7d:32:70:fa:e9:f6:42:73:e9:
         ed:54:c9:48:46:0e:22:66:5e:47:81:ce:34:0b:70:8e:91:0f:
         16:11:00:af:1c:a1:3c:15:96:6e:30:2a:bf:73:83:30:6a:3b:
         7c:88:4e:e1:9e:41:d7:82:83:97:d4:0d:fb:42:d5:7a:59:d6:
         1b:d4:f1:e1:7a:97:da:4e:52:dd:89:33:3a:ce:e0:fc:09:1e:
         d4:88:e7:33:95:eb:2f:5f:ed:eb:32:ad:3f:0c:5e:7a:f2:03:
         2e:f8:6c:c2:ca:ad:eb:0f:54:92:85:44:fe:af:c0:6f:2a:a5:
         c2:f9:4a:b7:90:77:58:0b:50:54:c2:58:1c:c6:a8:43:6e:6f:
         51:4b:25:c2:0a:4e:8e:67:9f:34:54:63:e5:7d:dc:8e:9f:91:
         6b:6f:0d:ef:c4:cb:58:cc:0b:3f:35:a5:3a:20:17:6b:0d:e9:
         bd:cf:74:0a:10:a7:de:99:da:80:eb:fd:dc:20:16:81:a5:5d:
         e0:95:53:fe:3c:f8:c9:19:31:ad:0c:af:20:02:3a:40:01:f2:
         ea:dd:a0:81:df:14:c8:7d:b6:8a:6a:ad:3c:da:80:22:87:c9:
         39:32:e6:fa:e6:8c:e7:70:9c:48:05:36:68:ae:59:6d:0d:fc:
         e8:66:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net