Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File:                     v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier:          qVmzuEU2J4O8MGReKlwaXtQG+SlN6eSYImbmDyeCqks=
Subject key identifier:   C8:8C:2D:2A:DF:49:AB:39:7A:DA:5D:A8:4A:84:BA:7E:B2:C5:7A:28
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       06BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number:          0668
Signing time:             Sat 26 Apr 2025 22:27:14 +0000
Manifest this update:     Sat 26 Apr 2025 22:27:14 +0000
Manifest next update:     Sat 03 May 2025 22:27:14 +0000
Files and hashes:         1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: bmnzmWhgsYXVRpEyRuOpu700NaF6i+MifaEP7ydzMB8=)
                          2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: wfbzZwER+fTgY++pqgXP/OKLLTSGFpByy89x8B47O4E=)
                          3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: 1D7+OCtGjby5tViOYZaur4l4d2dDZ0m3lkkYo/LV9js=)
                          4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: T0CswBD2KIPNfh8TN7kP5VLd+HEy8GI9WMF69x1b8Qc=)
                          5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=)
                          6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Apr 26 22:27:14 2025 GMT
            Not After : May  3 22:27:14 2025 GMT
        Subject: CN=680d5dc2-ac37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:8e:fe:78:f1:c8:f0:f8:a3:d6:5d:df:58:
                    15:3e:94:99:65:de:dc:d8:33:f9:16:e1:c9:9f:f8:
                    d5:08:d8:b2:c0:23:dd:f7:3f:51:58:52:52:87:19:
                    91:98:f6:68:84:04:68:c8:19:77:7d:b1:19:56:71:
                    cd:4d:31:6e:02:38:57:f3:af:62:f5:a4:b7:be:45:
                    36:c2:c1:b6:34:bb:4e:79:10:27:4a:af:bb:d5:36:
                    39:05:15:29:77:21:da:4d:63:1e:48:4c:5f:55:2c:
                    43:fb:7d:6b:ec:c1:1e:45:07:ee:61:70:c7:02:2e:
                    66:b3:95:6b:5d:a7:7c:ea:21:b7:e0:52:2f:09:b0:
                    61:34:63:27:3a:08:ec:7e:e0:a9:ed:40:bb:35:c5:
                    9f:c1:69:8b:ce:1e:bc:a8:ed:6d:c9:f6:d3:1f:9c:
                    c8:57:7b:60:12:72:ea:53:c7:d4:8b:c3:89:48:1e:
                    e8:7b:37:97:f6:a6:56:12:8d:e2:a0:47:f8:82:53:
                    ae:8e:fa:2f:62:98:60:a2:79:54:2d:13:f1:4b:95:
                    5a:35:7a:4a:d6:3c:08:02:51:60:d6:9b:39:16:08:
                    b1:d4:7b:f0:4a:4b:5b:85:00:ce:fb:2a:70:87:ff:
                    b2:02:2e:67:83:38:38:70:f2:f6:5c:c8:fc:27:67:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8C:2D:2A:DF:49:AB:39:7A:DA:5D:A8:4A:84:BA:7E:B2:C5:7A:28
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:15:09:4a:60:7a:d7:d9:91:ff:08:73:8a:0c:ff:91:13:
         0e:66:3e:71:a6:0e:10:96:51:4c:03:56:26:52:30:d0:1d:e1:
         26:bf:53:82:d9:70:7d:3e:71:68:94:93:e0:9f:f0:76:fd:29:
         2d:07:71:5e:bf:80:52:3e:d8:49:8e:c9:e6:03:ee:32:7a:6f:
         e1:4f:2d:1f:e9:4f:e0:57:88:29:c0:df:ba:4a:dd:45:3a:51:
         4a:9c:5f:89:9a:5a:75:64:0b:7a:28:02:46:f3:5f:d0:14:21:
         65:bb:e5:dd:db:b6:d3:72:92:a9:18:60:79:f6:17:bc:e2:7a:
         60:c7:77:86:e8:04:74:c9:3d:0e:7d:83:f0:a7:20:85:a2:c5:
         5c:d5:32:b8:cf:6c:fc:8d:63:21:06:98:b4:78:66:50:fa:15:
         69:49:a5:7f:bb:61:76:1f:16:af:ea:b3:3b:5b:5f:1b:49:85:
         31:9c:ff:5b:6a:a1:6f:67:af:8a:34:6d:56:d8:fc:f3:89:8c:
         12:9d:84:7e:b7:6b:63:11:f6:55:57:1f:45:05:63:cd:b5:84:
         af:79:a9:0b:7e:29:10:81:16:79:51:4f:6a:1a:1e:0a:ea:5e:
         e8:c1:0c:81:8b:48:51:d4:67:4b:18:97:87:6e:1f:b1:05:9c:
         69:a7:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net