Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File:                     olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier:          cE3Ck6rTW//f8e56zi47VYqhElo4GUy4LDM6KaUrbmk=
Subject key identifier:   73:81:72:71:05:4C:A0:D8:CD:C4:9B:7E:DC:D0:CA:ED:03:10:FF:99
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer:       /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number:          0598
Signing time:             Sat 26 Apr 2025 22:51:43 +0000
Manifest this update:     Sat 26 Apr 2025 22:51:42 +0000
Manifest next update:     Sat 03 May 2025 22:51:42 +0000
Files and hashes:         1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: 3/qHomWvt79C21HM9qvk3/GbnsysIKki2sG4EaQzV2Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
        Validity
            Not Before: Apr 26 22:51:42 2025 GMT
            Not After : May  3 22:51:42 2025 GMT
        Subject: CN=680d637e-cfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:00:8b:3f:6c:b7:3a:b5:2d:a8:fd:65:d6:
                    f7:51:05:6d:51:56:aa:43:a7:85:8e:b6:42:5b:76:
                    e1:e8:d8:9d:f5:76:a2:90:76:5c:08:94:55:79:50:
                    e4:9e:fb:80:f7:f3:75:6b:ee:1b:6c:04:bb:4a:18:
                    8e:b3:46:78:ae:79:d1:8c:c2:9c:7e:2b:00:96:69:
                    69:c7:bb:cb:c5:58:2b:4e:ce:91:82:b0:44:a1:39:
                    68:3e:1e:f2:39:9e:c4:1f:4b:11:42:16:e4:90:b2:
                    ff:a7:35:56:c4:9e:30:79:f6:03:d8:00:61:29:f4:
                    5a:f9:93:86:11:d3:ae:e8:63:8e:eb:92:be:f8:7f:
                    02:ee:c0:54:d9:e1:13:70:10:07:03:b6:e6:91:d8:
                    1d:4c:7b:30:ea:48:a1:0b:a3:5c:7b:5c:7c:6c:7a:
                    48:03:fb:dc:a4:62:10:c8:6d:6e:ca:ed:1b:f0:2f:
                    5e:9b:19:4b:8c:2a:5b:0b:e3:9b:f0:22:b2:b2:92:
                    f4:99:13:e8:51:3c:fd:01:57:24:f0:16:7d:0a:9e:
                    1a:a6:39:a7:1d:72:72:e6:a1:dc:92:33:fb:8f:6c:
                    77:3d:0f:da:08:87:7d:56:47:ee:6b:cd:77:c8:5e:
                    6f:a7:79:03:c1:a0:a6:41:f0:86:79:b4:6a:d3:6d:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:81:72:71:05:4C:A0:D8:CD:C4:9B:7E:DC:D0:CA:ED:03:10:FF:99
            X509v3 Authority Key Identifier:
                keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:ab:2f:82:6c:a6:90:e0:61:d7:21:0c:66:11:b2:9d:fb:
         96:15:e1:af:58:79:0a:98:ba:f4:23:e7:8a:43:50:5e:81:13:
         fd:b6:74:2c:8a:cc:30:1b:38:8e:38:c7:e5:ee:5b:b3:44:2b:
         3b:a9:ee:3e:66:87:11:92:e6:fb:5b:aa:74:87:27:f7:4e:26:
         d0:34:51:b4:3b:5a:a3:54:35:e3:52:aa:a9:e3:02:d9:0c:78:
         b8:e8:07:17:db:41:89:c5:35:4c:15:00:16:87:39:5e:b1:e3:
         32:20:1e:de:c9:cf:63:73:5b:80:b0:09:75:4a:22:3f:cc:f6:
         4a:1e:46:6d:28:e5:0c:f6:21:2d:0b:e2:7f:9a:0d:63:36:c8:
         39:31:65:15:9b:7b:f1:24:11:35:53:fe:9a:a2:ef:5a:e9:cf:
         64:d6:66:98:40:96:60:75:79:2b:44:88:7f:21:41:d3:66:cd:
         84:8b:12:5e:62:27:be:9f:99:15:c5:27:13:87:00:78:8e:58:
         4e:b3:a0:7e:e7:0f:99:c9:b4:70:9a:a4:d3:52:08:29:6b:42:
         32:b2:38:d6:22:7d:c6:a1:6a:28:81:4f:22:29:23:70:30:0a:
         06:02:00:e9:5f:53:02:5c:34:d1:66:e3:7a:eb:89:37:9d:2d:
         5d:88:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:24 2025 by rpki-client on console.sobornost.net