Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File:                     7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier:          k4UPeYXZtskLzvvA+BF3lnYl+1djADbJ27VF6IkAUbw=
Subject key identifier:   2E:3C:D2:50:5F:39:78:36:51:ED:7E:59:50:EC:8E:1E:0E:23:3D:C6
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer:       /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number:          0196
Signing time:             Sun 27 Apr 2025 02:35:18 +0000
Manifest this update:     Sun 27 Apr 2025 02:35:17 +0000
Manifest next update:     Sun 04 May 2025 02:35:17 +0000
Files and hashes:         1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: pMm8c2sErroCUUMh7TiZQ7a4v5TWe1y54GHHnyBRSkA=)
                          2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
        Validity
            Not Before: Apr 27 02:35:17 2025 GMT
            Not After : May  4 02:35:17 2025 GMT
        Subject: CN=680d97e5-f0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:36:4f:81:a1:19:f1:ee:9e:75:dd:ee:ff:
                    58:1d:ac:2d:9f:0b:aa:35:45:d9:d1:0c:1b:2b:43:
                    ae:b5:34:ef:cf:1b:40:65:35:f1:23:a3:00:9a:3f:
                    38:24:e3:69:26:7c:0b:e0:ac:be:b7:39:f8:50:f1:
                    67:27:6b:7b:50:05:52:80:32:cd:14:59:e1:2f:d5:
                    96:06:53:03:66:86:26:4d:29:3e:d8:54:96:40:35:
                    97:60:a3:bf:21:98:05:15:e2:d8:98:a9:49:61:fe:
                    fc:e7:53:27:b9:3e:65:73:97:03:8a:cb:59:fd:07:
                    79:34:56:fb:d7:d7:30:10:cc:5a:f5:2a:01:f2:f1:
                    52:34:ab:e5:fc:56:a8:51:99:0c:4e:6d:03:1b:80:
                    d7:b6:55:9a:c7:64:bb:0c:3e:5c:8b:48:35:00:e7:
                    ca:fa:b0:9e:16:fc:f8:f1:fb:9c:6c:ef:f5:80:04:
                    23:9c:f5:fe:f7:d3:5e:ea:4d:b2:e6:65:ac:a7:27:
                    28:a5:39:44:b3:74:b4:31:d3:88:ad:4c:11:ba:2d:
                    66:1a:81:50:2c:07:89:e3:4c:6c:dd:3e:6e:d3:b2:
                    bd:f1:b5:4b:bc:2c:fd:36:bc:95:78:34:ac:f1:45:
                    b2:f0:71:32:20:7a:f4:9c:ab:5c:58:ec:fb:31:a9:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3C:D2:50:5F:39:78:36:51:ED:7E:59:50:EC:8E:1E:0E:23:3D:C6
            X509v3 Authority Key Identifier:
                keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b5:76:8c:d5:b8:b9:3a:e0:be:b8:dc:ca:00:94:07:c1:8e:
         7a:06:4b:ea:df:5c:dc:aa:f6:03:10:dc:f7:4b:2c:02:a2:9c:
         65:f9:1b:36:88:4c:a9:00:67:ed:1f:09:b2:dc:c6:de:1d:a1:
         fb:21:9e:cc:e7:52:98:a1:65:62:68:c3:4e:cb:e3:d6:01:bc:
         b9:ca:69:4b:7f:a1:20:28:11:00:28:67:02:6d:2a:5a:1e:19:
         4c:f0:1d:d0:59:c0:b5:90:33:f7:c3:fa:a5:4f:b3:ac:42:3c:
         91:10:cd:dd:43:6c:08:dd:a8:09:7a:de:ac:5f:85:ea:17:ea:
         1e:6f:f0:dd:97:d1:23:aa:d0:fd:f4:ae:67:31:cd:93:bf:93:
         24:6a:b2:8a:97:fb:5b:b3:64:92:f9:a9:7c:3b:db:14:8f:f2:
         12:b7:2a:fe:57:da:27:f8:aa:51:93:33:82:31:33:9c:c3:cd:
         ba:e7:f8:37:d9:f4:f2:17:72:6e:d9:fb:81:aa:33:78:3e:52:
         e1:30:29:3d:82:c8:19:d5:7a:df:6f:82:4e:ac:bb:ca:42:ae:
         26:72:c6:66:bb:42:ad:d2:ba:98:26:7b:de:8e:8e:be:2f:43:
         0c:45:f9:4b:f6:58:f3:46:65:ca:a0:15:2f:2b:00:c5:c4:d2:
         61:f3:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:25 2025 by rpki-client on console.sobornost.net