Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
File:                     BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json)
Hash identifier:          fgidu4P1ZfO4FSkuKxfXdcyjNUyWTA9sgVbdyyHx65A=
Subject key identifier:   54:5C:5C:36:12:C0:EC:05:4B:9A:37:06:2B:BE:36:D8:D9:B0:B7:D9
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
Manifest number:          59
Signing time:             Sun 27 Apr 2025 06:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:29 +0000
Manifest next update:     Sun 04 May 2025 06:00:29 +0000
Files and hashes:         1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: qGx0MOUWmhoHJtgy0fKP4l0pv4cdLvR+9yWOqYyWTRI=)
                          2: 1909718EDE4A11EF90C89D39C4F9AE02.roa (hash: /eMiLKYYsNEMi2i4zLS61WcIPXTg0PjTSgCz7Tex+Ec=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Apr 27 06:00:29 2025 GMT
            Not After : May  4 06:00:29 2025 GMT
        Subject: CN=680dc7fd-e4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:ce:cc:8d:49:0b:68:1c:a0:70:67:d7:c9:
                    07:6d:e9:34:1b:4c:c5:68:c2:3c:37:6a:7a:67:18:
                    3c:13:00:27:8d:a3:47:35:52:03:18:96:61:ca:80:
                    46:5f:91:38:c8:08:55:8b:54:d4:56:16:8d:73:03:
                    5c:1b:d2:5f:34:b4:22:4d:b2:c5:5e:5b:0d:d8:ad:
                    a4:92:1d:ea:8c:a5:f8:0c:72:91:5a:d9:26:74:5d:
                    61:72:7a:46:12:19:5d:2f:cb:14:41:85:46:51:98:
                    68:b6:45:18:27:57:b3:f5:f7:08:e8:a9:78:cf:f3:
                    05:38:5f:a2:6a:be:57:57:4f:ce:67:92:88:27:d1:
                    43:c3:84:d0:2f:92:b9:97:42:d0:43:c6:7d:17:de:
                    5c:b7:48:e2:e3:7a:64:d3:61:54:89:5d:d4:73:18:
                    86:de:89:ab:1e:d9:90:8d:f3:e6:b6:ce:df:3f:ae:
                    f4:67:03:98:50:5a:82:ae:4f:04:8f:b4:d4:ba:cd:
                    f8:0b:09:5f:29:ba:7a:29:f5:91:2f:b6:b3:28:fd:
                    fe:8d:ff:41:f8:4a:a5:51:d3:f5:57:89:8a:13:96:
                    7a:2f:96:5b:02:10:67:78:28:9e:5c:d2:78:0c:f8:
                    1b:3a:52:d9:d1:b6:28:ed:4b:bc:cd:c1:04:26:70:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5C:5C:36:12:C0:EC:05:4B:9A:37:06:2B:BE:36:D8:D9:B0:B7:D9
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:b6:9e:df:c1:5f:b9:11:86:aa:83:ae:40:ac:58:cd:27:
         18:59:2c:50:58:0f:f2:fb:ba:03:9a:65:8a:64:88:16:62:87:
         7f:e3:b7:b3:b5:18:ec:39:45:0e:a6:2c:8c:c3:3b:c4:7a:ff:
         d0:5a:58:99:aa:00:0e:e1:77:a7:91:d5:19:84:19:1e:3f:29:
         61:54:66:cb:f1:34:4f:46:88:7c:18:15:2d:97:bd:b2:be:4e:
         27:2a:0c:2a:77:97:bd:62:cf:0d:19:0f:f3:88:c7:f4:38:af:
         3b:2f:5d:5d:3a:7c:04:d4:49:c0:ef:07:fc:7d:a9:e7:73:7c:
         ca:51:de:f9:56:2b:59:f2:c5:6e:75:ec:76:8e:a7:10:b3:97:
         e5:d6:71:2e:43:eb:2c:e5:9f:dc:b7:4d:c9:9f:50:a8:c8:f2:
         5d:e8:15:87:79:a9:d8:d0:f1:16:59:c5:18:cc:76:44:a4:8d:
         9e:a3:a0:08:77:76:8b:38:07:36:ce:e0:93:f9:e5:89:ff:91:
         5f:4b:00:29:3e:cf:c7:1e:30:65:de:42:cf:8a:21:0d:bf:76:
         ad:49:ce:2b:1d:9d:0b:87:58:ea:d1:5d:19:60:1a:9f:44:cb:
         f2:df:6d:0d:d9:e6:b8:44:90:bf:2b:52:f4:85:aa:0b:3f:03:
         b2:79:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net