Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
File:                     mP6mxE_1MoSDXoHQcN_BggttUOk.mft (raw, json)
Hash identifier:          XRx9ixqlzY9ux/J2oDmO6S3tmdxfipzlvWhnlgg9ADY=
Subject key identifier:   20:26:D6:0D:D3:93:73:6B:24:6F:23:C0:A3:71:3F:20:A4:04:19:3A
Authority key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9
Certificate issuer:       /CN=A912F6E3/serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
Manifest number:          4E
Signing time:             Sun 27 Apr 2025 06:11:32 +0000
Manifest this update:     Sun 27 Apr 2025 06:11:32 +0000
Manifest next update:     Sun 04 May 2025 06:11:32 +0000
Files and hashes:         1: mP6mxE_1MoSDXoHQcN_BggttUOk.crl (hash: AmZd1fxmegohWQ9PoEHYfPHCLDp8lHFj4UBor8VcADU=)
                          2: B21566C0EE5911EF87651F0AC4F9AE02.roa (hash: wUwv5nKPByd5iXm4Rp1wHIbyB56bV0LiIzKOApqPsGU=)
                          3: C241D8CCE1DD11EF9D21BB10C4F9AE02.roa (hash: aOaJVSoayyWp8EmwajlM6cWFw4ReqENsLISzvhYiTKc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9
        Validity
            Not Before: Apr 27 06:11:32 2025 GMT
            Not After : May  4 06:11:32 2025 GMT
        Subject: CN=680dca94-2679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:e5:22:3d:e1:94:a7:fa:eb:32:2f:e9:ea:
                    52:bc:ca:a9:0a:0f:e4:6e:70:38:e6:c8:a4:29:9c:
                    b6:54:f1:0b:58:d8:9e:25:56:b5:85:96:ac:c9:37:
                    bd:93:d6:bc:60:fb:7d:78:14:c3:04:af:bf:20:e1:
                    2b:a1:92:b3:f5:da:b2:5d:56:83:9c:65:87:ed:af:
                    dd:14:dc:05:0d:75:48:ed:99:ac:a1:8c:b8:64:82:
                    b3:25:3a:73:c7:b0:a1:5f:8e:db:c2:5d:4a:53:72:
                    65:77:d8:40:e2:8c:40:8c:16:91:e5:d2:2d:ce:5f:
                    b1:c1:f4:77:a7:8e:13:ec:23:c8:5b:52:63:88:25:
                    fb:bd:64:c0:57:47:2c:fb:68:6a:82:3f:b9:99:2e:
                    0a:0f:79:78:2e:7d:8c:e2:e2:78:bf:11:7f:7a:9a:
                    b9:2d:ec:ee:bb:d4:dc:ec:22:57:13:a2:84:05:b4:
                    cb:f0:f8:09:e0:da:4d:3d:aa:cc:b1:e9:0b:b7:80:
                    fd:4d:8f:f0:70:d8:98:00:cf:cd:03:1d:1c:22:bb:
                    80:18:a6:88:59:6c:2f:8f:e6:39:02:55:45:65:1c:
                    49:29:ff:e6:4b:f3:0b:45:5c:be:e9:21:f8:75:23:
                    af:e0:5e:9b:9d:63:97:7e:51:77:bb:2b:00:13:34:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:D6:0D:D3:93:73:6B:24:6F:23:C0:A3:71:3F:20:A4:04:19:3A
            X509v3 Authority Key Identifier:
                keyid:98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:f6:f1:14:4e:6a:d5:3a:45:cc:1b:69:91:2d:fb:22:1c:
         3d:08:22:d7:5c:e2:63:a3:33:ac:fa:99:4e:c9:74:5d:0f:de:
         63:ff:33:d2:f0:d0:31:20:48:b0:db:f7:d8:4f:73:c7:f8:a4:
         bd:2a:ce:84:45:7f:65:08:3a:cd:e0:5e:17:fe:0c:05:13:a9:
         42:a0:14:87:64:91:91:7a:89:3c:df:b8:73:8c:f9:69:b4:9d:
         4c:45:2b:49:1c:21:40:cf:dd:8f:5f:4b:8d:38:1e:68:bb:1d:
         df:76:09:a3:6a:c8:9b:f9:27:e8:bd:93:c8:ef:c5:d7:c4:62:
         4a:47:8a:c8:07:62:f3:9f:65:9f:be:a7:02:d4:65:05:9e:f8:
         02:ba:75:1b:92:c8:61:3a:48:3c:e3:21:e2:44:08:7b:9b:f8:
         da:3b:05:85:f4:b9:c9:42:e4:2b:56:ef:8e:61:87:92:4b:4e:
         5c:17:9b:73:19:a5:a3:ed:51:34:94:6d:dd:30:b7:75:f8:88:
         fa:71:f7:c3:52:86:ae:3b:ab:ec:bd:e5:1b:b5:94:76:b3:6e:
         72:b4:99:04:e2:dc:0b:66:16:c1:f7:aa:39:bd:dc:c8:59:b1:
         90:cb:b8:3f:8f:7d:2d:4d:97:40:0f:72:f0:fd:8d:74:51:56:
         af:db:44:2f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RjZFMzExMC8GA1UEBRMoOThGRUE2QzQ0RkY1MzI4NDgzNUU4MUQwNzBERkMxODIw
QjZENTBFOTAeFw0yNTA0MjcwNjExMzJaFw0yNTA1MDQwNjExMzJaMBgxFjAUBgNV
BAMTDTY4MGRjYTk0LTI2NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK6uUiPeGUp/rrMi/p6lK8yqkKD+RucDjmyKQpnLZU8QtY2J4lVrWFlqzJN72T
1rxg+314FMMEr78g4SuhkrP12rJdVoOcZYftr90U3AUNdUjtmayhjLhkgrMlOnPH
sKFfjtvCXUpTcmV32EDijECMFpHl0i3OX7HB9HenjhPsI8hbUmOIJfu9ZMBXRyz7
aGqCP7mZLgoPeXgufYzi4ni/EX96mrkt7O671NzsIlcTooQFtMvw+Ang2k09qsyx
6Qu3gP1Nj/Bw2JgAz80DHRwiu4AYpohZbC+P5jkCVUVlHEkp/+ZL8wtFXL7pIfh1
I6/gXpudY5d+UXe7KwATNOklAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUICbWDdOT
c2skbyPAo3E/IKQEGTowHwYDVR0jBBgwFoAUmP6mxE/1MoSDXoHQcN/BggttUOkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0VBNTM4MURFQjVE
RDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8xTW9TRFhvSFFjTl9CZ2d0dFVP
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbVA2bXhFXzFNb1NEWG9IUWNOX0JnZ3R0VU9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG
NkUzL0VBNTM4MURFQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8xTW9T
RFhvSFFjTl9CZ2d0dFVPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACCi9vEUTmrVOkXMG2mRLfsiHD0IItdc4mOjM6z6mU7JdF0P3mP/M9Lw
0DEgSLDb99hPc8f4pL0qzoRFf2UIOs3gXhf+DAUTqUKgFIdkkZF6iTzfuHOM+Wm0
nUxFK0kcIUDP3Y9fS404Hmi7Hd92CaNqyJv5J+i9k8jvxdfEYkpHisgHYvOfZZ++
pwLUZQWe+AK6dRuSyGE6SDzjIeJECHub+No7BYX0uclC5CtW745hh5JLTlwXm3MZ
paPtUTSUbd0wt3X4iPpx98NShq47q+y95Ru1lHazbnK0mQTi3AtmFsH3qjm93MhZ
sZDLuD+PfS1Nl0APcvD9jXRRVq/bRC8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net