Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File:                     Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier:          DPLTe2tL33LVZ7miUz2WKsZ6kC1L7If4iubV//h+xok=
Subject key identifier:   C5:F7:5A:0A:35:70:30:BB:22:50:B3:D5:D6:D0:CA:CE:21:8C:8E:04
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0782
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number:          0772
Signing time:             Sat 26 Apr 2025 21:13:22 +0000
Manifest this update:     Sat 26 Apr 2025 21:13:21 +0000
Manifest next update:     Sat 03 May 2025 21:13:21 +0000
Files and hashes:         1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: sq8FqHLvpoM1sYCr74NHqfiLxgE+w4iqkUVAYcw7Gdo=)
                          2: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: NwxjtAuSig2rvDoAjn33E7f2GIqou7l6suAw9EO2UWA=)
                          3: 211D4B50690811EF9C1CC987C4F9AE02.roa (hash: O4fLWSLP7M21yKqkXao1YXymrONjU0BVRbI7T2L20kg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Apr 26 21:13:21 2025 GMT
            Not After : May  3 21:13:21 2025 GMT
        Subject: CN=680d4c71-9d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6b:6b:15:51:55:75:c7:af:f3:fc:a9:bf:79:
                    27:72:7b:4f:cb:54:00:25:99:22:bb:7e:9c:1a:d2:
                    fe:a5:bb:cf:9f:14:86:b9:ac:34:c6:60:51:57:9e:
                    44:cc:21:84:a3:84:34:b6:13:f6:9a:93:30:fc:b1:
                    74:e9:71:36:9f:38:2a:42:47:61:dd:67:a8:66:e6:
                    2e:63:b6:2b:ab:3e:b8:45:8c:5a:10:22:85:6f:85:
                    f7:e7:27:62:d2:2a:6c:a7:63:73:50:81:1a:40:e8:
                    3b:4c:87:ae:e0:96:6b:c3:89:9f:0b:d4:8a:86:d6:
                    fe:2f:a3:b2:45:98:f4:fa:34:9b:41:8f:eb:5c:e7:
                    3c:80:c4:f5:48:f8:85:59:5a:de:14:1e:f6:01:40:
                    b0:f4:07:cc:9b:7d:30:7c:8a:d3:81:da:24:53:cb:
                    3a:8e:1b:75:a0:82:7b:03:b4:2e:fe:e6:9a:bf:3f:
                    68:e5:ed:39:b7:d2:b5:41:03:12:d2:0c:70:21:ee:
                    4f:22:bb:a0:b3:8d:0c:d0:94:29:7b:96:53:3d:1c:
                    2f:3e:96:d2:e7:9e:a2:76:18:06:d9:c6:3b:2d:bd:
                    0f:0e:bb:02:e6:7c:54:4f:05:f5:14:b1:44:34:7e:
                    d7:8f:a0:3b:d1:59:e4:81:db:a3:d6:73:46:42:48:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F7:5A:0A:35:70:30:BB:22:50:B3:D5:D6:D0:CA:CE:21:8C:8E:04
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9a:89:6a:62:10:f2:49:06:8e:60:e6:91:47:00:8a:19:2a:
         b6:6e:50:20:82:97:4c:57:e6:e2:61:c2:61:29:77:dc:52:dc:
         c5:50:84:a2:44:ce:c8:50:7f:d8:6e:84:b3:75:34:75:8d:14:
         12:a2:f3:4b:17:2c:ce:b3:47:83:a0:8c:c4:c2:45:94:a7:d1:
         1a:af:f6:d7:11:de:9a:4a:35:f9:e2:03:ca:a5:b1:04:41:ee:
         b3:1d:64:14:36:b8:83:f8:42:50:c9:b4:4c:77:66:4b:7e:a0:
         c8:6b:0e:6b:f3:ad:1b:ce:fc:2f:67:bf:bc:6b:6f:5c:ee:9c:
         38:8e:8a:a4:4b:ea:26:4b:7f:51:dd:2c:2d:f2:e3:1e:fa:78:
         c2:d5:43:9e:fa:ff:1a:9f:2b:cc:05:79:f3:2d:23:11:88:77:
         b9:22:17:f4:a7:87:00:45:09:33:02:6e:d6:ee:56:55:27:9e:
         ed:71:63:b8:82:6e:d9:c3:4d:fc:9f:fc:b1:99:42:a6:dd:69:
         81:f0:c4:af:e8:72:c7:bf:8b:7b:0c:61:a7:97:fe:9b:6f:2b:
         f4:29:19:bd:70:43:98:e7:75:33:65:87:43:22:67:29:c0:57:
         7e:2a:04:c9:d3:60:27:86:95:05:18:99:ed:97:8f:14:11:1c:
         2e:20:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net