Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
File:                     pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json)
Hash identifier:          POI7p1Uhw4OpDmYecHg6i+vNrNJiux061MeN8T4B9lw=
Subject key identifier:   C0:B1:D2:63:A7:41:C2:F0:90:DD:5D:6D:2C:AF:A7:E6:B8:A6:8F:45
Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
Certificate issuer:       /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
Manifest number:          7D
Signing time:             Sun 27 Apr 2025 05:31:58 +0000
Manifest this update:     Sun 27 Apr 2025 05:31:57 +0000
Manifest next update:     Sun 04 May 2025 05:31:57 +0000
Files and hashes:         1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: +1lGlWt7Y4/75gXD534hmHVRERNqjJ3E4Zg4f/pt+wU=)
                          2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: w11TSOq/EaycCd3tkTNvuoFONdTStuPzFxhygocn60Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
                          rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
        Validity
            Not Before: Apr 27 05:31:57 2025 GMT
            Not After : May  4 05:31:57 2025 GMT
        Subject: CN=680dc14e-aac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:5e:21:33:f8:99:eb:1c:44:9e:40:6d:55:
                    61:ed:2a:4c:b3:57:32:66:ba:88:f6:65:f6:a9:20:
                    a0:2e:54:6f:45:0e:4d:0a:fa:79:45:66:a2:98:63:
                    ea:c9:40:b9:5f:93:33:5a:b4:a6:93:8f:e2:e1:e2:
                    91:dd:25:55:69:0f:4a:00:63:8c:2b:c4:79:a6:39:
                    2e:22:0e:4f:4b:5c:a3:42:3c:5d:b7:0f:52:50:26:
                    63:3b:58:88:b5:c2:f8:69:a3:05:75:f5:99:91:59:
                    1a:4e:bb:98:3f:55:0c:02:82:d7:d0:2c:27:95:45:
                    40:6d:e6:63:e8:87:dc:1b:d3:89:f1:ff:cb:f9:16:
                    90:94:5a:d1:f6:89:c5:94:e9:23:3a:1c:cb:3c:25:
                    20:d3:ca:2c:0e:65:e8:38:c6:67:dd:30:30:69:b7:
                    da:43:37:b1:85:90:4f:8e:bb:e4:6d:23:ff:32:f1:
                    b0:f4:56:18:d7:e4:31:6d:c4:c6:d9:02:10:bc:2d:
                    6c:f2:96:ab:28:00:0b:5a:30:74:f8:19:bf:e0:90:
                    60:42:e3:57:e2:ac:8f:7a:00:9c:8e:0a:fe:80:01:
                    8a:eb:72:d4:aa:4b:31:9b:f2:ab:c0:8e:0d:05:e8:
                    ed:8f:b4:ff:cd:fc:7a:37:9a:21:a6:fe:cd:15:d3:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:D2:63:A7:41:C2:F0:90:DD:5D:6D:2C:AF:A7:E6:B8:A6:8F:45
            X509v3 Authority Key Identifier:
                keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:e2:bd:b7:d9:e2:2e:7d:72:ae:99:01:e6:d5:f4:80:e5:
         2d:4a:80:ad:7a:91:4d:1f:a0:b4:88:29:8c:21:df:fb:2c:d5:
         10:f7:cc:e3:22:e5:a2:8c:c3:9c:fd:77:a1:3c:32:c8:1e:7f:
         ee:0c:df:1f:4f:62:5c:21:e0:fe:ab:27:03:d0:fe:8a:2a:de:
         0d:a3:2c:7a:ca:e6:9c:b7:fa:db:0e:8d:d8:7d:95:09:f9:88:
         74:d2:d3:31:57:df:10:ff:88:e2:75:73:5a:c8:95:9a:ca:f3:
         0b:f5:93:40:f6:4a:e6:65:27:a2:b8:59:50:da:e5:a3:f7:7e:
         a0:63:38:c5:46:0a:10:8b:28:6d:5f:21:0c:e6:ee:de:57:2d:
         5a:9f:ae:35:ac:08:4f:36:6d:07:e2:25:b9:67:d2:36:9f:cc:
         a9:5a:79:35:07:0c:51:84:c2:a4:aa:a9:a8:8e:9c:f4:e3:fe:
         34:9d:1c:03:d0:61:d7:7d:6b:91:d7:d1:2c:86:9a:7d:8a:cf:
         66:c2:17:fe:90:b8:ff:d7:03:7d:5a:78:eb:24:8e:f3:16:0e:
         18:eb:e1:e6:55:8b:62:c7:64:c3:4b:d5:99:bd:56:e4:31:88:
         63:1c:21:63:ca:66:c7:59:67:eb:35:35:d5:74:fb:70:32:3f:
         b1:71:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net