Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
File:                     1nviGU24YmpD05q_p2CPvFrMtSM.mft (raw, json)
Hash identifier:          I8vP8XBLWmclTVJF3twR7stjsOMFrucQeAgnIvxv5Sg=
Subject key identifier:   DC:63:A4:37:1C:F7:BF:E1:02:30:06:85:37:65:15:D9:14:56:E2:27
Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
Certificate issuer:       /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Certificate serial:       0430
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
Manifest number:          042C
Signing time:             Sat 26 Apr 2025 23:58:36 +0000
Manifest this update:     Sat 26 Apr 2025 23:58:35 +0000
Manifest next update:     Sat 03 May 2025 23:58:35 +0000
Files and hashes:         1: 1nviGU24YmpD05q_p2CPvFrMtSM.crl (hash: ysGe7ltwiXwKl5poMqVywqBICi5jsteL4aoMzmR8qOk=)
                          2: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (hash: qicfoy/8cosxfApnnOippZ0PeEcv6bX+STnM2/SumVM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
                          rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
        Validity
            Not Before: Apr 26 23:58:35 2025 GMT
            Not After : May  3 23:58:35 2025 GMT
        Subject: CN=680d732b-286e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:4b:84:89:00:63:1b:8c:5a:a6:35:42:a9:
                    d3:b7:aa:14:e3:dc:f9:48:4e:25:2c:a7:1a:55:f1:
                    2d:dc:26:97:bc:fa:66:9e:e1:16:b7:db:9b:70:f8:
                    0d:28:29:d5:d1:c7:31:21:d6:61:96:5a:7b:ee:64:
                    a6:3c:00:cf:da:dc:b1:99:4a:7f:c2:25:9f:e6:f7:
                    72:4e:80:3b:4a:72:ef:68:85:6e:c4:63:71:ae:c2:
                    cd:72:7b:f6:04:05:bb:0a:8d:6c:46:c3:81:27:d3:
                    32:2e:80:7f:c4:a5:90:6a:36:25:84:b6:5c:37:93:
                    ff:3b:eb:81:ea:38:38:07:a5:7b:64:de:b0:69:30:
                    ea:39:be:fc:bd:ae:eb:3d:6d:b5:56:63:62:be:5c:
                    6d:a1:53:fb:23:3e:06:b7:51:25:9f:8e:61:9f:eb:
                    b2:ad:90:fe:bf:5a:04:d5:e2:63:7e:98:6c:d6:1b:
                    ea:e1:7b:be:a1:aa:62:6e:01:fe:29:8c:c0:5a:17:
                    62:e8:6c:4e:c5:48:27:46:f5:76:af:7a:80:46:15:
                    bc:53:e2:79:70:90:34:6e:59:2d:c5:6c:5e:e2:f8:
                    b4:61:a1:1f:b2:a8:3c:81:ea:dc:9a:1b:9e:32:a5:
                    34:fe:33:92:a4:db:c0:c8:e2:72:2a:fa:f6:66:51:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:63:A4:37:1C:F7:BF:E1:02:30:06:85:37:65:15:D9:14:56:E2:27
            X509v3 Authority Key Identifier:
                keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bc:67:93:ef:37:14:19:26:60:bd:cc:7d:7b:23:fc:4e:e8:
         f3:01:6a:21:62:07:36:60:aa:d6:c8:16:3b:d8:61:43:ab:45:
         ce:61:3d:91:d8:82:20:2e:f6:3d:21:d9:75:12:cf:ae:13:90:
         39:37:a3:eb:f5:a8:93:78:f2:b7:b3:cd:40:e6:db:15:0a:c6:
         b1:65:3a:d3:0e:16:8f:4d:bc:df:ae:92:41:85:a7:39:8b:e2:
         46:38:ee:ae:e8:76:3a:fd:b8:99:a9:4a:6b:a3:55:a4:30:ad:
         9d:29:f2:e1:3a:ca:a9:10:08:03:e7:03:1c:10:4f:7a:14:9f:
         c8:77:c1:df:46:98:eb:d8:67:b2:31:29:7d:3d:bf:a3:ff:49:
         bd:be:a5:d9:ae:80:7a:53:cf:c1:fe:ea:df:32:d5:47:64:30:
         52:67:45:a3:59:d4:0c:29:0a:e6:d1:a2:87:84:2d:27:70:20:
         76:1d:39:55:b4:fc:13:28:eb:c1:85:e2:43:f7:ce:09:22:06:
         19:7f:e8:a3:b4:6a:9c:f1:6d:ef:37:5d:16:0e:54:73:15:f8:
         b3:02:cc:85:0d:72:cd:40:b9:e5:3d:a4:aa:0a:06:d0:e3:c2:
         e9:a6:07:02:23:63:41:a0:df:f7:88:c6:d3:88:49:9e:51:5d:
         a8:5d:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:28 2025 by rpki-client on console.sobornost.net