Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File:                     i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier:          /4C5uYtRlCLJPyx+oPWXxqjiScqZZP7CQBBLr7kquKQ=
Subject key identifier:   99:F4:0B:98:7D:9C:13:B6:D5:45:D0:7A:0A:0E:2D:70:65:8B:04:6F
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number:          6C
Signing time:             Sun 27 Apr 2025 05:43:18 +0000
Manifest this update:     Sun 27 Apr 2025 05:43:18 +0000
Manifest next update:     Sun 04 May 2025 05:43:18 +0000
Files and hashes:         1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: ArMuc4VjtV6DSv55/h85erac+kNqcLanBJuago/wXGY=)
                          2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: DRt8K6jlAria6yTB9gWZIhOKN+7LEqAGx7rHUxgtPQs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: Apr 27 05:43:18 2025 GMT
            Not After : May  4 05:43:18 2025 GMT
        Subject: CN=680dc3f6-4ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:5a:7f:3e:c8:d8:c0:5a:bb:99:c2:82:43:
                    49:58:75:9f:fd:a9:2b:ac:b3:3b:88:5f:b7:07:b6:
                    e9:a2:5e:96:c8:60:09:cd:c3:de:0e:4a:d8:9f:87:
                    4f:54:b3:0c:66:d4:f4:2d:b0:87:9f:a0:c3:d2:48:
                    b2:cd:7a:ce:ba:22:04:0a:c0:e5:23:43:b8:0c:fa:
                    5b:b4:c1:e5:8e:22:dc:65:e7:b0:1d:8f:9d:40:c9:
                    64:a9:e7:67:dd:69:b3:52:4a:47:b7:fe:f7:a6:77:
                    d1:db:1c:1b:9d:38:fb:e7:87:d6:8b:53:b3:65:b9:
                    ab:0c:02:ca:19:48:7e:66:d2:fd:10:1c:6b:79:cd:
                    1a:ec:66:c0:ea:f4:7c:7a:d0:04:01:d0:ee:ee:8d:
                    52:36:1f:00:26:d0:0b:e9:d8:8c:dc:71:d1:65:c7:
                    b5:17:1d:18:c8:73:41:ef:8b:b7:bf:13:c4:b5:51:
                    e0:54:d2:10:90:40:df:bd:a9:c8:51:f6:33:3e:b7:
                    19:b2:06:71:7d:cf:0d:fa:ff:09:89:a6:da:a4:17:
                    0b:b9:2a:65:a4:9a:c8:96:a3:73:ac:9d:f2:10:bc:
                    68:e1:12:d6:b4:71:a3:22:49:37:a0:57:9e:75:93:
                    8a:a2:57:ec:2a:1b:13:1e:92:fd:53:f4:f9:b4:58:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F4:0B:98:7D:9C:13:B6:D5:45:D0:7A:0A:0E:2D:70:65:8B:04:6F
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cd:03:c5:dc:58:f8:27:00:ed:2a:30:fe:d2:aa:5e:47:df:
         e7:24:e0:34:53:10:20:76:30:60:af:f8:45:35:17:f9:bf:ac:
         e2:53:c5:31:e7:41:3c:e2:de:5a:87:c4:c6:45:ba:ba:47:2e:
         7c:c9:e5:1a:a8:85:40:6c:48:d9:b1:3e:a6:1e:9a:62:0e:f7:
         95:ff:b1:85:8c:06:ab:61:a7:c8:39:ee:71:d5:d9:58:fb:c7:
         1f:ea:79:f4:20:2d:43:9a:86:7b:ec:c0:22:e4:b4:e8:74:71:
         31:e7:9a:de:4c:87:c5:0f:09:d4:52:d2:25:43:44:f8:54:a1:
         eb:15:15:03:d1:c7:5b:b2:8a:b3:c9:04:89:3e:d1:fb:57:61:
         bd:cd:59:10:1a:c3:a6:50:8a:28:b4:d1:d1:a4:71:38:12:3a:
         76:30:24:5c:8a:d8:c7:58:08:e4:2d:4e:c8:2e:59:70:94:e2:
         b5:3d:66:fa:02:ba:9d:80:78:31:67:3f:46:e7:2f:2d:09:cd:
         bb:0e:84:2b:47:b0:b8:67:d6:a0:70:97:98:0e:84:be:48:7a:
         90:36:7c:3f:62:4d:81:3d:97:25:0b:2f:8c:df:b9:f3:ac:8f:
         93:23:33:4c:4c:c8:dc:32:ff:3c:11:37:8b:da:78:6f:76:0f:
         22:96:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net