Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
File:                     p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json)
Hash identifier:          CO+uApBSwELurpTNff5FbR5UQf4bm8AktfFCoOhmJmE=
Subject key identifier:   74:4C:09:DE:51:BA:AF:24:6B:1E:5A:08:86:50:82:F1:57:CD:7E:EC
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Certificate issuer:       /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
Manifest number:          0197
Signing time:             Sun 27 Apr 2025 02:24:54 +0000
Manifest this update:     Sun 27 Apr 2025 02:24:54 +0000
Manifest next update:     Sun 04 May 2025 02:24:54 +0000
Files and hashes:         1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: fqbPTOkQ/d5yoeE1uBT0x47ZZb0Bvou7B6m1G/lS7pA=)
                          2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
                          rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
        Validity
            Not Before: Apr 27 02:24:54 2025 GMT
            Not After : May  4 02:24:54 2025 GMT
        Subject: CN=680d9576-f0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:64:cf:70:d7:71:78:1f:cc:58:75:6b:de:
                    8d:e1:8c:46:40:27:2a:2e:6d:e9:69:3a:b9:dc:6d:
                    a1:3c:fb:1f:5d:a1:91:3f:21:7d:c7:e9:68:4d:7f:
                    65:5a:f0:95:88:8e:97:a4:fa:67:73:5f:58:b6:4e:
                    f1:e0:24:1e:64:99:d6:ae:3c:3d:60:dd:94:53:73:
                    a2:87:79:15:97:36:e9:95:31:97:5b:8c:a3:fa:9f:
                    a1:19:1a:f6:b3:7b:d0:86:19:c3:ff:10:c1:c9:e8:
                    90:43:63:a3:5e:1e:8b:6b:6b:d7:41:61:c5:4a:4f:
                    a0:ff:f0:94:13:d6:11:cd:bb:28:85:51:66:0b:9f:
                    e6:b7:4a:c3:1e:1c:4d:1d:56:de:ab:f2:a3:e4:63:
                    e3:69:fa:49:c6:a0:a2:64:0a:db:16:d2:2b:9d:e2:
                    8b:5c:3b:34:dd:c2:e9:d2:7d:35:ac:e6:13:07:bd:
                    91:4f:67:dc:34:fb:aa:2b:5d:07:21:ae:00:91:f4:
                    b7:52:2b:68:d5:8d:d1:21:3a:b5:fe:c1:18:3e:cb:
                    70:74:0b:79:52:ac:8b:1f:f8:ea:2d:f8:51:0f:03:
                    15:60:40:d7:10:6f:c8:ce:ac:a3:2b:7f:f1:8f:68:
                    8e:f8:12:0d:30:66:3d:7d:e4:da:31:49:b7:2a:25:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4C:09:DE:51:BA:AF:24:6B:1E:5A:08:86:50:82:F1:57:CD:7E:EC
            X509v3 Authority Key Identifier:
                keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ec:41:71:33:20:89:4d:bd:63:69:3e:1a:72:d8:a6:71:4e:
         b6:33:5c:b6:5f:80:ba:21:e3:44:4d:59:ce:81:11:29:71:30:
         95:1f:74:0f:2b:db:fd:d9:12:7f:a3:28:6d:2c:50:e2:07:b3:
         0f:95:04:23:5a:d3:cc:1d:ad:78:59:23:bb:2b:b4:26:9b:02:
         94:ff:41:b6:20:83:15:e7:2c:33:fc:aa:8a:7f:14:45:d1:68:
         a7:31:15:21:0e:8e:da:72:c6:76:7a:4d:6e:7e:a8:97:8a:05:
         e9:e9:43:0b:52:37:39:cd:fb:55:96:bf:7b:80:20:03:38:79:
         ac:38:eb:2e:e7:7b:5f:a0:db:a1:e7:55:ff:3a:cf:61:94:5e:
         0a:d3:ba:84:c1:14:93:f1:b4:e3:d0:2c:df:fb:4c:e7:e2:46:
         96:c4:2f:08:bf:f4:60:54:d6:dd:f8:73:35:1f:cc:0e:e5:02:
         61:9d:1f:71:a3:eb:46:c4:fe:cf:c7:00:0f:35:c5:d9:d6:b6:
         cf:7b:c6:49:5a:88:fa:8d:79:b3:cd:2e:5b:92:5c:da:87:49:
         d2:0a:cd:34:7b:49:e5:da:3e:17:07:af:2e:81:83:36:39:26:
         0d:05:dd:ec:14:7d:93:a6:fb:e1:37:db:03:16:3b:0c:5a:54:
         b3:5c:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:28 2025 by rpki-client on console.sobornost.net