Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File:                     NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier:          Qgt2CeoPIbCqKZU5M0KROuT13H/8/Sl4XPD5t6hEcpU=
Subject key identifier:   C4:6D:23:77:89:BF:30:F2:D0:3C:F2:DF:1B:34:A8:74:D6:B8:39:D4
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       0630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number:          062A
Signing time:             Sat 26 Apr 2025 22:23:00 +0000
Manifest this update:     Sat 26 Apr 2025 22:22:59 +0000
Manifest next update:     Sat 03 May 2025 22:22:59 +0000
Files and hashes:         1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: q6Cq72IB8vbwN8UWnUCxuTLQp6q00z0mwbodGeZ9wWg=)
                          2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: aj64AT3Eg74eRiHek2DyIpF1DXkedRqzt0byGVydNm8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Apr 26 22:22:59 2025 GMT
            Not After : May  3 22:22:59 2025 GMT
        Subject: CN=680d5cc4-9b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:ec:b4:41:7c:f3:86:a8:6a:58:b6:45:0c:
                    66:e8:e2:ed:56:6b:36:4a:93:a3:15:47:9b:4d:1c:
                    e5:dc:17:c8:80:11:eb:b2:12:d5:f9:fa:d5:47:d7:
                    c5:50:72:76:ef:64:a3:4b:0a:86:3a:ed:c1:58:7d:
                    42:fc:af:96:e2:04:87:ad:0c:27:55:84:6b:35:61:
                    03:eb:39:46:76:a3:72:71:83:22:d0:cc:4e:03:d8:
                    b3:fe:80:96:c4:d8:f2:ad:f3:17:09:ec:33:a0:36:
                    ed:60:75:5b:cc:c9:30:8f:9f:5f:bb:c6:29:f8:c9:
                    29:5a:f9:12:e9:58:f0:ab:19:a3:2f:d8:9b:73:a9:
                    74:12:89:89:84:54:f6:fa:da:b2:82:e3:17:47:35:
                    02:2f:c5:47:2f:06:a9:ad:f6:ce:80:3f:db:bb:c8:
                    58:c7:3f:96:b2:49:4a:42:49:00:0a:70:cb:a6:8e:
                    db:c0:c2:19:c5:46:4b:e5:41:bf:8c:ae:7d:de:b3:
                    d8:a2:5f:18:71:ee:cd:ea:2e:a6:bf:5b:b1:60:4c:
                    4e:58:1b:19:2b:a6:d2:c8:a2:ea:b9:8e:71:77:96:
                    9b:0d:5d:00:90:32:8f:21:5b:c8:c6:ac:2d:45:9d:
                    fc:4a:f0:b2:a9:f4:28:7a:d1:32:b4:94:b9:c0:eb:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:23:77:89:BF:30:F2:D0:3C:F2:DF:1B:34:A8:74:D6:B8:39:D4
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e0:77:be:d9:10:37:3c:5a:46:3f:35:e2:c0:68:39:69:84:
         03:33:da:54:5d:64:16:02:63:30:26:ff:31:10:73:d0:9b:fb:
         c0:0c:a1:c4:cd:0f:55:a6:0b:7e:31:d6:ee:e2:5c:42:75:e6:
         eb:27:1e:cc:d9:e2:ab:e5:3b:01:c7:5e:ce:df:8a:51:9f:5c:
         a2:d4:90:8c:58:33:ed:6a:17:70:08:55:7e:2c:28:bf:26:8d:
         86:c9:ee:5f:59:23:23:2b:8b:04:3c:ed:e7:94:2f:58:20:b5:
         de:f6:a4:c7:b1:1c:5a:46:fa:23:f0:33:be:4b:f7:59:a9:6c:
         ed:80:63:a9:27:c2:f1:2d:8c:11:40:ce:0b:2d:e4:55:cd:ff:
         3f:ae:57:d8:a0:c2:ff:c9:73:2f:02:ad:f4:9f:a5:33:33:32:
         b8:7a:a0:a9:60:26:11:00:bb:18:c9:04:06:41:86:63:43:c8:
         fc:90:f4:47:04:d8:95:8e:5b:ad:8a:09:f6:13:bb:fe:e8:de:
         0c:ca:ce:32:5e:e1:19:ee:d5:d4:1c:f7:8f:9a:10:c7:9e:5c:
         fc:16:a1:ae:04:7d:73:64:5b:d8:5f:e0:ad:a0:fd:ca:ea:78:
         f7:ef:3b:69:f1:7a:78:bc:de:aa:cb:2c:55:64:b7:f4:4a:16:
         9e:b6:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:28 2025 by rpki-client on console.sobornost.net