Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
File:                     I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json)
Hash identifier:          l8LZQaEzdwIEow0HKFZS2GuPGvqALI8jYk7Gv7lpUxs=
Subject key identifier:   AD:F9:24:76:9E:CB:46:DF:C0:47:0C:DF:01:14:E2:A1:04:4E:13:F8
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Certificate issuer:       /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
Manifest number:          0691
Signing time:             Sat 26 Apr 2025 21:54:56 +0000
Manifest this update:     Sat 26 Apr 2025 21:54:55 +0000
Manifest next update:     Sat 03 May 2025 21:54:55 +0000
Files and hashes:         1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: LW/wmBvWZQPWaGU5t8boUr8HznYw1LsIwEdPm3ElPR4=)
                          2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
                          rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 21:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
        Validity
            Not Before: Apr 26 21:54:55 2025 GMT
            Not After : May  3 21:54:55 2025 GMT
        Subject: CN=680d562f-5fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:07:c8:63:5b:f0:8d:75:f5:ad:73:f7:8b:
                    44:5f:57:71:e0:f8:d4:6c:be:0d:e7:9c:79:bb:30:
                    df:bb:b3:6a:14:9a:7f:7c:e8:68:3e:80:a5:79:f0:
                    cb:90:c8:d4:a5:14:3b:18:cc:25:c0:6c:fe:f3:d1:
                    86:a5:6c:e4:bc:fa:d1:c3:2d:4a:04:e9:46:59:76:
                    c5:bd:1c:7c:b3:4d:32:6d:08:54:b3:35:b1:9c:ab:
                    ea:f8:67:79:57:77:96:30:b0:21:56:51:99:c7:fb:
                    a2:24:3e:01:bc:b4:bb:68:b6:60:18:4d:b3:80:d9:
                    a5:21:3e:1e:40:36:2d:54:17:9a:3c:5a:f4:72:4f:
                    69:04:f7:93:88:52:f0:03:b6:37:cb:89:88:9e:38:
                    ef:f8:8e:71:f6:a7:4b:43:59:0b:55:bc:5e:e2:d4:
                    5e:0a:2b:4f:4f:31:fe:ac:c5:05:3b:80:08:65:f6:
                    16:26:52:a7:39:54:a3:7d:e0:23:6e:60:ef:e0:99:
                    63:90:9d:df:61:f9:b3:eb:63:eb:72:c6:0f:84:27:
                    6e:0f:47:b8:6d:79:46:8f:f7:fe:05:35:9a:7d:de:
                    0e:2f:bd:5a:4b:b5:df:ad:67:a6:ef:3d:07:2c:e7:
                    ad:6d:3d:85:83:8f:fd:7a:e4:10:96:f3:9a:c8:a9:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:24:76:9E:CB:46:DF:C0:47:0C:DF:01:14:E2:A1:04:4E:13:F8
            X509v3 Authority Key Identifier:
                keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:3c:56:af:a9:1b:1c:e2:90:13:18:79:06:37:60:3a:23:
         9c:30:02:2b:f5:36:ac:0c:32:0e:6d:30:17:b8:04:64:8d:e4:
         ab:f7:fd:a8:a1:87:42:e7:1d:83:05:0c:0a:b0:75:35:88:ab:
         fc:87:46:6a:89:2f:00:a5:57:49:e5:73:7a:09:ba:b5:87:51:
         34:4b:16:06:5f:d5:e9:2c:35:b9:03:83:c5:75:68:d1:e2:58:
         72:c5:27:b2:8a:dc:fb:b1:aa:65:75:63:29:1c:7d:ca:29:58:
         33:04:08:dc:58:74:57:c0:8d:a3:37:9d:84:48:e5:03:bd:90:
         cf:7c:10:c4:ab:33:e8:18:4f:1b:df:da:6e:10:c1:a0:37:0f:
         8e:69:0f:87:4c:44:11:14:00:7d:0a:7e:3f:35:c2:db:b5:63:
         3b:68:05:22:18:30:8a:44:1f:e5:b8:02:c7:1e:78:2e:a6:27:
         74:c0:9b:48:28:f3:57:87:85:1b:db:e0:e7:12:d1:a8:3e:3b:
         98:3e:97:53:48:16:b4:10:ff:cf:e0:49:1f:d0:81:32:d9:b8:
         98:fb:79:ec:cd:7e:08:bf:75:5c:02:12:15:0c:a2:65:dd:a9:
         1a:22:73:0d:90:0f:9e:a5:5a:88:b0:12:64:c3:97:11:f2:42:
         48:66:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:29 2025 by rpki-client on console.sobornost.net