Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          Hipens2zv0CQNocIxxxqnbWsyabSpVlhMGTbqeij2d4=
Subject key identifier:   C1:47:A5:10:59:F3:69:60:E7:8C:B5:53:51:45:96:B2:89:BE:00:68
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          51
Signing time:             Sun 27 Apr 2025 06:06:43 +0000
Manifest this update:     Sun 27 Apr 2025 06:06:42 +0000
Manifest next update:     Sun 04 May 2025 06:06:42 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: NTm8vHVkiZMNDXuhRp5Hm1UtKgexsAe3apMDElp7zMc=)
                          2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: nkmyG+cerv7WGoEtCDY5qePml4WahDx59uvEgKxWEOI=)
                          3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI=)
                          4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Apr 27 06:06:42 2025 GMT
            Not After : May  4 06:06:42 2025 GMT
        Subject: CN=680dc973-2593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:df:51:0e:fa:94:e3:b7:78:1f:ee:7e:a9:
                    1b:c2:7c:d2:6b:71:89:d4:fd:bb:5b:44:70:bb:fc:
                    d8:5d:7a:f6:7c:76:54:33:d3:05:d0:40:d6:80:b3:
                    53:d8:c5:42:e2:8f:fb:fd:e1:ba:21:83:d6:cd:be:
                    77:17:1f:75:14:98:00:52:ac:83:48:80:19:f4:4b:
                    af:c3:e3:db:c8:39:1c:f6:26:50:9d:a8:d2:ed:05:
                    65:58:b9:55:8a:cc:f8:66:1c:34:d4:a2:0c:d6:6a:
                    7f:bc:da:38:a2:5f:27:43:28:ed:3b:7d:35:fb:20:
                    60:79:6e:3c:01:f1:04:0f:39:23:ee:de:5e:4c:3e:
                    b3:ca:07:6f:e3:39:02:c3:54:2c:d5:66:96:74:60:
                    73:65:64:10:ff:a2:21:a8:e5:80:27:cd:8b:e4:96:
                    3e:a7:23:03:e9:aa:4c:d8:2b:7d:76:06:d7:e6:e4:
                    98:02:38:b4:73:82:86:4e:f3:7f:e0:3b:39:01:6c:
                    06:c6:7f:f8:4a:43:40:0d:82:58:e7:34:5e:0d:7c:
                    8b:f1:46:61:a9:ad:9a:d9:c7:d9:e3:32:45:d9:3e:
                    15:af:46:bf:94:54:63:91:d6:63:70:81:a6:f4:e9:
                    03:a2:e1:0f:4e:24:90:0c:c3:31:67:db:46:95:e8:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:A5:10:59:F3:69:60:E7:8C:B5:53:51:45:96:B2:89:BE:00:68
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:76:c7:20:49:e4:14:97:42:6d:2e:b3:af:34:f6:5d:74:a4:
         f1:c9:90:32:39:5e:77:8d:34:03:84:fb:7f:79:35:9c:c6:55:
         6b:c0:56:df:0b:f9:fe:d8:58:3d:6c:28:05:78:32:81:07:48:
         45:53:97:72:df:27:62:d9:3f:ec:8e:58:0e:f5:d0:d9:58:6b:
         1d:4c:03:0f:05:d0:8a:7c:38:4a:51:5a:bc:84:eb:15:ff:d4:
         0f:f0:23:50:a2:ba:bb:fc:59:6e:1a:6e:8c:eb:21:e5:79:4d:
         2f:9f:28:53:18:fc:d1:14:04:ef:ac:e1:ca:07:be:23:7b:a9:
         cc:9d:e8:08:97:c3:38:32:44:ff:6c:e7:61:48:c3:78:7a:12:
         69:f5:f5:a6:3a:10:6b:ef:04:87:80:a6:56:70:07:46:e8:8f:
         63:12:e1:8a:f4:c8:e3:b5:34:46:06:02:a8:01:fc:9e:70:49:
         f1:03:cd:55:09:bc:1f:29:7d:f7:7a:7a:06:05:9c:8c:e7:3b:
         aa:e5:3d:02:9d:5d:af:e5:29:b6:77:63:9e:39:db:9b:12:06:
         7a:92:77:56:94:f2:d1:83:3b:a7:42:9d:d6:68:42:42:79:db:
         9a:99:83:88:76:28:69:2c:b6:ef:47:cc:5d:c2:dd:14:a3:76:
         90:2a:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net