Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
File:                     GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json)
Hash identifier:          YdTCtdq3yOwjohH3A8tomdlEBUsKEK4AzZn48lPzIjw=
Subject key identifier:   BE:C1:DD:A5:07:F0:DB:D6:CC:60:5E:CC:CC:16:45:2D:FD:34:BF:BE
Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61
Certificate issuer:       /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
Manifest number:          0134
Signing time:             Sun 27 Apr 2025 03:24:44 +0000
Manifest this update:     Sun 27 Apr 2025 03:24:43 +0000
Manifest next update:     Sun 04 May 2025 03:24:43 +0000
Files and hashes:         1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: dI3RqkjjfAhiTsxE3Xp0fbFciT0Amf3+KljEkkbPzFM=)
                          2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl
                          rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
        Validity
            Not Before: Apr 27 03:24:43 2025 GMT
            Not After : May  4 03:24:43 2025 GMT
        Subject: CN=680da37c-f0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:e1:ed:e4:9f:8c:46:c7:f3:b1:ce:50:7a:
                    1a:ac:bf:0a:1d:ce:d4:8c:d9:a4:64:44:49:8c:f6:
                    5a:63:85:27:11:e7:22:40:a9:9c:23:10:27:b1:6a:
                    bd:f6:ba:20:39:aa:5b:e7:96:0b:50:74:ff:5a:34:
                    84:df:d9:0a:f7:8f:0f:97:c1:ec:dc:49:c4:cb:78:
                    88:2b:90:15:d6:04:cd:18:7a:86:26:f3:9f:cc:b2:
                    18:1a:5e:ba:64:2c:8a:24:6d:3b:45:07:55:e4:7e:
                    1d:ad:8d:d9:f4:56:51:c0:5d:a6:8d:ba:94:3b:ae:
                    ee:eb:20:e5:9e:e1:ca:d2:70:04:32:b6:4d:64:e2:
                    40:cc:c1:1b:dd:79:64:2a:aa:98:7a:f6:b7:5e:5c:
                    a7:18:96:8f:1e:70:1e:c4:e1:07:fa:d4:48:31:d5:
                    08:e7:d5:c6:fc:59:7e:4e:09:e8:ab:98:df:60:60:
                    dd:04:e2:53:12:5d:50:02:61:d4:3a:6c:09:15:14:
                    77:b5:c8:77:30:1a:0a:d7:93:de:07:2b:0a:d6:07:
                    18:34:d7:03:8c:8c:6a:d8:45:d1:2b:6f:f9:c9:07:
                    a3:10:99:8c:46:f6:51:02:bf:f5:78:3a:3e:ce:24:
                    4b:96:4e:d1:14:b9:6d:e1:4a:35:47:b8:69:13:11:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:DD:A5:07:F0:DB:D6:CC:60:5E:CC:CC:16:45:2D:FD:34:BF:BE
            X509v3 Authority Key Identifier:
                keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5a:a1:18:43:28:a5:b3:8a:a3:49:37:7c:d1:ee:14:6c:dd:
         28:ac:b5:a1:1e:f1:7b:3a:48:65:31:60:5e:61:24:95:25:7e:
         09:9e:85:f1:16:31:34:6c:a3:c2:ca:d2:dc:9e:b1:a6:b0:1d:
         79:e3:e4:f0:8e:4f:12:f0:f1:bb:09:64:45:42:4c:04:f0:fd:
         7b:e9:82:8f:c3:a6:2e:bc:c5:7f:3f:fa:3b:60:77:d1:17:ea:
         1b:d4:74:6d:88:36:41:76:9c:0b:03:f4:fe:d3:8f:cd:ea:8c:
         f6:bc:40:24:8e:17:d6:9a:92:7d:e3:46:01:f9:09:de:63:3d:
         90:c3:5b:4e:4b:8b:49:79:89:ed:85:3e:69:b0:f3:e6:97:2e:
         14:2c:17:4d:d5:14:fe:b9:49:79:39:8b:6e:49:78:7f:df:8d:
         9a:e3:5c:e5:a7:eb:d4:1b:52:14:c0:e0:6e:aa:8b:57:0f:84:
         48:44:90:2e:49:f0:03:2b:92:6c:ba:f1:25:86:83:64:26:65:
         6e:54:29:5a:b0:0d:51:57:bc:ab:5a:ca:53:7f:80:00:c4:3f:
         e4:9d:9c:99:08:ae:57:57:a2:30:3f:82:8b:f0:5a:d4:ee:ce:
         2e:07:d9:b5:5d:5c:03:15:05:dd:96:f0:69:67:f0:49:8f:c2:
         8e:44:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:30 2025 by rpki-client on console.sobornost.net