Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File:                     5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier:          YlVMKhzRQfxrjmD8J2MvoGuk6Z8DZ9ixqsK4q6YVnBo=
Subject key identifier:   A5:8A:3D:07:A7:6B:72:1C:39:B5:FF:67:8B:35:98:0F:B4:E0:AB:B2
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number:          013A
Signing time:             Sun 27 Apr 2025 03:21:05 +0000
Manifest this update:     Sun 27 Apr 2025 03:21:05 +0000
Manifest next update:     Sun 04 May 2025 03:21:05 +0000
Files and hashes:         1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: Ce02Q09eYhtN+oRasLvMONaWpcyQWQ7NlvmWU66pZaI=)
                          2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HFjFUtVHPNW7Qd56uS2rL+sndelmlhgFQUxhT/KgfFM=)
                          3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: uVCsPTEKvx7XpzG0ppDtvL1K8RxPyB9GI7QJ+Zk5c9Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: Apr 27 03:21:05 2025 GMT
            Not After : May  4 03:21:05 2025 GMT
        Subject: CN=680da2a1-cae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:b2:5d:9e:83:f5:74:0a:fe:44:92:f7:33:
                    06:4f:e2:0f:5b:fa:0c:df:da:99:d0:46:c2:7f:96:
                    3b:fb:32:89:45:d5:0e:88:2a:f4:5b:ae:e0:be:12:
                    f3:a2:01:47:5d:27:d3:59:81:b8:81:65:5e:0e:70:
                    5f:83:58:55:0a:5f:23:fd:65:dd:cb:d2:65:52:f2:
                    02:42:3a:96:56:bb:91:8a:0e:3f:8c:15:0a:85:d4:
                    27:56:c3:9a:1b:f8:35:1b:dd:14:b7:f3:28:86:79:
                    6a:7d:2f:22:9f:34:3f:47:bb:66:da:00:88:b9:89:
                    4a:ef:34:68:a5:35:b4:b9:83:7d:2b:e2:db:c9:d9:
                    53:07:a7:c2:a2:0e:5d:1f:40:03:d5:97:c6:bd:77:
                    87:b5:ec:92:3b:64:9c:f7:ff:7d:34:f4:6c:af:55:
                    a2:c7:54:f7:c3:a7:6c:1a:eb:96:f3:5b:bb:af:b2:
                    20:82:f6:80:50:36:a5:37:e4:af:37:80:76:3d:3e:
                    1d:d9:8c:36:47:05:d8:f1:b6:0d:6f:ff:9b:06:75:
                    3c:1b:b8:f0:4c:27:1f:39:df:66:8d:96:24:d2:d8:
                    59:5d:80:25:00:7a:33:74:de:f6:c3:ba:be:d4:ad:
                    1f:eb:5a:74:df:06:33:2e:9a:30:a7:b1:9e:5d:dd:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8A:3D:07:A7:6B:72:1C:39:B5:FF:67:8B:35:98:0F:B4:E0:AB:B2
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:85:e8:18:8d:09:c4:23:b9:17:7f:ca:dc:37:12:10:c3:cb:
         68:7f:e9:07:00:d5:cf:ef:89:53:3a:b0:e3:5b:af:63:0a:57:
         77:42:27:f1:7d:fb:e9:0a:36:e0:8f:64:23:a8:14:b9:22:de:
         d7:80:7c:57:f1:a9:f1:07:ef:3f:52:67:78:ac:6f:31:7f:06:
         c4:be:1d:35:ee:8b:79:a7:0d:0e:83:73:ca:2c:d3:bd:bf:82:
         6e:2b:a3:e6:d6:ec:c8:62:5a:94:88:d6:15:88:50:e0:0b:32:
         3c:b7:06:94:e0:19:d7:9d:8b:df:b4:34:f7:23:24:e5:ce:e9:
         3d:9f:e6:6d:5c:7d:fc:3c:15:f1:cd:75:9b:53:70:12:0a:57:
         59:de:3c:74:77:53:24:bb:67:05:1d:ba:f6:a6:e2:03:24:e1:
         d8:f1:92:41:64:b7:1f:48:68:56:30:2b:ff:ba:47:8e:8f:1a:
         80:79:8d:60:77:ef:cf:b2:3e:11:92:1a:49:ae:ab:dc:d7:7c:
         0f:da:96:06:07:c1:dd:4a:a3:f6:d4:3e:bc:66:83:03:19:10:
         b5:cf:1b:fe:ab:46:b7:72:c2:83:54:08:96:dc:8e:f5:2a:36:
         15:cf:f4:41:f7:e5:f9:aa:eb:0e:2b:f2:13:ff:85:c3:0f:36:
         61:e5:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:30 2025 by rpki-client on console.sobornost.net