Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          9B+XPSfrD60ovM+Tp/le1mwCG0/Rx5l2RFQRzRe3z14=
Subject key identifier:   5A:32:FB:78:4E:A4:DF:D4:7C:08:A1:76:0C:16:35:EE:29:47:70:C8
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          0758
Signing time:             Sat 26 Apr 2025 21:26:10 +0000
Manifest this update:     Sat 26 Apr 2025 21:26:10 +0000
Manifest next update:     Sat 03 May 2025 21:26:10 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: stwT/QFfpDBUORCVIuXfbmYDh8XVy9eCdp9iLGG+kTg=)
                          2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: T5bntFKOXUJY90ZSt6wzx94eeco+PumRT0JCKh3cGUw=)
                          3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: bUp2cjSjB8euJOCWev8E1H5hopCa1Aw3wJo+GROBZeQ=)
                          4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: dvmoao5w0dhRpuJXrUoAicHpE15a14VjXEHjG+ZtN2s=)
                          5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: chXP+1t4OQYuslJa71TUWuDUjFMZecLJSL+PfYVGy/A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: Apr 26 21:26:10 2025 GMT
            Not After : May  3 21:26:10 2025 GMT
        Subject: CN=680d4f72-c876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:29:25:32:e9:23:e8:82:55:cc:c8:93:2e:
                    9a:78:1c:cc:0d:60:70:14:0b:53:81:cb:7b:16:83:
                    8c:f1:8f:f3:b1:b0:87:d3:2b:ba:f7:f6:5b:fb:16:
                    79:9f:b8:6b:a4:38:e6:22:e7:9a:5d:e9:fa:34:7c:
                    4b:25:12:10:7b:7f:0a:5d:45:da:0d:f5:a6:31:f3:
                    13:bf:56:d3:95:85:da:10:67:b7:40:62:ff:99:d5:
                    45:7f:87:a8:87:2b:61:a5:a8:bc:55:0e:bd:2c:56:
                    de:e4:b7:0f:2c:2c:4a:41:dc:73:0a:a4:93:2f:3a:
                    0d:cf:60:34:72:b5:13:37:eb:41:8d:c0:ff:a4:6e:
                    bb:17:98:fa:ef:11:79:2f:67:67:af:76:c8:ed:cb:
                    ca:13:3a:3b:42:2c:f8:1d:10:b2:bc:42:72:57:89:
                    32:00:9d:f3:96:2a:2a:66:45:65:d9:30:31:56:93:
                    48:eb:f3:87:70:e0:28:47:35:4a:38:db:18:7b:1d:
                    36:ce:fb:1e:b6:89:d6:a4:f6:92:0d:ea:f9:47:b3:
                    cb:25:99:98:5b:ca:42:77:ff:18:45:68:db:7b:a3:
                    40:d3:70:53:7c:d9:6d:47:21:73:69:07:90:96:b4:
                    54:2e:66:a6:6e:a0:a0:4e:b1:14:d6:4d:a2:16:2e:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:32:FB:78:4E:A4:DF:D4:7C:08:A1:76:0C:16:35:EE:29:47:70:C8
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2e:fb:58:69:bd:96:80:a2:14:9c:b0:32:10:bb:54:5b:b0:
         d8:30:0c:8f:9f:d6:54:b8:39:35:a2:09:0a:54:e5:c2:15:c7:
         bc:70:34:e2:09:74:4c:d3:f2:b2:3a:12:9d:ae:78:52:80:f5:
         b2:5b:f3:53:49:76:42:72:63:c7:05:11:2b:83:62:b1:89:d2:
         98:dd:44:31:46:da:df:8a:17:6d:45:4b:73:ca:4c:9d:bf:36:
         09:12:cf:5a:57:20:61:c0:a0:23:1e:8e:4e:10:4e:3d:bc:8e:
         e8:65:e2:46:23:75:9f:2b:19:29:f8:e1:07:c1:91:3f:1b:7e:
         6d:08:75:f1:11:68:e5:cc:33:22:6c:ff:66:25:7d:7f:68:24:
         4f:9a:b9:f5:0d:fb:cd:da:5f:96:16:1f:f0:74:76:ab:8a:94:
         49:7b:65:51:06:25:8b:41:a3:9d:fe:56:b7:b1:9a:53:e4:7d:
         52:44:92:cd:19:c8:7a:18:af:7b:76:cd:9d:c5:a4:fd:77:c8:
         e0:ae:d9:03:38:9e:07:8e:5c:53:c5:ca:03:ce:0d:f4:80:e7:
         a1:b9:e4:e6:88:a9:e3:4d:07:5e:7b:7b:9a:43:77:13:7c:2c:
         f7:d6:3d:61:82:53:ad:84:d8:5f:8e:70:ec:fa:ca:e7:e9:67:
         76:7f:99:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc5MTcxMTAvBgNVBAUTKEY0NTQxRkI3Nzk2NURFMTRBNTlGOUVGMjMzREUxOUY5
MjA1RjVGOTgwHhcNMjUwNDI2MjEyNjEwWhcNMjUwNTAzMjEyNjEwWjAYMRYwFAYD
VQQDEw02ODBkNGY3Mi1jODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGYpJTLpI+iCVczIky6aeBzMDWBwFAtTgct7FoOM8Y/zsbCH0yu69/Zb+xZ5
n7hrpDjmIueaXen6NHxLJRIQe38KXUXaDfWmMfMTv1bTlYXaEGe3QGL/mdVFf4eo
hythpai8VQ69LFbe5LcPLCxKQdxzCqSTLzoNz2A0crUTN+tBjcD/pG67F5j67xF5
L2dnr3bI7cvKEzo7Qiz4HRCyvEJyV4kyAJ3zlioqZkVl2TAxVpNI6/OHcOAoRzVK
ONsYex02zvsetonWpPaSDer5R7PLJZmYW8pCd/8YRWjbe6NA03BTfNltRyFzaQeQ
lrRULmambqCgTrEU1k2iFi5dvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoy+3hO
pN/UfAihdgwWNe4pR3DIMB8GA1UdIwQYMBaAFPRUH7d5Zd4UpZ+e8jPeGfkgX1+Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxNy80OTJBQjU5NDJB
MDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNoU2xuNTd5TTk0Wi1TQmZY
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGUWZ0M2xsM2hTbG41N3lNOTRaLVNCZlg1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzkxNy80OTJBQjU5NDJBMDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNo
U2xuNTd5TTk0Wi1TQmZYNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYLvtYab2WgKIUnLAyELtUW7DYMAyPn9ZUuDk1ogkKVOXCFce8cDTi
CXRM0/KyOhKdrnhSgPWyW/NTSXZCcmPHBRErg2KxidKY3UQxRtrfihdtRUtzykyd
vzYJEs9aVyBhwKAjHo5OEE49vI7oZeJGI3WfKxkp+OEHwZE/G35tCHXxEWjlzDMi
bP9mJX1/aCRPmrn1DfvN2l+WFh/wdHaripRJe2VRBiWLQaOd/la3sZpT5H1SRJLN
Gch6GK97ds2dxaT9d8jgrtkDOJ4HjlxTxcoDzg30gOehueTmiKnjTQdee3uaQ3cT
fCz31j1hglOthNhfjnDs+srn6Wd2f5km
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net