Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft
File:                     ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft (raw, json)
Hash identifier:          PIWwNlhcJaDQA4NfLNFsoE20PUcd9Quxg3r0ZAWgUoI=
Subject key identifier:   4E:0D:CC:98:7B:A5:21:09:35:67:2F:4E:C4:47:B2:84:FD:82:E7:64
Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7
Certificate issuer:       /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft
Manifest number:          030B
Signing time:             Sun 27 Apr 2025 00:51:17 +0000
Manifest this update:     Sun 27 Apr 2025 00:51:17 +0000
Manifest next update:     Sun 04 May 2025 00:51:17 +0000
Files and hashes:         1: ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl (hash: XTLRkEp3pKw/SGcq/mhPDOYJdn4MD6nGwxZepASK6S4=)
                          2: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (hash: LnATtYItJoGzNqDT/OfESDCcildtpDcQj0Gi0SQtIp8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl
                          rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913791D, serialNumber=655B65624636C80034153733535B4AA8B3A001B7
        Validity
            Not Before: Apr 27 00:51:17 2025 GMT
            Not After : May  4 00:51:17 2025 GMT
        Subject: CN=680d7f85-b21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:9d:57:cd:26:87:44:dd:2b:eb:03:96:55:
                    71:f1:34:ee:5b:52:26:71:bd:7d:3f:13:9a:61:b1:
                    61:78:04:bd:02:c0:8a:43:cf:34:84:af:ae:29:4e:
                    88:8f:5b:a5:8d:bf:76:b4:d8:c7:0a:b9:05:8b:05:
                    7c:2f:f4:cc:96:4b:ee:76:bc:f8:71:c0:1b:42:72:
                    54:ef:b8:1f:b2:f1:4d:e6:0a:a7:8f:28:aa:0b:04:
                    fe:31:a4:0d:d1:3c:1b:1c:a4:05:65:2b:f4:c8:b9:
                    61:a4:0d:06:49:e8:db:c7:94:47:fd:55:62:6d:c9:
                    84:f7:1f:b4:c5:9f:52:80:ec:62:87:0f:38:2e:27:
                    f3:ed:cb:bc:91:71:0c:17:a4:7f:c1:60:ab:74:bc:
                    60:9d:3d:98:c9:b4:82:b6:15:b3:f6:7f:d4:1e:82:
                    37:42:4e:45:af:86:96:a2:21:a5:e7:94:47:41:16:
                    3d:90:2d:f8:be:26:59:ad:b0:84:bb:7d:ba:8f:0c:
                    0a:f1:e0:be:83:9a:1d:8a:bb:27:d4:13:74:81:ff:
                    58:f3:b6:8c:2a:a3:9f:8a:80:85:11:20:6b:d5:67:
                    73:fe:ad:d2:ec:69:e3:cd:01:9f:7b:05:05:59:be:
                    48:98:8c:3b:77:5d:9f:90:35:0f:0b:de:e3:09:68:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:CC:98:7B:A5:21:09:35:67:2F:4E:C4:47:B2:84:FD:82:E7:64
            X509v3 Authority Key Identifier:
                keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:e3:fe:4c:9c:bc:b5:25:22:60:31:bd:7c:21:8b:19:98:
         0e:f6:ed:51:4c:b7:80:70:9f:a4:b3:7e:33:8f:5b:cd:1f:25:
         5d:72:58:48:f1:98:2f:b0:02:88:ec:ad:09:ed:c3:bd:6f:21:
         bc:39:18:68:27:49:4c:b9:a9:96:4d:d6:15:40:c7:13:61:ae:
         57:75:30:ee:a4:f1:32:2a:41:d8:2e:e2:d7:37:3f:0d:e9:43:
         49:44:12:5b:6f:5a:58:92:b2:f3:f7:f5:ae:2d:c0:e6:b9:a4:
         65:9d:b1:bc:a8:58:c1:66:5b:fd:5b:92:da:83:fe:e0:2c:4c:
         c7:fb:b4:38:59:e8:2e:ec:1d:f1:fa:72:64:c2:7a:cc:49:6e:
         6f:f3:be:37:1b:8a:84:cd:ea:a3:c8:3e:00:d7:39:58:77:5b:
         8a:9f:46:de:25:d7:b7:85:b0:87:96:d7:ec:97:ca:e7:e1:22:
         29:3d:25:92:b0:a7:06:b2:14:fc:8d:56:56:f7:87:d5:c5:2b:
         9a:62:37:a8:94:23:c7:56:aa:d6:a1:2f:b2:e1:1b:51:95:25:
         dd:80:a3:e9:ae:be:1e:fb:1d:e5:4c:3c:23:e9:02:ab:f1:1f:
         78:26:eb:ea:d2:a5:a2:56:2f:ab:c5:18:1f:33:34:58:a2:56:
         2b:5c:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:30 2025 by rpki-client on console.sobornost.net