Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File:                     ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier:          FFE/xhbo59gy0xKrcQfSTnk5q8wgJiFxbT2m5zaeg5s=
Subject key identifier:   D5:58:FC:40:4D:C0:4A:A5:43:7D:71:D1:DD:EB:46:DC:DD:FB:92:18
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer:       /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial:       05B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number:          05B0
Signing time:             Sat 26 Apr 2025 22:48:15 +0000
Manifest this update:     Sat 26 Apr 2025 22:48:15 +0000
Manifest next update:     Sat 03 May 2025 22:48:15 +0000
Files and hashes:         1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: nMMPDbDjG9ktgP4FkHJ9e82KnN/IzEDlTnbYS8hekEI=)
                          2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: aRYWCiFCI9e+UhsWF2EXBC5D+N3vZVlnQx//tGzToMg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
                          rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
        Validity
            Not Before: Apr 26 22:48:15 2025 GMT
            Not After : May  3 22:48:15 2025 GMT
        Subject: CN=680d62af-6d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:43:d1:cd:7c:c3:e6:5d:ea:cd:e7:7d:f2:
                    88:86:63:02:2a:ec:24:f6:30:46:e3:86:08:cf:12:
                    08:74:78:90:a1:fe:6e:f1:25:ac:06:8e:4e:53:bb:
                    5d:1c:00:06:b1:87:80:e1:72:db:3c:e6:81:2e:cb:
                    2f:af:ac:c1:e8:12:d4:43:d2:90:af:08:0c:b4:99:
                    aa:c3:3d:d3:5f:4e:63:49:7e:c7:63:ce:25:c8:19:
                    43:2d:28:26:80:c5:0b:ae:26:de:cc:e2:f5:f1:a7:
                    12:4b:45:83:7f:1e:e1:67:08:0e:c7:0c:04:1b:7e:
                    98:3d:00:54:ab:0a:92:bc:34:2c:27:c6:f9:2a:6c:
                    0f:3d:0e:d0:45:ac:4a:56:68:da:c6:fb:ba:1d:54:
                    be:d7:cf:03:55:e1:bf:96:12:23:47:43:6c:f6:d3:
                    f2:84:e3:be:1e:ba:2c:93:ba:9b:12:9d:1b:e9:1c:
                    c3:6e:b8:3f:dc:8e:28:c9:f3:2a:32:16:c8:c7:75:
                    12:a1:8c:4e:54:22:6f:7a:ac:f7:d1:57:2e:85:99:
                    e1:fe:bc:92:07:7f:c0:7e:bd:d4:3a:52:9d:24:89:
                    21:14:d8:0e:49:58:07:df:f7:70:90:f0:fa:8b:15:
                    e9:e2:44:b2:c6:fe:77:4d:00:06:6c:ec:12:e2:93:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:FC:40:4D:C0:4A:A5:43:7D:71:D1:DD:EB:46:DC:DD:FB:92:18
            X509v3 Authority Key Identifier:
                keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:00:1b:ac:65:ba:fd:d3:0b:0a:05:1e:60:4f:0f:bb:a2:8a:
         05:6c:ea:0c:bb:9b:eb:49:8a:df:f0:67:51:d3:40:0c:1e:8b:
         f1:9a:ea:a6:fd:b9:f6:8a:b9:e5:ea:66:76:50:b1:a9:7f:49:
         53:40:6e:87:c6:fc:11:e3:b2:c3:07:6f:b3:7a:bb:bf:2d:63:
         d0:40:3b:18:fc:33:3b:e0:40:67:7e:7f:cf:70:d7:ef:36:f1:
         b7:29:ca:ea:e3:ac:af:26:84:7e:04:16:2a:1a:ab:f0:b3:3c:
         28:93:cf:ef:c0:6d:32:91:5a:41:12:36:41:59:b9:ea:0d:d0:
         8d:8e:4c:a9:9d:fb:3d:51:65:97:b8:3f:13:ab:78:ec:01:aa:
         78:a2:e8:eb:7b:24:1f:e4:30:9a:93:e2:64:4c:e0:b7:a4:7b:
         c4:44:bf:3e:65:8a:23:84:ce:c7:a6:ad:aa:15:88:be:d7:ec:
         8e:c0:43:80:4b:df:0e:de:0a:73:c5:5b:d8:fb:3f:65:fc:f8:
         62:c9:10:2d:77:37:15:b6:9b:2f:d5:cb:a7:55:19:ec:96:e9:
         f4:f8:5d:d7:45:27:ad:eb:60:24:e3:d6:4c:b1:8f:af:9a:ef:
         e6:61:ef:a6:e8:51:b4:59:39:b7:5f:e2:44:e0:62:a8:95:55:
         4e:d4:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:30 2025 by rpki-client on console.sobornost.net