Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
File:                     cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json)
Hash identifier:          7I0JDE0b8hbZA2rVo1QZII18M7DjJB9BTk6z7eJkz9c=
Subject key identifier:   F1:0A:B8:46:52:CC:8C:10:21:D1:7E:E5:BB:CC:E5:EE:BF:61:40:EC
Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
Certificate issuer:       /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
Certificate serial:       0771
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
Manifest number:          0764
Signing time:             Sat 26 Apr 2025 21:16:16 +0000
Manifest this update:     Sat 26 Apr 2025 21:16:15 +0000
Manifest next update:     Sat 03 May 2025 21:16:15 +0000
Files and hashes:         1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: r9hIdNYmdry2HIB6zI44JEFadDYXFk2rUoBglQVXVmY=)
                          2: 4848EB6E18BF11EBA5E2E946C4F9AE02.roa (hash: WcA0e7saPqIm2zyMau/4bmWlWFCaJQ2WBh7b1zXUWss=)
                          3: 47B8C6B018BF11EBA5E2E946C4F9AE02.roa (hash: saRxbZnY10CKxPD1pSytKLg8FuSkNaBBrOYD5Hz5qjk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138171, serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
        Validity
            Not Before: Apr 26 21:16:15 2025 GMT
            Not After : May  3 21:16:15 2025 GMT
        Subject: CN=680d4d20-4f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:7c:75:dc:bc:c3:6d:a1:f5:a5:64:d1:da:
                    a2:be:f5:f7:7a:bd:1f:e9:af:13:72:11:d8:e5:a6:
                    7c:e2:ab:28:ce:90:e3:e5:7d:2d:73:e3:d9:16:1f:
                    88:99:a9:34:1e:90:6c:02:07:2e:54:d4:f8:b1:df:
                    e8:c9:11:f1:56:e1:3f:8a:f0:ff:70:c0:41:1f:36:
                    8f:df:3c:06:9e:33:65:2d:35:dc:30:fe:6f:b1:c6:
                    bd:56:27:96:bf:84:47:b1:8c:bd:74:a3:3d:36:10:
                    de:af:13:ce:d2:ec:d2:8c:f2:df:f1:ff:db:57:c2:
                    e0:c2:51:56:93:c9:80:64:c1:75:18:4f:a1:1b:f4:
                    fc:f4:65:46:33:50:dc:a1:e0:4b:48:eb:97:f1:a8:
                    0c:82:49:bc:af:df:56:e2:75:97:ca:44:d4:e1:c7:
                    d4:ae:16:72:c7:6b:55:fa:0d:f3:83:62:fa:62:a3:
                    27:0c:dd:d5:1c:a4:c3:ec:50:e9:ec:e7:68:97:b9:
                    6d:b4:04:47:5e:91:1d:9c:2d:f7:71:7e:e1:4f:31:
                    b5:be:87:25:a1:0a:13:1a:a2:51:0f:95:3b:1e:34:
                    a3:08:1e:d2:07:9f:d2:01:95:fa:a9:70:9b:d8:c3:
                    14:fe:29:26:ac:78:07:12:15:68:db:26:d7:25:ea:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:B8:46:52:CC:8C:10:21:D1:7E:E5:BB:CC:E5:EE:BF:61:40:EC
            X509v3 Authority Key Identifier:
                keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:80:4b:74:e9:91:4f:e2:d4:25:d3:34:04:19:62:27:41:2b:
         41:60:ca:f9:01:d4:69:7f:8b:6b:9c:14:fd:41:4b:17:66:f0:
         e7:6c:f8:76:15:87:6b:52:2d:c0:c5:f2:81:da:ed:3c:84:2a:
         71:50:6f:a5:ae:41:d1:fd:f1:ce:f4:1a:e8:1f:9a:e9:35:03:
         b6:b4:d0:bf:bd:18:7d:3b:1f:45:6f:66:24:57:58:5c:d6:f4:
         8b:b7:3e:55:57:4d:a8:54:d4:f2:61:e5:4c:bc:6f:8e:a1:48:
         62:11:b1:e7:b5:c0:37:5e:ea:43:6e:62:62:59:9f:97:e0:ac:
         c1:23:7a:fe:e8:37:12:e5:ab:3c:64:3b:6b:30:14:d4:92:9d:
         c4:7a:a5:56:e8:9c:66:94:83:94:06:21:c8:63:58:86:85:73:
         eb:67:4a:10:2a:ad:44:be:63:c6:9d:d1:6b:17:8f:9a:b7:73:
         30:0d:1b:67:26:46:86:cf:3d:c5:cd:93:d8:c0:fb:40:4c:01:
         15:14:84:ed:73:92:e9:26:6b:9b:a8:41:62:54:2e:2a:49:b7:
         5e:39:e7:da:e1:dc:45:88:18:3f:14:50:db:7f:32:78:f5:c3:
         ed:4b:d1:c9:0d:ca:7b:26:35:25:14:ab:ba:92:6b:61:bc:58:
         e7:52:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net