Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
File:                     sgBZBkA-medoWaqrsdy92uRCBvY.mft (raw, json)
Hash identifier:          od4xlo1GjzCD4RbaTYVKOSJvApgcQuwRhMrGh5pfIKE=
Subject key identifier:   BF:C0:18:B0:C2:E0:E1:D3:1A:DA:8D:C1:FE:5E:AE:8E:7D:E8:45:0A
Authority key identifier: B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
Certificate issuer:       /CN=A913A748/serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
Manifest number:          93
Signing time:             Sun 27 Apr 2025 05:12:49 +0000
Manifest this update:     Sun 27 Apr 2025 05:12:48 +0000
Manifest next update:     Sun 04 May 2025 05:12:48 +0000
Files and hashes:         1: sgBZBkA-medoWaqrsdy92uRCBvY.crl (hash: 5OkPicFvKpw1BLqtJ62+VVAWkQYzTfm2bPXQdmLAWGk=)
                          2: 0B7CF64642B211EF82734679C4F9AE02.roa (hash: SLWE2DPVkEquMfz8hHroSU4zXY18AR0tkk1tXcWxdMg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
        Validity
            Not Before: Apr 27 05:12:48 2025 GMT
            Not After : May  4 05:12:48 2025 GMT
        Subject: CN=680dbcd0-a3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:7e:b6:b7:41:57:62:7e:88:8d:4b:c7:07:
                    d1:31:ba:83:e7:58:6e:d5:1c:d7:25:2e:42:2a:ab:
                    92:55:b5:fe:36:b4:5a:e4:0a:7e:ff:ad:65:e2:b5:
                    c9:ee:2a:e7:7b:d5:d3:56:c1:e4:b4:97:22:0b:af:
                    81:73:52:f2:0b:64:8d:d2:70:87:5a:3f:a1:c0:c7:
                    5f:3b:b0:dd:ce:20:36:62:4e:f5:9f:a5:a1:a6:d8:
                    56:aa:a2:37:1b:62:66:6b:86:6d:c9:40:7a:05:41:
                    71:99:f5:39:33:51:06:02:1c:a3:ac:5a:dc:51:f0:
                    4e:2c:03:d8:01:fc:b0:f2:9e:7e:36:9b:22:f2:e1:
                    b1:5d:5f:c7:22:11:f0:3b:8c:0e:1d:2b:ea:c9:d9:
                    05:07:91:d2:d5:68:ba:18:19:8a:2e:2f:93:17:64:
                    55:d2:37:4f:59:8b:ed:4f:66:69:8c:27:9e:ab:3a:
                    7e:72:df:b7:60:7f:0e:9e:dd:d7:ee:17:e0:e2:11:
                    8a:31:81:4f:ae:d5:bb:e2:ac:1c:de:84:07:1e:ee:
                    9b:96:b7:56:e9:17:aa:74:07:e3:27:42:ee:0e:e5:
                    5e:cd:83:b7:24:5e:45:b4:15:a4:32:a4:96:18:4e:
                    d3:bd:48:1c:b9:5d:9f:59:46:f4:bb:02:fd:4e:38:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C0:18:B0:C2:E0:E1:D3:1A:DA:8D:C1:FE:5E:AE:8E:7D:E8:45:0A
            X509v3 Authority Key Identifier:
                keyid:B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:e0:62:80:c0:69:15:c8:9b:ed:fd:17:1a:09:94:53:eb:
         18:c2:7a:67:66:87:b6:cc:b6:76:62:9c:5a:01:0a:20:85:15:
         a5:5e:4e:68:2a:53:f2:52:5f:49:86:eb:b2:05:1c:87:30:41:
         d0:3c:d8:8f:6a:1a:b6:4e:05:c8:55:af:70:4f:7d:63:b8:d6:
         25:a3:cc:5c:23:d7:83:fd:c9:e7:3d:4d:8e:15:89:1c:a8:e0:
         3e:d4:eb:8e:82:b6:ff:e2:64:9d:60:0d:9b:13:4a:56:eb:58:
         fd:75:01:5f:13:a2:ad:ba:41:2b:c1:22:9c:4b:d7:49:52:61:
         ef:c9:a3:7e:0e:06:bf:26:dd:55:0c:84:6b:ee:c6:b1:e4:af:
         56:3c:3b:42:9e:de:58:c9:d6:87:d3:5a:27:f0:38:80:80:bc:
         84:68:06:d5:fa:17:d9:af:9f:29:1e:23:13:d9:10:04:30:d6:
         95:7a:ee:b4:5f:a3:9e:21:91:14:2d:27:70:a3:88:15:c1:71:
         fe:1c:c1:d0:0d:b3:f7:91:67:5d:71:9f:ca:6d:64:0c:fc:8b:
         b8:ad:e1:41:98:69:ab:e2:73:52:9a:8b:0c:21:c8:ff:22:2e:
         b7:42:fb:0c:90:7c:7f:88:da:9f:e7:d6:de:eb:1a:98:bb:9f:
         87:91:21:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net