Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File:                     RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier:          g/MpueYFxGIk1lLaUaWhot24IwaOb0qe90dR0DRfF2E=
Subject key identifier:   16:90:89:E1:EA:08:FB:9C:48:1F:64:EA:28:8C:C6:44:DD:27:9B:40
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer:       /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number:          59
Signing time:             Sun 27 Apr 2025 05:58:48 +0000
Manifest this update:     Sun 27 Apr 2025 05:58:47 +0000
Manifest next update:     Sun 04 May 2025 05:58:47 +0000
Files and hashes:         1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: hU/EqjDpqVSOnPFGY6LGdXgsR4s1bY28QIs8VLEmomc=)
                          2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
        Validity
            Not Before: Apr 27 05:58:47 2025 GMT
            Not After : May  4 05:58:47 2025 GMT
        Subject: CN=680dc798-843e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:52:63:ec:28:69:0b:a0:01:ce:b5:86:49:
                    e1:aa:75:bd:78:f0:94:4e:62:92:db:45:00:5a:e3:
                    cc:c4:13:30:e3:53:db:10:22:ee:01:4a:5e:ef:e4:
                    fa:0d:a9:fc:29:b7:22:a9:df:b6:08:7c:84:ae:31:
                    50:e1:28:7a:ce:0d:bc:d1:be:6d:56:c9:e2:03:cd:
                    2d:8c:6d:d0:4e:70:a1:98:de:44:d2:a4:ed:73:59:
                    5b:43:73:42:67:40:e2:39:a2:b4:70:6c:69:a0:a1:
                    8b:0f:90:2d:de:90:94:24:f2:ab:48:e6:9f:da:11:
                    93:0d:dc:e3:b5:2f:cc:0b:8c:96:80:24:9a:b0:d6:
                    dd:aa:56:7a:d3:fe:43:89:70:0e:30:81:27:d5:2d:
                    20:d9:34:55:27:15:ac:4b:19:1b:4c:f9:e3:85:3a:
                    35:34:73:c0:15:29:a2:bd:39:e3:b9:e3:17:bb:c3:
                    62:70:a0:31:91:e4:d4:57:e4:e2:37:f8:5d:21:bf:
                    d2:ff:d4:84:59:64:ae:37:b3:8c:00:65:60:a9:74:
                    89:b0:a6:c6:ab:3c:69:f4:73:23:dd:fc:76:5d:ef:
                    80:62:c0:aa:60:96:f3:6f:db:d1:0b:29:b5:0a:63:
                    5b:e7:ed:fc:34:a2:5b:07:e0:46:e2:2d:81:9d:0a:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:90:89:E1:EA:08:FB:9C:48:1F:64:EA:28:8C:C6:44:DD:27:9B:40
            X509v3 Authority Key Identifier:
                keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:93:71:f6:df:9d:d7:9a:05:36:0c:68:33:9e:03:01:a7:30:
         0f:1f:4d:dd:19:f1:a4:21:89:83:6b:09:21:e3:ad:39:c7:7b:
         c6:e1:98:08:ff:82:16:15:e9:da:36:97:9b:68:d1:fd:9b:1d:
         92:7b:17:03:0c:d2:34:89:84:08:f3:50:75:74:5b:8a:a9:be:
         a5:7a:a1:73:1f:d4:94:19:5a:f6:01:40:3b:d5:fa:b7:50:12:
         9c:16:45:02:72:1a:38:08:b1:71:b9:96:b5:01:cc:75:5b:56:
         b0:00:d2:b8:de:29:8a:eb:bd:3a:68:3f:ea:f9:f0:d5:70:5d:
         23:15:c6:7f:7b:cd:50:f2:5c:7e:18:47:43:8c:3c:a4:af:9b:
         d2:e4:d4:95:ee:d0:a4:51:a5:64:70:e9:53:36:7e:2c:0b:a0:
         36:87:c5:f6:dc:1d:4d:a8:48:69:59:b2:09:b3:d3:83:b0:4d:
         bc:31:57:be:22:c2:9a:17:d4:19:33:61:a0:09:ce:31:08:c3:
         3a:2f:19:27:c0:cd:24:85:c6:e4:df:cd:a3:13:01:83:66:22:
         a3:fb:4b:6e:c8:33:b7:9b:a2:2c:44:7a:66:99:93:fd:77:ab:
         03:2a:7a:41:c0:c7:49:25:d8:0b:5a:a4:6a:82:40:c0:c5:0d:
         4c:b3:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net