Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File:                     64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier:          qkCezvFP9S7MpB+bRqdWWOE9KsWMaUw0BnAkFdxsNgQ=
Subject key identifier:   32:C2:DB:4D:CC:D8:44:50:41:1C:1D:67:F0:25:23:E9:4B:B3:44:5C
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer:       /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial:       0D6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number:          0D40
Signing time:             Mon 28 Apr 2025 18:14:40 +0000
Manifest this update:     Mon 28 Apr 2025 18:14:39 +0000
Manifest next update:     Mon 05 May 2025 18:14:39 +0000
Files and hashes:         1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: Gu/rUtpgRDoTg+ntmX9OhGU+KOD58rM6xWwo7Jdgx7A=)
                          2: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: yCxqzmWa893doOfv6hENPdTITWlM9j+UWoyn6s0IOuA=)
                          3: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: Add7F0lhUmSvXDEdaWnBa/fqtGzEQ9y//LGpbHGkCZc=)
                          4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: UjEhrY6BSDNfZnVVPw3EjbmEipeGvEYmxIV0JR9ypjw=)
                          5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: qD/bOdMC/KVR6ezx0RF1Ije0zw5T1HsdyQmo2ReK3BE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
                          rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3434 (0xd6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
        Validity
            Not Before: Apr 28 18:14:39 2025 GMT
            Not After : May  5 18:14:39 2025 GMT
        Subject: CN=680fc58f-c2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:28:9c:13:cd:99:73:c4:b6:5c:82:20:b7:
                    24:d4:02:f5:d6:36:d5:88:5b:c5:27:e8:ab:12:28:
                    5e:71:41:59:19:c7:89:08:17:e0:2a:59:e8:4b:c5:
                    6b:58:34:cb:92:bc:01:3d:37:e4:a8:a1:e7:b4:00:
                    e9:67:9a:a5:d4:2f:62:b6:2a:9b:69:4e:b0:cf:31:
                    23:72:b4:62:ac:c8:7d:0e:53:55:b7:82:46:03:44:
                    48:63:f2:54:14:a0:d5:bc:3a:0b:ba:14:e0:2b:f4:
                    66:58:6b:b8:2b:63:38:d5:e3:82:80:e9:2e:18:0e:
                    d6:77:cd:aa:0b:5b:2d:09:01:26:6d:2f:0a:a0:18:
                    0c:56:89:6e:9f:f2:16:b3:b6:d6:2d:ae:5a:f3:ef:
                    ce:60:e3:b9:ab:b8:14:c8:44:6c:dd:25:dc:2d:6f:
                    b5:e1:65:f1:04:88:94:14:20:ea:1a:b0:60:d4:5f:
                    35:ac:83:0d:94:c6:eb:5c:d7:4a:b7:f4:73:25:be:
                    0f:ee:a4:df:b1:cb:7e:e6:17:93:27:61:4a:59:ce:
                    43:0b:bd:54:af:12:c0:97:d2:0f:05:7b:98:bf:51:
                    d1:7c:75:06:58:8d:48:c4:d2:9d:23:a7:0d:65:47:
                    3c:91:43:78:f1:2e:53:bb:a3:12:01:d3:08:f0:69:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C2:DB:4D:CC:D8:44:50:41:1C:1D:67:F0:25:23:E9:4B:B3:44:5C
            X509v3 Authority Key Identifier:
                keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:34:84:91:9b:93:97:4e:34:65:55:0b:cf:37:6b:0d:13:d5:
         20:74:55:88:82:6d:eb:cc:b2:f7:4f:f9:a9:01:4d:17:de:a1:
         4f:31:bb:56:40:19:e8:ea:7d:9d:95:9e:90:21:38:3c:f9:e8:
         13:a5:80:92:90:4f:22:42:cc:ac:6b:24:51:ce:92:3e:ed:ad:
         6f:37:0e:7d:81:21:60:9f:2e:8c:32:39:52:d5:46:d3:2a:b7:
         ea:08:b6:b3:3e:31:04:27:db:5d:fc:70:a2:77:f8:2f:1f:40:
         8b:da:04:0c:fc:54:59:a6:a3:a6:15:da:30:84:32:54:4b:ce:
         9a:96:69:9f:1d:8c:8d:ca:c1:65:fd:ef:95:f5:9f:16:4c:af:
         f5:b5:1d:7f:eb:60:7d:44:32:8c:b0:98:81:a9:43:66:08:de:
         36:c6:b4:33:52:27:48:18:c6:d3:d3:e2:b1:33:a5:f6:7e:f7:
         f9:9c:bd:0d:bd:33:d9:d0:7d:25:97:0f:8a:03:82:6c:b1:4a:
         a6:b5:0e:5b:b3:88:02:52:63:85:17:eb:7d:d4:09:31:db:ae:
         92:b2:13:b3:bf:15:27:cd:89:5c:d0:cc:17:02:0b:26:ce:a8:
         76:08:e7:c8:29:42:80:91:59:f0:cc:d3:56:19:80:e2:ed:54:
         c8:4f:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:29 2025 by rpki-client on console.sobornost.net