Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
File:                     uIC429cILNkYtiF73qCXWEWR290.mft (raw, json)
Hash identifier:          EbBEPLVh6v/ZwL0V071iyMBhq98k5MQbOfJ++Cmhu9o=
Subject key identifier:   C6:F6:5F:25:39:F2:10:4B:19:76:39:FB:D5:13:E8:FB:28:11:8F:65
Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD
Certificate issuer:       /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
Manifest number:          38
Signing time:             Sun 27 Apr 2025 06:25:12 +0000
Manifest this update:     Sun 27 Apr 2025 06:25:12 +0000
Manifest next update:     Sun 04 May 2025 06:25:12 +0000
Files and hashes:         1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: gQu8ZNe32li8WFYI9O1GRxdLeueYjsKcE0QoojrdO5Y=)
                          2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: rxJJmD5OYbq6xF7owInMRKSqMF5l2EY96R9IaFA9M1E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl
                          rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
        Validity
            Not Before: Apr 27 06:25:12 2025 GMT
            Not After : May  4 06:25:12 2025 GMT
        Subject: CN=680dcdc8-a5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:0a:54:37:d5:0e:0c:65:6e:1f:df:9a:91:
                    df:65:06:70:70:49:c9:16:53:df:f7:fb:90:80:f9:
                    72:24:25:b3:4f:40:39:e1:3f:25:96:69:6f:19:c6:
                    3c:81:a6:19:93:5b:b1:0a:86:03:4b:85:85:d1:72:
                    10:cc:b4:d4:13:21:c2:7d:db:ba:01:53:20:b2:36:
                    3e:72:94:bb:cf:b3:11:e4:5e:66:e8:7c:08:d4:9b:
                    14:2d:07:57:e7:2e:aa:58:bd:4d:a5:8f:47:45:c0:
                    ae:2a:41:15:56:b4:9b:87:f3:a3:93:6f:74:92:a7:
                    af:d9:42:e3:32:80:f6:20:78:b1:48:d1:02:4a:a6:
                    1b:e1:58:70:02:d7:4e:ec:c5:ea:04:c6:33:e1:1c:
                    5e:1f:13:95:78:b8:3a:27:b7:5d:97:6e:66:1b:b1:
                    95:88:ea:34:ee:ce:77:25:05:72:22:78:db:2c:b9:
                    c1:69:b7:28:38:78:e7:74:90:88:a9:eb:67:69:64:
                    c0:50:34:a4:fd:f1:84:fb:3d:34:44:e7:76:b8:ca:
                    e7:51:45:d1:ae:03:b3:e5:93:a8:15:c2:2e:d4:32:
                    b0:e2:b5:90:30:58:8b:8a:61:e6:62:aa:cc:4e:94:
                    ff:68:6f:e5:88:bd:8b:97:4b:74:c2:8a:d2:01:03:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F6:5F:25:39:F2:10:4B:19:76:39:FB:D5:13:E8:FB:28:11:8F:65
            X509v3 Authority Key Identifier:
                keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:7a:e3:76:49:26:59:0f:4e:f7:6b:07:ba:91:0c:4e:46:cc:
         f4:f0:70:2d:01:f9:81:ac:67:21:b8:d8:de:71:64:25:63:f4:
         58:6d:72:d5:c5:bb:e5:8b:0c:39:80:03:f1:26:71:29:10:90:
         4c:19:8e:7d:9b:71:5e:c3:b5:14:12:8d:f9:d8:07:f7:55:8a:
         97:5a:d5:74:be:d0:c0:b4:3e:59:26:1c:f9:24:2d:c4:71:1f:
         58:94:77:3b:34:7a:9e:3e:e9:c1:2c:f6:8f:d7:3f:58:0b:bc:
         41:33:79:a4:65:b4:18:bf:cf:e1:e6:ad:c0:4c:95:a3:a7:74:
         4b:50:b5:fc:a8:20:40:b3:00:e6:08:83:07:4d:f2:af:b0:9e:
         c4:b9:fa:c3:c7:54:68:7f:8f:a7:57:36:24:f7:ff:4c:63:ad:
         cb:37:20:ee:7e:1b:be:eb:85:bd:6d:b5:0c:cf:0a:38:7f:b2:
         d9:34:d4:c2:ed:cb:c8:a0:db:d1:82:47:ab:df:76:3f:6a:78:
         14:26:a2:ab:15:ae:41:62:5d:51:53:10:5c:d3:69:49:aa:82:
         01:08:95:67:46:0b:00:4f:69:73:8c:08:d4:b4:81:c5:bd:ca:
         8d:f7:03:e0:e5:41:6c:6a:ff:0b:1a:c8:ec:2f:71:19:21:d8:
         ac:66:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net