Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
File:                     YoQgfQ0noui_TS6xT7EpytT2zD8.mft (raw, json)
Hash identifier:          6qo67EbO05SSkSDTRIdX5bx6udpDla6OotiQ+t6YjE0=
Subject key identifier:   30:84:EB:14:9E:19:C0:58:3A:0E:9C:64:B8:02:48:80:F7:18:10:29
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0E9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
Manifest number:          0E80
Signing time:             Mon 28 Apr 2025 17:56:23 +0000
Manifest this update:     Mon 28 Apr 2025 17:56:22 +0000
Manifest next update:     Mon 05 May 2025 17:56:22 +0000
Files and hashes:         1: YoQgfQ0noui_TS6xT7EpytT2zD8.crl (hash: rfHsIFmGeYy4X/yOJIiICRy/VsPwcuboJcIAmIcSEuo=)
                          2: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (hash: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=)
                          3: 50E999AA911911E9BEF5F94EC4F9AE02.roa (hash: oCjpYZp3Jq8v9CYytKf/Jy8pzYlTc/kezyUqPc+tK1E=)
                          4: 2012E112712611EB8BCB2B84C4F9AE02.roa (hash: yrTYzTGLD7DdI6Sq4pABNT1xu81eDL8OtDlxoy9a6BI=)
                          5: 504E3B04911911E9BEF5F94EC4F9AE02.roa (hash: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3739 (0xe9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Apr 28 17:56:22 2025 GMT
            Not After : May  5 17:56:22 2025 GMT
        Subject: CN=680fc146-9fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:10:ec:8c:e3:a2:46:fb:f8:a4:20:29:01:
                    20:ba:5f:d0:4b:dc:0b:ab:30:1c:d2:2a:4a:1f:e3:
                    32:68:ed:ab:ff:3c:55:7a:d6:03:3d:a3:f8:45:2b:
                    5b:a1:c8:b9:11:96:d7:cd:0e:88:ae:3f:14:79:73:
                    6c:80:8a:6d:a0:c7:39:09:31:68:f8:29:0a:50:11:
                    81:d5:34:32:df:07:cf:77:77:45:1b:c2:82:ad:63:
                    31:40:96:bb:a9:c9:57:77:98:59:76:cf:ca:74:fd:
                    61:70:82:7b:a3:92:76:83:8b:94:5b:63:47:25:b6:
                    f2:db:d5:0c:ad:ba:15:be:df:e5:24:68:59:44:63:
                    24:b7:a6:40:e5:f8:90:d6:ab:43:fd:df:97:d7:df:
                    80:14:a7:2e:ae:12:46:8c:a8:cb:33:7c:83:25:b7:
                    4b:78:72:73:cd:9e:fa:13:4c:f3:e2:b0:7b:a5:e6:
                    ca:11:e3:75:6b:4b:50:f2:cf:bf:3e:47:7c:10:b1:
                    1c:97:fd:9a:97:a2:b6:ea:6f:40:3e:78:86:07:ae:
                    92:86:a7:d9:0d:2b:b7:0f:58:3e:60:37:4a:78:78:
                    be:10:66:fa:02:72:dc:99:be:39:e2:94:63:c4:c2:
                    eb:48:3a:0f:dc:0e:67:4f:c3:b7:1f:2c:fe:75:7b:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:EB:14:9E:19:C0:58:3A:0E:9C:64:B8:02:48:80:F7:18:10:29
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9a:79:9a:e1:00:1b:87:13:83:b1:31:02:f9:e2:88:2d:c3:
         91:3a:28:8a:43:8c:23:be:c9:27:ea:a2:d7:4e:7b:6f:2f:31:
         c5:70:09:cf:cf:66:eb:07:30:b4:f6:f7:76:49:69:81:61:a6:
         16:94:44:21:30:83:3a:60:6a:47:0b:42:07:1d:2a:73:a0:4d:
         11:4c:2c:78:d6:70:8f:61:37:c8:da:db:c1:d8:83:2f:ed:15:
         67:23:18:8a:8b:63:d7:c9:7e:1c:27:0b:9f:e2:0d:7e:87:e3:
         20:fd:ae:2e:db:34:ab:bd:91:fb:15:71:ee:c3:0b:31:d8:01:
         6d:35:7b:24:a1:f5:20:dc:c6:40:02:d6:e6:88:89:c7:c9:4e:
         a0:d2:bc:af:20:de:f6:a8:a0:ae:27:61:be:73:46:0f:30:d9:
         00:33:7b:bc:f6:02:47:65:aa:30:e6:f7:00:d1:6e:ec:ae:66:
         d2:f7:37:eb:3e:4f:36:1c:ad:8c:ab:37:6e:21:c2:db:08:d1:
         e8:31:95:b3:36:ec:15:0a:2b:d1:f2:09:61:e6:fe:4a:6e:0a:
         6a:90:18:f3:54:25:30:4e:f1:80:e7:85:b3:50:dc:53:38:9e:
         cd:c8:3b:2b:2c:ef:e0:2a:f2:95:36:5c:2a:50:a4:65:88:63:
         ab:28:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:31 2025 by rpki-client on console.sobornost.net