Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
File:                     JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json)
Hash identifier:          xbNWHP+dg9YksHNpFd36RJcEjyeqsIGs4Qy0HtROKjM=
Subject key identifier:   3A:A5:02:7F:BF:E5:34:E0:55:64:01:DC:52:28:4E:39:8B:67:EC:A1
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Certificate issuer:       /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial:       16BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
Manifest number:          169C
Signing time:             Sat 26 Apr 2025 16:38:43 +0000
Manifest this update:     Sat 26 Apr 2025 16:38:43 +0000
Manifest next update:     Sat 03 May 2025 16:38:43 +0000
Files and hashes:         1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: 5iM6WAHbY+lSZfy9TP5aIhlerWa3YeLVnQS9YO+I0SU=)
                          2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: i/Bdlwtsw60KlWyTtnZoHMYWyMWkX8rBZXwz4SUYdDY=)
                          3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: x5fSlx3nNKz6ifMgnnFr+DL48Yd9QT9h8VtP+zrrY4c=)
                          4: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: 9PGVW+39KLlj0WI9eJ5OovuG1UvnRDi3eMzS7oZFC4g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5823 (0x16bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Validity
            Not Before: Apr 26 16:38:43 2025 GMT
            Not After : May  3 16:38:43 2025 GMT
        Subject: CN=680d0c13-9774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:0b:2c:c5:c7:3e:ee:cd:28:d4:c9:42:b6:
                    eb:bb:38:08:46:3e:88:8c:14:9e:a0:75:97:4c:6e:
                    df:1f:db:41:59:f5:fa:06:7b:cd:56:17:34:97:ae:
                    e1:3e:94:4c:70:84:ee:56:37:b3:5c:00:02:17:68:
                    82:0f:98:df:84:30:7b:eb:68:45:bd:ac:5e:eb:ab:
                    30:84:81:5a:04:2f:93:40:74:38:8c:c4:04:00:8a:
                    6b:55:f1:3f:4c:fc:fb:d9:e4:2a:09:cf:76:c6:05:
                    85:92:bc:22:8f:33:04:dc:42:50:30:6a:df:8a:f1:
                    88:bc:0f:7c:12:2e:06:e3:6c:ae:3e:5a:be:e9:9f:
                    00:cf:75:66:90:cd:b3:be:47:ef:75:2a:ba:f3:9f:
                    ba:b8:b1:5e:83:09:4c:fa:e8:08:e9:4c:80:10:7b:
                    36:63:22:03:2e:4a:fa:3b:c6:ed:60:44:88:f8:b2:
                    7a:2c:fb:18:17:9c:04:88:93:a2:8e:97:80:8a:f1:
                    22:06:b8:eb:58:f0:f5:a0:62:e4:58:f8:c4:d9:3a:
                    48:cb:3b:bd:c0:35:55:15:26:fe:00:96:cb:f6:38:
                    d9:51:eb:56:3f:c2:ea:2e:53:1f:4d:90:1d:3a:69:
                    29:28:9b:ef:a3:2d:ab:c5:3c:d0:f7:02:c4:2f:bb:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A5:02:7F:BF:E5:34:E0:55:64:01:DC:52:28:4E:39:8B:67:EC:A1
            X509v3 Authority Key Identifier:
                keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:21:ac:52:85:15:50:7b:88:5c:50:67:18:34:bc:5e:ae:be:
         cc:2a:1f:41:86:51:eb:9d:16:4e:4a:71:86:fa:5d:64:8d:68:
         20:03:8c:17:19:53:8b:1e:0f:fc:94:4f:12:34:d8:67:c0:fc:
         0d:5e:4c:92:54:59:8c:20:ba:aa:bc:49:ef:85:d1:4c:e9:55:
         58:a7:d5:63:65:2d:86:30:90:e5:18:10:17:d7:e9:00:f0:91:
         34:d5:60:65:ae:81:d9:c8:9a:21:d6:3c:77:da:30:ca:39:96:
         49:9a:6e:dd:50:ec:32:26:88:6e:42:f4:48:7e:2d:78:c4:cc:
         4b:b3:55:9a:74:c2:b3:f3:f4:f1:d6:b9:80:d7:2b:9c:bf:d6:
         b5:f5:78:c9:c2:4f:1a:24:be:a1:ec:b6:99:ad:26:08:92:24:
         a0:db:7d:06:7b:4f:08:8c:ef:81:76:4a:e0:51:e1:b0:3a:65:
         4c:71:28:a5:eb:8f:f2:53:e4:f0:db:d3:88:f1:ce:f4:34:7f:
         5e:f0:8e:fc:1f:7b:cf:75:db:3c:34:96:fc:ed:43:87:c0:26:
         37:16:ba:69:2f:a9:86:6e:b4:3c:22:ee:8c:9a:dd:ed:28:46:
         6c:12:55:98:2a:6e:cc:95:44:70:8f:fd:1f:94:a4:e1:d8:ba:
         11:b0:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:51 2025 by rpki-client on console.sobornost.net