Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
File:                     eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft (raw, json)
Hash identifier:          kKlKZ0vIUyTlQ17LjDqd/gcHsX5C1XQyBCHf0iZhlyI=
Subject key identifier:   1A:CA:4C:21:C8:5C:BC:CF:57:AB:EC:48:38:FB:D5:16:D9:43:97:4F
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Certificate issuer:       /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial:       0569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
Manifest number:          055B
Signing time:             Sat 26 Apr 2025 23:05:20 +0000
Manifest this update:     Sat 26 Apr 2025 23:05:20 +0000
Manifest next update:     Sat 03 May 2025 23:05:20 +0000
Files and hashes:         1: eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl (hash: jP9T41ImI++EMtFueIN1sbwIakf6n0Uxj5qebkSRayg=)
                          2: 2A1068EAC1EC11EF80524527C4F9AE02.roa (hash: V9KDDZ7M/8ylm+OcEB+fEXbgLS+TdMHqST7enhIrxwc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
                          rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
        Validity
            Not Before: Apr 26 23:05:20 2025 GMT
            Not After : May  3 23:05:20 2025 GMT
        Subject: CN=680d66b0-3f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:30:06:c7:61:c4:b0:3e:d8:4c:a5:3d:bf:
                    cd:d7:dc:15:07:48:c9:79:38:11:d5:f2:c4:b7:85:
                    f7:a7:27:62:d9:3a:1c:67:05:9b:4b:9b:0f:da:ed:
                    d2:cd:cb:8a:45:0f:d9:7b:4d:d0:36:d4:3e:7e:1b:
                    4c:63:3e:ba:d4:7c:3f:6f:f2:74:2f:90:78:13:c4:
                    96:01:af:95:3e:f1:18:22:92:10:2d:67:6a:a0:17:
                    48:b2:12:d3:0e:64:43:95:8a:10:15:71:ae:33:d9:
                    43:e2:99:cf:ba:4f:b2:d5:f3:26:4f:c0:d4:96:04:
                    f5:6c:7f:98:33:e3:58:ef:4d:8e:81:60:38:bd:7a:
                    f6:01:54:06:3b:a5:6c:13:c2:01:67:03:b7:c3:fb:
                    bb:fb:c7:d9:8d:56:12:0a:3f:47:6c:dd:1f:a7:b2:
                    30:a0:ac:85:61:2c:a8:5b:84:9b:b9:3d:82:f3:79:
                    e5:b9:38:9a:ef:75:20:2c:fe:87:fa:c3:c4:91:f6:
                    3d:94:c3:58:3d:44:34:49:a5:38:49:27:34:9d:55:
                    7e:bb:57:61:80:9e:6f:74:37:08:2d:fd:4c:a3:75:
                    ab:ca:c5:db:06:ae:40:67:f0:44:40:0e:3a:b0:9f:
                    4e:19:a9:81:5f:fc:2a:c7:a3:47:59:fa:91:c5:fe:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CA:4C:21:C8:5C:BC:CF:57:AB:EC:48:38:FB:D5:16:D9:43:97:4F
            X509v3 Authority Key Identifier:
                keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:3e:e7:b1:2c:ec:3b:08:7b:ef:7c:6b:78:7e:0e:90:e9:
         a2:2b:5b:50:32:f8:0e:ae:32:3a:00:b8:88:29:c0:9a:42:29:
         89:08:0a:17:99:08:c7:fd:77:4d:99:8f:34:36:91:47:c1:16:
         16:e9:0b:2c:7f:6c:c9:0a:b5:59:fd:9e:46:2f:40:60:ce:0d:
         2b:95:a7:c2:1b:bc:48:dd:c9:38:dd:a1:b5:4b:8b:d9:ab:c8:
         7e:1e:ba:ad:d9:f7:41:1c:a0:ce:b6:65:15:66:e4:4d:cd:56:
         07:93:75:23:20:1b:ba:6d:c0:c8:4a:2b:8d:9d:97:ce:f4:dc:
         1e:60:35:87:68:02:61:22:dc:7f:44:7c:5a:df:ca:7b:10:2e:
         3f:20:96:be:aa:73:3f:a7:bf:3e:e1:a2:0f:d0:fd:a2:59:ea:
         43:d9:a6:42:69:1a:b4:52:69:de:60:f0:ad:73:c7:f1:85:60:
         0a:03:ea:50:04:2a:49:e2:d3:dd:fe:7b:90:c1:f3:05:41:f7:
         3d:36:1a:a4:70:b9:bb:8a:81:ab:2f:43:9d:6a:52:21:9d:3f:
         08:a5:94:b2:4c:b3:81:3b:85:e6:5c:7a:9f:17:f5:b0:fe:09:
         33:2c:cd:e6:1a:1f:ed:7e:99:9d:0f:67:cd:0c:68:e1:97:83:
         3f:8d:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:38 2025 by rpki-client on console.sobornost.net