Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File:                     ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier:          T5UZJQx8QaD18UMTSUxaMtPq0nBd34vpJrhlLdVuJxQ=
Subject key identifier:   AC:D5:B6:58:19:E9:EB:84:E9:57:DE:06:55:15:90:1F:F7:46:6D:5B
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer:       /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number:          0856
Signing time:             Sat 26 Apr 2025 20:28:13 +0000
Manifest this update:     Sat 26 Apr 2025 20:28:13 +0000
Manifest next update:     Sat 03 May 2025 20:28:13 +0000
Files and hashes:         1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: o3qG53lu01eAqFgObyxoMTc0qzw58xvq2x5Dl811EAI=)
                          2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
                          rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
        Validity
            Not Before: Apr 26 20:28:13 2025 GMT
            Not After : May  3 20:28:13 2025 GMT
        Subject: CN=680d41dd-649a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:62:bf:5b:7b:9a:00:eb:0c:52:e4:18:b6:
                    51:c3:0e:d1:62:30:f5:4f:f2:41:08:84:d6:87:07:
                    a1:ab:ac:ea:2d:bb:9f:c0:be:e7:47:f2:6d:e8:e7:
                    fa:4b:a7:4c:2b:bc:d6:d6:01:89:59:4c:1f:21:c2:
                    d9:94:07:bb:fc:db:0a:50:b3:ac:8b:08:69:97:35:
                    73:75:5d:27:12:d1:37:71:db:7f:ac:2a:a8:cd:34:
                    b5:f7:98:2c:95:60:d4:50:99:c6:d1:36:79:39:a2:
                    18:9b:6a:e3:e7:25:e3:38:a1:56:b8:4e:9f:3e:68:
                    bb:f7:d9:ad:ad:ca:3c:41:50:df:00:b9:85:78:3b:
                    4e:a7:f0:33:83:68:f7:19:4e:65:f4:a1:1f:02:db:
                    04:a6:81:78:11:fd:de:28:c8:f9:d4:69:ce:93:04:
                    e9:aa:03:d7:d1:1f:84:5e:c2:5d:16:00:4b:4c:72:
                    46:85:a0:7c:2c:7b:c8:66:ef:f7:48:82:42:b3:8c:
                    8f:e3:50:7c:1d:82:1a:4c:04:8e:ca:d3:c4:e7:11:
                    e5:ac:7f:cb:f0:3b:e8:1a:4a:52:03:a7:05:21:a6:
                    ca:54:3d:f6:ab:e3:7b:5d:7c:56:f9:34:e4:65:0c:
                    3f:93:a9:b4:c0:38:9d:21:5f:46:9f:f5:e0:f6:87:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D5:B6:58:19:E9:EB:84:E9:57:DE:06:55:15:90:1F:F7:46:6D:5B
            X509v3 Authority Key Identifier:
                keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:86:da:b9:78:7f:b3:7a:ad:dd:ab:91:34:25:56:65:40:7d:
         84:41:80:dd:d2:b4:b9:f6:ac:53:6f:6b:79:75:12:01:96:c8:
         9b:2d:ef:a8:d0:9f:28:74:c3:05:d9:a4:a8:d4:1f:5c:af:d8:
         67:34:bf:5a:f9:c3:46:ee:a8:f4:38:e3:b6:04:4d:65:a3:a6:
         c6:51:87:3b:4b:c8:18:2b:53:c6:8c:52:b0:f8:f0:54:c0:72:
         74:90:0a:0b:87:82:79:85:51:f2:3c:c2:8d:28:53:b9:c7:c7:
         16:e8:38:0e:f5:46:b5:de:a7:78:bf:d8:1c:b8:18:ea:c9:fc:
         66:97:72:c8:1f:08:1f:15:17:36:bb:77:b7:aa:6a:65:b7:14:
         a4:79:07:57:06:b5:76:41:9a:42:36:63:3e:63:37:cd:1a:8b:
         06:fe:40:a7:1a:ff:9d:91:7a:46:f9:e3:5c:07:3e:a3:11:7c:
         61:57:13:7d:b4:2d:42:9a:a1:03:e8:89:af:95:f3:67:0d:72:
         03:04:ab:d9:48:4a:68:a2:91:11:80:bd:51:81:37:7c:77:d9:
         18:70:79:e2:1f:96:cb:cb:bf:a0:9c:d8:f1:66:c7:b1:dc:81:
         b3:8a:7b:f2:66:c6:27:21:b8:01:5e:58:d5:fb:08:de:81:62:
         42:79:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:57 2025 by rpki-client on console.sobornost.net