Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
File:                     jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json)
Hash identifier:          orqP7oRrA5JeaCUDplFOqAjUE5wdUkU59qVJzj3Qjkg=
Subject key identifier:   06:72:3D:DD:96:E1:16:A1:6C:48:82:62:7F:9B:0E:20:37:07:86:B4
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       04AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
Manifest number:          049F
Signing time:             Sat 26 Apr 2025 23:37:11 +0000
Manifest this update:     Sat 26 Apr 2025 23:37:10 +0000
Manifest next update:     Sat 03 May 2025 23:37:10 +0000
Files and hashes:         1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: HOY9kbB3nNi+F0k5UJ008fJ/TTY4S/Kfm+2RwlAgHa4=)
                          2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=)
                          3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Apr 26 23:37:10 2025 GMT
            Not After : May  3 23:37:10 2025 GMT
        Subject: CN=680d6e27-bae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:06:0e:6f:0f:45:c0:2a:3f:70:b1:d6:47:
                    69:4c:77:19:1a:fc:7d:2d:cf:f5:27:99:fa:48:13:
                    a0:7f:f1:88:ab:17:c4:dc:01:df:7d:20:4d:3a:42:
                    57:39:51:21:15:75:5c:e3:90:d0:11:ae:85:0c:96:
                    0a:da:29:1f:09:22:44:b0:7e:8e:de:e3:52:7d:93:
                    74:ba:4d:b3:d2:c1:e9:34:80:d9:4d:27:8e:e4:5f:
                    c3:7e:04:30:4d:d6:f6:82:4f:0e:df:1b:26:65:9f:
                    fc:dd:de:0e:ea:b8:20:e8:7c:31:87:74:2c:c3:68:
                    56:29:8e:67:c7:c7:c7:2b:b4:99:50:88:da:42:75:
                    a1:63:6c:2f:60:43:cc:a8:af:72:90:78:09:56:29:
                    c2:16:0c:f0:9e:34:11:b4:f7:b7:74:ba:b1:56:bc:
                    55:2f:9f:7b:c2:97:6f:01:09:46:99:8e:ff:3a:38:
                    d2:89:74:28:04:3b:a0:4c:78:cf:f9:66:81:1e:37:
                    72:7f:e8:7d:f0:2a:05:c3:0c:88:42:89:ad:8f:c0:
                    92:59:9c:24:be:24:d2:0d:0c:cd:02:2b:bf:2e:ee:
                    3a:18:f7:f6:d3:99:c0:41:a3:52:0d:68:be:d1:0f:
                    37:7a:90:4c:07:0e:18:1e:34:f8:16:99:54:0a:d3:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:3D:DD:96:E1:16:A1:6C:48:82:62:7F:9B:0E:20:37:07:86:B4
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:54:3b:73:38:da:3d:de:30:a9:9f:3f:4d:b5:e7:e7:34:9f:
         e1:df:ce:8f:4e:e1:65:f0:6a:99:73:bf:b6:62:4d:2c:24:34:
         fe:2e:c8:5f:00:a5:48:e9:55:35:04:71:7d:0e:22:61:38:09:
         55:77:6a:00:03:c8:30:38:62:ab:37:aa:ce:86:c2:50:b6:75:
         d2:2e:6b:77:4b:97:88:a9:3b:44:85:11:55:c6:ba:a9:35:81:
         f5:06:97:23:af:90:83:7c:be:53:27:ba:ab:e1:7d:65:77:f8:
         aa:f5:76:a3:be:9a:1e:55:2d:24:dc:ad:33:51:a0:e2:59:34:
         46:80:c8:d2:9e:1c:51:dc:2d:76:40:ab:ec:0e:14:ea:a0:64:
         67:09:76:bb:e4:bc:e4:6c:fa:44:8a:e0:f4:80:5b:df:a8:76:
         95:e5:16:0a:ee:9a:f3:df:d2:cd:22:93:4e:db:2c:8f:a0:7d:
         aa:97:15:3a:44:6c:62:43:0f:8b:04:c2:9e:08:4d:ae:b0:2b:
         e1:53:ef:81:18:54:0e:ae:07:79:19:0c:cc:a1:56:68:a8:35:
         b1:cb:dc:f3:01:66:ef:b0:6c:dc:a7:e2:b0:bb:3e:c8:10:c7:
         c6:2a:c8:be:8f:e9:c7:63:6c:01:44:2c:96:2c:1c:e8:f9:1b:
         8c:bc:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:38 2025 by rpki-client on console.sobornost.net