Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          zeLv9p25Opg6jkvMwi1O99sqjJFWExSAk3EJ0K0jkJA=
Subject key identifier:   0D:A1:67:D3:48:8B:56:8D:92:37:3E:E2:05:DF:84:AF:EF:2D:01:AA
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          CC
Signing time:             Sun 27 Apr 2025 04:36:21 +0000
Manifest this update:     Sun 27 Apr 2025 04:36:20 +0000
Manifest next update:     Sun 04 May 2025 04:36:20 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: nH0+Ji/Zu0gLvKiQsLuwRFrfMfYcwcbFe3j+YVSVflA=)
                          2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: PfS7sj8JuzbZWvFSduxB9myZEDnDdag+xb2aWz/6R/s=)
                          3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: N79cTf02LFfn72p1E/Pdk3bdjiKVq2hrPT4kWU8lFBY=)
                          4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: pnsMEvt+kVRF1R9JPvM+r1kNzZ+Ues8Fgk9/ddl8t/c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Apr 27 04:36:20 2025 GMT
            Not After : May  4 04:36:20 2025 GMT
        Subject: CN=680db444-9896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:36:2a:5a:3d:c6:63:cd:4b:53:9f:69:7d:
                    df:75:1b:76:ae:79:f6:57:e9:6e:11:c0:c8:0f:e1:
                    22:b7:b8:8f:24:a6:b6:83:a1:65:0f:10:f4:23:3b:
                    a8:05:58:0e:81:47:c4:3f:de:33:5f:ff:75:71:05:
                    2e:06:61:a6:f6:04:48:50:9a:aa:55:de:10:44:ef:
                    78:fd:b2:53:9f:42:bd:78:67:d5:ce:15:6e:39:60:
                    9d:b0:91:1e:98:99:c7:bd:48:cd:31:f2:9f:69:3b:
                    e5:36:f0:33:02:c1:f1:a2:06:70:fb:8a:9f:77:73:
                    f6:e2:ba:e8:39:4e:9d:96:06:2d:9f:4b:5a:f8:94:
                    11:9e:82:17:2f:ba:24:e1:8d:6c:f2:d3:9d:fc:a2:
                    4e:27:4b:7a:3a:dd:30:ee:ab:b9:a6:4a:c8:b1:e3:
                    98:92:37:ec:16:b1:3b:39:6d:ca:d6:83:92:0e:f5:
                    85:15:93:0c:50:7e:dd:98:58:99:a5:a0:69:ab:86:
                    7b:02:9c:0d:5c:20:94:ed:69:05:84:9c:a1:b7:f4:
                    3e:ee:95:3f:de:18:d3:21:03:db:22:7b:15:40:3e:
                    c3:63:29:be:39:0c:b1:3a:dc:a9:ff:01:7f:09:ad:
                    b3:fc:ca:c6:88:cc:b6:1c:32:28:5f:cc:06:cb:ca:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A1:67:D3:48:8B:56:8D:92:37:3E:E2:05:DF:84:AF:EF:2D:01:AA
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:3f:b6:4a:bb:1d:96:c9:72:fb:e3:bc:8f:d5:a2:29:56:
         92:09:5f:51:bc:5d:8e:80:ab:36:a7:98:62:14:64:11:dd:71:
         1f:c2:5b:56:bd:85:0e:4d:ac:6f:d9:62:76:33:86:5f:96:a4:
         03:0f:2c:92:c4:5c:c1:4d:8b:26:db:88:3b:9d:82:e3:1e:5f:
         ba:d4:37:91:1a:61:82:f1:60:f4:c1:6e:3b:8c:a2:4a:87:f9:
         8c:81:9b:52:f0:7b:91:82:49:97:33:46:59:c7:a1:f2:32:fd:
         cd:b7:fe:ca:c8:ed:77:07:83:bc:9b:37:77:53:ef:e9:55:38:
         61:1d:0f:1b:92:25:c8:cf:3c:3f:2c:93:b1:e4:e2:10:c2:34:
         aa:70:7c:31:50:6e:b6:14:94:f1:a2:a9:e5:b3:5c:8f:5d:89:
         4f:1d:9f:f6:64:0a:e4:46:bf:df:13:7f:cb:61:e9:09:42:d6:
         eb:1e:c5:7d:74:67:49:27:e0:67:30:0a:1a:14:7a:23:a6:25:
         65:e0:87:8c:8c:04:f7:58:e4:d5:fb:ab:da:05:e2:a4:29:84:
         1c:27:49:44:74:da:fd:ab:ee:34:e4:ed:3d:23:8e:95:bc:cc:
         7a:59:63:73:80:78:7c:8a:64:f6:73:ea:b1:f2:96:bf:fe:6d:
         4c:93:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net