Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File:                     KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier:          lmV+VAxBHdwH5x40wfUTXQjJ8I9k4oA+xAg6Y1hkc4A=
Subject key identifier:   C4:E6:0D:5C:E5:C5:AD:35:1C:68:5A:16:B4:E9:9D:0E:EB:D3:0D:00
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer:       /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number:          02BF
Signing time:             Sun 27 Apr 2025 01:03:34 +0000
Manifest this update:     Sun 27 Apr 2025 01:03:33 +0000
Manifest next update:     Sun 04 May 2025 01:03:33 +0000
Files and hashes:         1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: ffesTo2pIb3tUVSmTxL2e9oW17UVjnytFqUN5j/rbyI=)
                          2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI=)
                          3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: HZusuoH1up8FDoOQyhT/1qoC+ff/aBBAonRcZ28YjMI=)
                          4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Eku/YHWxKxpsRX6ogTNh3LDNRp5rXVLPBXYqCNfR56g=)
                          5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 3ncZT46pze+jMf4M4LYzFO82k2evN1uShAP1OkhdIKI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
                          rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
        Validity
            Not Before: Apr 27 01:03:33 2025 GMT
            Not After : May  4 01:03:33 2025 GMT
        Subject: CN=680d8265-fd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:22:1b:f1:c8:b5:12:21:e1:b5:ee:10:7e:
                    e8:b4:27:6d:31:d5:cc:4b:eb:c7:8c:a7:9f:e2:02:
                    c9:30:75:78:a4:46:4e:4b:b1:a0:b1:7e:6b:e5:6b:
                    c4:fa:a0:26:d5:d1:25:3c:2c:e1:ee:76:a1:38:11:
                    b0:ee:6b:43:6a:51:d9:13:f3:9d:74:3e:8a:e1:cf:
                    48:53:7a:a1:47:78:54:ee:fb:4b:7b:6f:1b:f4:d7:
                    b5:53:db:56:12:04:3d:45:82:36:21:6d:45:83:25:
                    22:2c:c5:e0:b3:47:98:cc:73:ac:1b:42:1b:53:4d:
                    a6:55:e1:59:ac:3f:e1:ac:68:91:3d:3d:c1:50:7d:
                    3f:26:f6:6d:47:18:20:96:99:40:6b:cf:df:13:1b:
                    a9:bd:f9:7b:d6:f9:a2:5b:69:1d:21:23:a5:a1:fb:
                    06:27:ec:80:b9:b0:83:b3:62:82:ad:1f:bc:9f:88:
                    5c:14:5b:c4:45:b9:0f:eb:79:a1:c0:f4:93:6a:3b:
                    de:d5:a3:d1:b6:b4:27:4b:a0:a1:47:ab:92:88:a9:
                    b3:0a:e7:c9:28:6d:55:90:d8:85:c9:9f:1a:71:6e:
                    76:b5:99:bc:ca:36:46:97:4b:c0:ac:82:22:6b:b3:
                    bf:99:2a:78:a5:ec:2d:10:c3:c9:19:71:b6:67:7e:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E6:0D:5C:E5:C5:AD:35:1C:68:5A:16:B4:E9:9D:0E:EB:D3:0D:00
            X509v3 Authority Key Identifier:
                keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:ef:ab:9b:42:a2:af:4f:cc:36:d6:32:a0:80:ec:1b:65:
         ef:c0:64:c3:8e:86:e5:13:4c:81:0b:ac:d7:bf:97:da:be:73:
         25:c5:aa:a9:21:92:2b:fe:c0:7b:e6:f3:d0:f4:b1:86:32:16:
         a5:9d:66:bb:41:5b:da:9f:63:23:27:e3:56:0b:c1:e1:76:64:
         e1:eb:e2:2d:c8:da:36:93:8c:d4:8e:b0:2c:47:2b:71:da:0a:
         1c:a3:55:65:70:13:ff:13:9f:bd:78:b4:db:29:8b:03:c9:ef:
         4a:6f:32:93:4a:d8:a9:79:b1:dd:1d:a9:fd:a4:62:2a:e6:82:
         97:a2:0c:03:2b:2b:da:97:d2:aa:b5:64:c1:21:5f:ff:11:22:
         39:ac:63:a9:6f:f7:35:c2:bd:45:07:75:93:64:23:34:84:ab:
         aa:04:e8:22:dc:a4:74:d9:a8:09:72:a1:a5:34:20:23:e6:76:
         a6:6b:17:0e:08:ec:95:51:73:62:54:2e:95:6d:3a:c6:b3:44:
         2a:7d:e7:13:72:fe:ab:cc:be:8e:1c:1d:63:fd:da:64:f3:0d:
         ca:c9:5c:29:39:63:f7:fa:b7:bf:8d:a9:ba:87:dd:00:4a:48:
         af:bc:75:21:76:3a:31:73:27:f1:b6:a9:66:b0:ba:b8:a8:37:
         8f:bf:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:39 2025 by rpki-client on console.sobornost.net