Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
File:                     9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json)
Hash identifier:          tgV70f4OKeT8V8yiHeEiq4nh3cVTmhGDmhUQNokBXQY=
Subject key identifier:   6B:4D:01:14:E3:D0:C3:00:72:2E:F9:42:FC:25:83:CB:C7:D9:19:3B
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Certificate issuer:       /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial:       062B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
Manifest number:          0622
Signing time:             Sat 26 Apr 2025 22:26:23 +0000
Manifest this update:     Sat 26 Apr 2025 22:26:23 +0000
Manifest next update:     Sat 03 May 2025 22:26:23 +0000
Files and hashes:         1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: bfxVfojVuBMEZuP40Ek2lv2lnpf3iJU6cTUdGT5UNI0=)
                          2: 613CF60638D211EF88A7B370C4F9AE02.roa (hash: y+RhkfZMGTxRVubK4QV96TYGnjkmbmFAXQyjgVFX8go=)
                          3: 948A2714980211EB82357D6CC4F9AE02.roa (hash: nUrfHwU2ledrvSpXzdKHdIfP/lVdp7uA8FU8ZIbWtPQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
                          rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Validity
            Not Before: Apr 26 22:26:23 2025 GMT
            Not After : May  3 22:26:23 2025 GMT
        Subject: CN=680d5d8f-8f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:f3:aa:e1:42:b2:c4:91:bd:de:88:09:79:
                    95:b6:f3:24:10:19:41:86:cf:04:ca:c5:42:e9:c9:
                    08:a5:21:15:a6:8c:b4:57:73:f3:7a:2b:2d:20:26:
                    30:61:c8:e5:70:83:c7:9d:5c:e0:95:04:4d:56:31:
                    b1:63:9e:d7:f2:4e:4d:fa:2f:29:54:7a:44:ff:2f:
                    e7:e4:72:16:62:11:b4:09:d8:ec:aa:66:b8:fc:bb:
                    6f:a1:7b:c2:58:51:ad:f9:54:e4:38:93:9c:6e:f1:
                    0b:2a:4b:47:b1:ea:68:db:33:58:d3:f0:5a:76:5e:
                    09:10:cc:d6:cc:d8:8a:4a:87:bd:1a:17:73:d0:32:
                    fc:3c:35:88:bc:9e:71:6c:f1:7d:a1:88:96:55:29:
                    e0:ac:e8:63:49:31:9c:50:03:5b:14:f1:26:72:c2:
                    21:05:b6:93:2c:a5:28:02:df:c1:ec:ad:90:d0:b4:
                    67:83:ef:c0:39:59:7b:3f:10:15:43:93:09:7d:f3:
                    98:d3:7e:5c:b8:cd:21:82:90:cf:9e:25:33:cf:10:
                    a5:f3:7a:ec:b2:85:ab:f0:82:eb:86:0a:e0:69:fb:
                    31:20:aa:d3:30:ec:28:7f:5b:4e:26:1f:28:a5:ff:
                    a9:99:41:e1:3a:81:46:84:25:c1:56:71:30:41:4c:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:01:14:E3:D0:C3:00:72:2E:F9:42:FC:25:83:CB:C7:D9:19:3B
            X509v3 Authority Key Identifier:
                keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:72:b9:c2:47:38:9c:64:97:d4:6a:82:42:67:e1:8d:02:
         94:31:b3:46:0f:dd:c1:cb:ea:33:fc:5b:6a:86:0a:f9:26:59:
         02:75:90:51:b5:84:39:85:0b:19:f7:b4:8d:5a:1d:94:15:17:
         a1:16:2e:aa:31:62:2a:ab:97:2d:8b:f6:3c:63:71:3b:82:50:
         fa:b5:7c:b6:aa:06:0d:c4:2f:55:da:81:6d:11:c2:7a:a6:2d:
         da:4e:b9:d8:c1:79:99:60:1f:48:d9:b7:98:b3:8b:6d:62:6c:
         9f:77:bf:33:c1:5e:b9:63:5d:a9:6c:a6:5c:ce:e4:89:23:0a:
         fb:eb:b5:f1:27:65:03:e4:f2:ab:d6:bf:e8:e6:8a:2e:c9:e6:
         22:a1:62:c4:bf:21:86:72:83:57:67:17:2d:bc:c4:27:a1:c5:
         d6:1d:68:79:c9:72:9f:04:27:c3:de:ce:af:66:08:74:34:39:
         ea:24:69:1a:b4:b8:ae:06:cc:2d:a2:99:9d:2b:41:89:f4:86:
         62:e0:3f:ad:02:9a:0d:98:de:51:48:b9:14:cb:46:33:df:8d:
         e7:4f:9f:ac:b0:08:92:93:f6:c4:6f:54:e8:91:de:20:b6:e4:
         70:7e:a5:7f:80:27:fa:b7:3b:50:59:49:96:db:e9:ac:0a:ab:
         92:c4:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:41 2025 by rpki-client on console.sobornost.net