Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File:                     EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier:          COQVdU6gahidbL8FslpImiI7TrIO64xFo7pAH27RJrA=
Subject key identifier:   B9:46:6E:3A:1A:BD:47:3D:9B:D1:BE:5B:4E:D9:E9:36:CC:4F:80:91
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer:       /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number:          01A5
Signing time:             Sun 27 Apr 2025 02:20:30 +0000
Manifest this update:     Sun 27 Apr 2025 02:20:30 +0000
Manifest next update:     Sun 04 May 2025 02:20:29 +0000
Files and hashes:         1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: qBHMkL/rvRbI6E6CW0ukpd+A0/cdLa2j+lE1pGUbXSI=)
                          2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: nm2zg9mKvyo9+lsb6e1TLrNeopFW/UoV47vdvbrHk8c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
                          rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
        Validity
            Not Before: Apr 27 02:20:30 2025 GMT
            Not After : May  4 02:20:29 2025 GMT
        Subject: CN=680d946e-3907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:55:f6:ea:b6:c9:b6:1a:f0:ef:5f:db:fa:
                    18:15:31:0a:9d:4a:f1:d4:db:6e:bb:8f:9c:b2:ad:
                    35:55:d1:32:7c:71:5d:eb:b6:b4:8d:51:8e:65:46:
                    b6:3d:ce:a2:50:f7:f5:3c:9d:b9:ae:af:d8:65:98:
                    3d:50:4f:5d:11:86:16:24:79:64:72:07:9d:51:fc:
                    4b:c0:b6:9c:08:d3:3b:4e:61:4a:56:92:35:ac:89:
                    c4:51:aa:11:7a:2d:51:b1:1b:49:44:78:0d:20:7a:
                    60:2c:98:4a:b5:bc:d1:71:6f:cd:ef:03:f5:c4:7b:
                    1c:7a:68:7a:93:61:f9:7d:8a:11:80:60:27:9f:52:
                    a7:82:7b:37:ba:46:d0:f0:41:c2:18:2e:f7:dd:99:
                    b9:ff:a3:ab:4d:ea:57:12:8f:6e:03:0b:9f:0d:47:
                    3e:af:56:29:9d:a8:e8:ae:97:41:3e:ce:c0:2d:1f:
                    3f:60:aa:81:8b:16:96:22:70:c4:7a:1b:2e:7f:0e:
                    68:00:b9:2a:cd:f4:47:bd:30:00:17:f4:c1:1c:97:
                    0f:c4:4a:20:cb:21:88:bb:de:21:cc:eb:16:aa:0a:
                    c3:81:cf:05:ce:80:ed:db:c4:e5:86:12:2a:f9:e1:
                    e9:3b:79:d5:0e:2e:c7:4b:02:98:8a:c0:2a:d3:87:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:6E:3A:1A:BD:47:3D:9B:D1:BE:5B:4E:D9:E9:36:CC:4F:80:91
            X509v3 Authority Key Identifier:
                keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:ae:ef:85:9a:f3:0d:f2:a5:19:4a:73:7f:71:f3:63:10:
         4a:f6:dc:2f:c2:c1:bb:d8:86:d1:3c:c9:f7:b0:a1:0c:69:e5:
         4b:e7:82:ef:cd:0c:da:ad:ad:06:6b:91:f2:30:57:0e:80:b6:
         b1:dc:8b:c4:82:05:7a:da:61:aa:29:74:4b:9a:a5:c2:36:15:
         13:03:be:41:12:21:54:22:50:9c:61:5c:9c:29:13:66:07:98:
         6c:e5:10:7b:5b:94:79:74:50:ce:6d:ab:aa:ee:6e:db:fc:a2:
         40:b0:f5:45:63:d0:7f:0c:22:06:01:e8:89:4b:a8:07:8b:2d:
         6e:70:72:ae:27:22:3f:52:6e:ea:45:f8:d2:fe:e9:1a:53:82:
         64:f9:84:b9:f3:93:3e:9d:b6:b0:f3:44:8e:dc:0b:d7:ad:0e:
         09:e4:ba:00:26:66:c5:d1:1f:a5:b6:a7:5f:f8:f4:a0:31:85:
         78:fc:01:39:63:52:e2:38:35:2d:2b:f6:17:aa:a1:2d:dc:86:
         9e:b6:64:d4:31:b7:2f:b9:7f:81:4f:37:ee:43:ee:a8:24:09:
         1c:8f:39:d2:07:9c:28:70:45:e7:cd:ed:03:9e:70:15:b6:c6:
         15:ef:41:1b:dc:48:89:ba:24:2e:9a:1d:fa:be:7d:13:ca:9e:
         d7:db:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:43 2025 by rpki-client on console.sobornost.net