Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
File:                     w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json)
Hash identifier:          iDbbo2z4AdKO7cNOegd3Udev7OuJakso94oINZlSXMg=
Subject key identifier:   B8:72:FC:DA:9F:72:5D:8B:B7:91:54:13:4A:DA:8E:BE:EE:C7:A1:D4
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
Manifest number:          ED
Signing time:             Sun 27 Apr 2025 04:15:26 +0000
Manifest this update:     Sun 27 Apr 2025 04:15:25 +0000
Manifest next update:     Sun 04 May 2025 04:15:25 +0000
Files and hashes:         1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: 2TwPamVoJFWC0LSjjWBrQf2M+z5hf+mSp4Z9032llJ0=)
                          2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: ut259rkGij2B93AJ9ZMpQpFJu2cjgHFJdqE5QCl8kGg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Apr 27 04:15:25 2025 GMT
            Not After : May  4 04:15:25 2025 GMT
        Subject: CN=680daf5e-3309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:52:93:2f:c3:0a:7a:77:fd:57:25:0c:f5:
                    f9:d2:2e:29:33:ee:d5:f7:d0:d0:3c:a2:fa:01:11:
                    02:b6:6b:32:06:db:03:d1:50:22:de:ca:95:2c:8e:
                    7a:a1:9c:fc:7f:72:4b:16:8b:37:22:fc:59:68:2b:
                    11:fc:48:f5:41:59:45:06:6c:b6:bc:4f:de:87:84:
                    c0:59:8d:54:7d:b4:e4:69:57:0d:01:af:c9:c5:ea:
                    2b:81:01:4a:a8:1b:ad:67:3c:4f:15:3c:22:1a:81:
                    33:c7:18:f1:59:34:8d:51:0b:70:eb:9f:a4:25:36:
                    c6:ae:22:ef:c2:f5:62:06:d6:75:b5:57:b9:bb:69:
                    de:63:c3:20:51:46:2b:16:5b:42:2e:31:9d:4a:09:
                    c8:37:72:41:ca:57:48:cd:0e:4f:ce:f5:ac:53:1c:
                    30:ca:5e:0d:db:1f:fb:14:77:e4:a4:be:18:8f:4b:
                    e3:ab:57:bb:90:ad:87:21:9b:6c:00:f3:f4:f7:56:
                    17:dd:ed:69:c9:79:bf:8b:6c:d3:1d:ab:51:2c:d1:
                    17:d2:77:d3:ca:61:cd:22:17:0a:33:98:65:9b:83:
                    bc:cf:a6:70:7f:8d:09:45:c3:91:96:cd:d0:46:2a:
                    88:c2:76:1a:31:66:90:f3:a1:60:93:e5:4f:fc:5b:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:72:FC:DA:9F:72:5D:8B:B7:91:54:13:4A:DA:8E:BE:EE:C7:A1:D4
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:f1:b8:b5:18:23:38:b8:b4:5c:0c:d3:21:b9:7f:50:92:
         a5:a1:5e:d8:8d:94:5f:43:43:44:73:b3:52:76:d7:7d:fa:e0:
         74:47:30:21:01:98:04:3a:17:9f:14:ac:67:c7:1a:c1:de:bb:
         4d:ca:ff:df:1f:2a:dc:1e:74:0c:e9:75:13:35:70:82:b4:7b:
         c6:79:86:ce:8d:c2:fc:a2:68:89:4b:2c:87:52:f6:a0:42:d1:
         cf:83:c2:23:60:a5:92:62:4d:65:90:21:75:b0:81:ae:87:90:
         34:fe:74:85:34:e6:b5:8b:e8:d8:b0:a0:a7:09:ae:41:e3:6f:
         bb:ce:73:7c:19:5b:a4:7f:d2:59:03:ee:c2:0f:fd:68:4e:13:
         7c:42:c0:87:f0:12:73:20:e2:a5:d7:ad:66:55:fb:d3:7e:d3:
         4a:25:2e:2a:e8:09:a4:22:0c:ab:0c:36:e3:f0:80:ef:a7:5b:
         68:ed:21:d2:f9:da:31:52:89:f7:1a:d2:9c:42:fe:eb:04:da:
         c0:ec:fa:ec:72:a0:09:d3:95:26:46:34:93:7c:02:a0:1f:1c:
         d9:e0:55:8b:ce:3b:cc:77:18:52:90:ba:1a:95:00:df:da:8f:
         b0:55:5f:06:f5:83:a6:07:ba:ce:67:66:fa:40:4f:c7:a4:5e:
         4b:7d:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net