Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
File:                     _x_VyU8S81-tE63yeZqJj94Gysk.mft (raw, json)
Hash identifier:          vxLk08r7lq0j1iDh7lBL5Had0qZW2aXr2sQH+SxNUfE=
Subject key identifier:   7C:22:E6:F0:3B:49:A5:47:AF:1A:0A:0C:88:64:00:99:74:58:15:CF
Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Certificate issuer:       /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
Manifest number:          A3
Signing time:             Sun 27 Apr 2025 05:04:00 +0000
Manifest this update:     Sun 27 Apr 2025 05:03:59 +0000
Manifest next update:     Sun 04 May 2025 05:03:59 +0000
Files and hashes:         1: _x_VyU8S81-tE63yeZqJj94Gysk.crl (hash: f8jLzflP83WHiTCMkd6/82jh5AuFweIiqkgiRS1CE+s=)
                          2: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (hash: GayQFIjNRG0i4Xav60C+tvTYkjjCA22TmJl4oiKb6AY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
                          rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91504D6, serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
        Validity
            Not Before: Apr 27 05:03:59 2025 GMT
            Not After : May  4 05:03:59 2025 GMT
        Subject: CN=680dbac0-64b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:99:48:32:12:4e:79:9f:28:31:6a:73:a5:
                    5c:7e:e1:9e:5b:48:57:a4:1a:72:31:e8:99:b1:e2:
                    a7:92:94:79:3d:a2:d8:c6:b2:95:c9:92:f8:6a:d2:
                    24:01:4b:cf:ca:ae:45:03:40:b8:47:d2:a4:74:6e:
                    55:ad:c0:e5:96:6f:41:ca:44:21:83:1d:39:ca:df:
                    03:1e:8e:94:0f:59:4b:19:84:6b:c3:da:7a:c3:31:
                    b2:e6:fa:92:87:00:1e:0d:c3:bd:06:01:c5:1d:4a:
                    38:7c:ad:13:d8:69:d0:c4:57:57:29:c0:f9:80:1f:
                    69:a6:ba:11:af:f7:ea:2c:0e:7b:13:81:94:79:3c:
                    c1:94:ad:89:6b:ed:f4:a3:64:57:84:d2:06:c1:78:
                    84:8d:53:37:38:06:9a:f3:e1:c0:e2:7e:73:b4:c4:
                    c1:73:e6:31:3a:1c:1c:24:4a:90:7f:a2:59:bb:2f:
                    1d:c1:cd:0d:ac:56:98:c6:87:2f:40:12:b6:f8:fa:
                    64:2c:15:2f:fa:ac:da:c6:b2:a4:15:ea:e7:b1:92:
                    0a:63:96:a9:55:43:b6:30:9d:27:e7:a7:35:ab:fa:
                    b9:42:3b:29:24:9e:c3:fd:16:df:e0:f9:c8:61:35:
                    1e:b6:27:b5:3a:3b:c2:0c:ef:a4:06:9d:14:d5:9b:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:E6:F0:3B:49:A5:47:AF:1A:0A:0C:88:64:00:99:74:58:15:CF
            X509v3 Authority Key Identifier:
                keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:08:18:bd:01:8e:24:f7:78:fb:7d:0a:21:d5:45:41:ca:
         63:8f:e9:fa:04:e3:ef:39:97:d3:01:6b:2c:77:52:c2:01:a0:
         a0:f8:7e:31:d6:b2:76:c0:24:49:4f:a0:e2:99:9e:39:45:5e:
         63:49:63:fd:1f:29:8d:7c:2c:7d:85:76:dc:69:b2:49:de:79:
         6e:5d:61:15:7d:ae:a3:ce:11:91:fd:d4:c7:96:14:2c:e8:c6:
         ea:55:be:a4:7d:4e:a4:10:6f:39:a6:24:00:bf:07:19:dd:e3:
         67:a7:ba:48:71:89:eb:89:c7:34:de:8d:11:1f:22:e3:0c:47:
         3a:ec:bd:0d:e9:95:e4:b1:0c:38:70:bc:3a:30:d7:be:37:48:
         72:58:81:57:8e:85:96:94:6d:92:b1:05:31:dd:04:42:c4:17:
         7f:fd:37:af:3f:d2:1f:a7:d7:f9:4b:f6:f1:95:13:36:d5:cc:
         25:5b:57:4f:8c:ee:b2:bc:60:9b:c4:6e:ad:2d:57:92:17:16:
         18:39:87:08:25:f9:d1:7f:37:88:af:ce:cc:fe:07:52:f1:e9:
         f2:2d:3c:4a:ba:71:61:ac:bd:c4:b1:98:b9:31:2d:b3:83:03:
         d9:be:21:7e:6e:5c:2a:cc:56:d4:8e:66:ff:ae:7c:a0:bb:65:
         10:ff:1b:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA0RDYxMTAvBgNVBAUTKEZGMUZENUM5NEYxMkYzNUZBRDEzQURGMjc5OUE4OThG
REUwNkNBQzkwHhcNMjUwNDI3MDUwMzU5WhcNMjUwNTA0MDUwMzU5WjAYMRYwFAYD
VQQDEw02ODBkYmFjMC02NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkeZSDISTnmfKDFqc6VcfuGeW0hXpBpyMeiZseKnkpR5PaLYxrKVyZL4atIk
AUvPyq5FA0C4R9KkdG5VrcDllm9BykQhgx05yt8DHo6UD1lLGYRrw9p6wzGy5vqS
hwAeDcO9BgHFHUo4fK0T2GnQxFdXKcD5gB9pproRr/fqLA57E4GUeTzBlK2Ja+30
o2RXhNIGwXiEjVM3OAaa8+HA4n5ztMTBc+YxOhwcJEqQf6JZuy8dwc0NrFaYxocv
QBK2+PpkLBUv+qzaxrKkFernsZIKY5apVUO2MJ0n56c1q/q5QjspJJ7D/Rbf4PnI
YTUetie1OjvCDO+kBp0U1ZvlEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwi5vA7
SaVHrxoKDIhkAJl0WBXPMB8GA1UdIwQYMBaAFP8f1clPEvNfrROt8nmaiY/eBsrJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9CNkMwOTM0QzMx
QTkxMUVGQjZGQjFENjBDNEY5QUUwMi9feF9WeVU4UzgxLXRFNjN5ZVpxSmo5NEd5
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL194X1Z5VThTODEtdEU2M3llWnFKajk0R3lzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDRENi9CNkMwOTM0QzMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi9feF9WeVU4Uzgx
LXRFNjN5ZVpxSmo5NEd5c2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsJwgYvQGOJPd4+30KIdVFQcpjj+n6BOPvOZfTAWssd1LCAaCg+H4x
1rJ2wCRJT6DimZ45RV5jSWP9HymNfCx9hXbcabJJ3nluXWEVfa6jzhGR/dTHlhQs
6MbqVb6kfU6kEG85piQAvwcZ3eNnp7pIcYnricc03o0RHyLjDEc67L0N6ZXksQw4
cLw6MNe+N0hyWIFXjoWWlG2SsQUx3QRCxBd//TevP9Ifp9f5S/bxlRM21cwlW1dP
jO6yvGCbxG6tLVeSFxYYOYcIJfnRfzeIr87M/gdS8enyLTxKunFhrL3EsZi5MS2z
gwPZviF+blwqzFbUjmb/rnygu2UQ/xue
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:46 2025 by rpki-client on console.sobornost.net