Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
File:                     Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json)
Hash identifier:          +RRpKMuNKVryRGfUnewcDNZYszH/B/ldV3sVXltRpHE=
Subject key identifier:   5D:0D:28:94:06:AD:82:26:A7:FD:ED:AA:52:DF:60:D4:A6:C3:3B:65
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
Manifest number:          0215
Signing time:             Wed 23 Apr 2025 01:52:22 +0000
Manifest this update:     Wed 23 Apr 2025 01:52:21 +0000
Manifest next update:     Wed 30 Apr 2025 01:52:21 +0000
Files and hashes:         1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: SS7Klm2D+wHXSYGsZboF1RPLiDG8AY1OkGnrU5mjklQ=)
                          2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: SdihL210gPCDV8+I91wffCGT616SJGuUi8ixJc1Exmw=)
                          3: 3EAA12E2396811ED8AF52966C4F9AE02.roa (hash: A4Vjdj02sAdMTWXmHWvjF6Tlm0O4U6o+nFtk8u+txVM=)
                          4: 2EDB67C460C911EEB34E5064C4F9AE02.roa (hash: 3MY+LBjMkWn0JVtEZnXJmpiFK4xoYWEhCoPkhLW/buM=)
                          5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: 0X4T0YrSiOWFmPbWRm4BMiWwIJYzgP1cN8sgOgLAcS4=)
                          6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 01:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Apr 23 01:52:21 2025 GMT
            Not After : Apr 30 01:52:21 2025 GMT
        Subject: CN=680847d6-40c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:1e:a3:59:42:89:67:59:05:ca:1a:f3:13:
                    ce:0b:36:e4:1c:b4:40:f5:af:1e:d9:f6:cc:cd:dd:
                    50:20:3b:bd:32:cf:49:54:e6:3f:41:e6:b3:2a:1c:
                    54:ac:3e:7b:cf:64:72:63:29:0c:8f:63:36:f5:a5:
                    dd:88:53:cc:10:dc:17:16:a8:85:ee:9b:69:ac:74:
                    27:ec:dd:f1:41:6f:15:b3:c3:22:61:75:f2:57:17:
                    ee:e8:ad:4b:c1:25:a5:cf:64:ed:91:3f:3a:84:51:
                    ca:86:43:21:4e:54:9a:f1:57:b7:17:2d:d9:18:d2:
                    2d:f2:1a:fd:e9:57:f6:ac:14:61:41:be:bf:e1:f7:
                    43:8d:e8:20:96:c1:61:3f:80:a9:eb:13:75:4b:25:
                    88:10:c1:bb:f5:98:d9:6e:d4:8b:e7:70:1b:79:24:
                    6c:da:54:c9:59:01:e3:4b:1a:5d:f9:ca:be:ec:d8:
                    05:7a:e7:a1:91:24:21:45:53:b7:73:f3:84:86:2c:
                    d2:c8:07:80:f4:d4:49:62:b6:e6:1d:90:54:c7:9f:
                    2b:bb:11:a3:2b:18:36:26:ef:ee:ef:d8:a5:bd:98:
                    34:b6:6f:c2:8f:e7:00:1b:78:35:01:e8:0e:87:5e:
                    9a:bb:a9:62:17:57:fb:3b:3e:bb:cd:55:d1:1c:b1:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:28:94:06:AD:82:26:A7:FD:ED:AA:52:DF:60:D4:A6:C3:3B:65
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:20:57:4a:f6:9e:6c:72:a8:29:ef:ca:26:c3:f7:ec:dd:97:
         bd:10:2b:9e:ee:ab:9d:b9:55:ca:ee:ad:ab:a1:fa:22:9c:56:
         bf:52:80:5e:43:52:07:fc:18:ce:ff:7c:27:63:05:a1:63:e2:
         5a:43:30:6e:87:fe:42:ba:8f:f2:e6:8d:99:a4:7d:4d:cd:8f:
         70:95:13:db:c6:d0:5d:e6:49:ae:60:d9:ea:f5:3a:94:b6:71:
         98:67:a7:d8:9c:c6:b1:e5:6e:b3:d8:ff:7b:d9:70:0c:e4:b7:
         ed:05:14:85:7c:81:73:7a:f3:ad:e3:3c:62:08:94:c3:e3:a9:
         36:ce:a5:d6:36:49:a8:27:3e:3f:e4:91:88:f8:98:9c:97:9e:
         91:5a:f9:a5:93:b0:b8:ac:57:f8:c8:99:fb:1f:3a:5d:b9:fe:
         f7:bb:df:1a:a9:71:58:80:66:04:51:6d:13:f0:12:27:a5:2a:
         62:1e:af:ff:5a:ca:bc:95:ea:2b:38:95:d8:54:d9:78:0c:dd:
         d1:6c:2e:15:be:56:2a:de:8d:6a:58:7f:cf:d2:83:b4:da:6b:
         e2:33:5d:bd:f4:14:e1:33:73:f9:2e:2c:16:c8:fa:81:7e:ae:
         4c:32:18:4c:25:c1:bf:17:af:59:6a:78:e7:e7:2d:7d:00:7d:
         67:24:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:33 2025 by rpki-client on console.sobornost.net