Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File:                     2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier:          JbonixB957AXiGSo/YHMjjxok4p+52b3PWtT2a79dMw=
Subject key identifier:   72:E8:A3:3F:1D:89:14:16:0C:3A:5B:0F:58:4C:74:8B:18:E0:90:90
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer:       /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number:          18
Signing time:             Sun 27 Apr 2025 06:48:21 +0000
Manifest this update:     Sun 27 Apr 2025 06:48:20 +0000
Manifest next update:     Sun 04 May 2025 06:48:20 +0000
Files and hashes:         1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: nYVYGOjivLL6SXcN+qhYwxshkYywSNAroPcLD9EHQtw=)
                          2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: nN3j+w7rACDpnsAZEw+b0JxCXf8pA/ucgK4YVC62zqE=)
                          3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: Dlt7c62t0hDVUYoo7gZi00Rxaa3RUeJ2v+Dxv4EEGtE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
                          rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
        Validity
            Not Before: Apr 27 06:48:20 2025 GMT
            Not After : May  4 06:48:20 2025 GMT
        Subject: CN=680dd334-a48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:7f:87:3b:7c:42:21:17:4d:0d:87:45:f9:
                    99:be:10:c4:5c:62:dc:d7:88:8f:61:fa:6d:dd:26:
                    33:8d:26:0b:c1:41:2f:c2:62:e0:99:46:94:ea:17:
                    36:e6:a4:3a:04:65:0b:b2:da:fd:57:01:75:0f:e5:
                    61:75:f7:19:ee:ff:81:c0:55:60:69:b3:2d:ad:4e:
                    82:5d:83:bc:2c:58:90:21:35:95:ea:8b:2c:95:b0:
                    43:10:7e:74:17:0d:06:f6:76:74:3e:46:55:66:4e:
                    9a:05:90:4b:02:7e:a5:d3:05:e9:7a:28:21:a0:5d:
                    dc:9e:e3:38:7b:68:3c:ad:d2:0d:11:b1:4c:15:3d:
                    b8:89:10:11:16:71:35:17:bf:33:85:df:65:fa:b2:
                    71:f5:09:cb:76:f2:ab:fb:f8:22:03:78:cb:f0:01:
                    2c:89:86:a0:10:02:2d:41:bb:10:78:a8:f4:c3:32:
                    4c:e0:fc:cb:bf:ab:4b:4f:be:2b:b3:f0:51:bb:a5:
                    eb:33:05:84:7c:d8:b3:c1:73:52:dc:d7:d8:67:a8:
                    a4:ca:3f:61:a3:bb:79:4b:cb:5f:3a:d2:86:e4:77:
                    a3:55:fc:3e:ef:2c:0d:0e:71:d8:e3:da:d7:5e:91:
                    32:fa:99:3a:2f:3d:4f:00:10:a3:de:22:e6:74:0e:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E8:A3:3F:1D:89:14:16:0C:3A:5B:0F:58:4C:74:8B:18:E0:90:90
            X509v3 Authority Key Identifier:
                keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f8:c3:40:d6:36:68:ae:b9:a3:2f:27:f2:63:3b:58:c0:93:
         87:f7:c2:2d:5d:36:dd:bd:ee:ae:c7:e7:fd:44:8c:96:52:7c:
         5e:a8:2e:11:10:1b:48:33:70:77:36:7d:1a:4b:d2:1e:38:a1:
         53:ab:71:71:05:bc:d3:73:25:df:d5:11:f2:93:2d:66:82:30:
         c4:f9:72:e7:7e:f3:c6:13:d2:9b:a9:f6:92:ed:6c:04:68:21:
         fe:bb:09:11:5c:9d:5c:3b:8e:96:3b:d3:3f:18:15:15:93:02:
         b9:1b:dd:84:9c:77:39:75:eb:e2:4d:bc:71:78:a5:e3:1d:0c:
         3b:5c:01:80:80:43:3b:c3:77:f1:83:29:bf:9d:81:29:ed:26:
         ff:1a:9a:01:6f:65:8b:1e:2a:8e:d1:2b:10:e8:84:1d:74:8b:
         79:14:2f:65:ca:21:9c:61:d4:8e:34:de:a7:76:68:98:41:f3:
         65:9f:df:40:1f:a7:57:69:74:10:c7:bd:a0:73:d4:d7:34:0c:
         1b:ff:06:42:27:eb:f1:38:36:e9:76:f7:6c:96:8b:fa:93:81:
         0f:51:4a:1c:16:ef:11:81:c0:89:fd:bb:89:d8:34:0f:c5:fb:
         62:f7:7a:8c:26:8e:0b:10:1b:4a:34:e9:ab:8b:61:e2:1d:95:
         39:98:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net