Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File:                     NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier:          DFDwi+zQp8aej+50koNYNQjnutJBYC5j5EyxGlQ2EgU=
Subject key identifier:   06:C7:89:39:74:34:17:54:BB:23:F7:A0:74:61:75:A7:6C:E2:FB:64
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer:       /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number:          56
Signing time:             Sun 27 Apr 2025 06:01:45 +0000
Manifest this update:     Sun 27 Apr 2025 06:01:44 +0000
Manifest next update:     Sun 04 May 2025 06:01:44 +0000
Files and hashes:         1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: cM56hHoys7VRo4HlBLZB1z8ZC0DbCSbvpPyLnjefKHE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
                          rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
        Validity
            Not Before: Apr 27 06:01:44 2025 GMT
            Not After : May  4 06:01:44 2025 GMT
        Subject: CN=680dc849-6e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:30:8c:07:6e:16:5c:5d:aa:2d:51:38:37:
                    d4:ec:3c:8e:f7:45:9a:ea:fc:38:e8:16:9e:cb:ee:
                    5d:b1:ee:85:65:72:5d:fd:90:72:05:41:99:64:1a:
                    a2:22:3d:85:31:95:73:ba:97:6f:1c:9e:72:4a:a4:
                    be:bb:9e:92:22:e3:d5:ba:0b:f2:ff:2d:17:c5:6c:
                    6a:a7:73:da:e0:49:11:52:51:6d:18:b9:cd:75:ca:
                    aa:ac:40:6d:56:78:1c:4e:ce:fe:f8:3f:e3:90:b5:
                    60:d0:a1:56:cf:01:d0:0e:91:e5:67:60:43:86:a4:
                    d3:fa:0a:a2:19:cd:a0:04:1a:bc:91:1e:11:ea:2f:
                    10:e3:bf:f6:4b:37:f3:31:27:ca:cb:be:c7:f4:3f:
                    89:3e:64:e8:55:38:08:31:c8:30:4f:52:2c:a6:4c:
                    47:b9:06:55:f3:46:d8:6e:76:01:8a:80:c6:cb:91:
                    d6:09:69:24:2f:b1:71:db:12:02:6d:92:12:fc:bb:
                    85:e4:6a:85:4a:7b:72:ad:f0:8e:07:f0:76:f3:1f:
                    8a:7d:44:ce:8f:e3:91:23:c6:59:68:69:9d:2e:d2:
                    f3:29:e0:14:18:06:55:86:5d:5a:ac:15:35:bd:7a:
                    32:cc:94:8a:f9:37:7e:b6:34:8e:99:44:98:03:69:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:89:39:74:34:17:54:BB:23:F7:A0:74:61:75:A7:6C:E2:FB:64
            X509v3 Authority Key Identifier:
                keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2d:75:10:08:0a:41:41:70:66:e5:e4:11:e2:ae:09:75:51:
         fb:b8:2e:bc:21:a5:51:8e:b4:9a:87:fc:d1:ae:fb:04:df:f5:
         9d:fd:97:88:4a:1d:2b:82:f4:d4:c7:a9:92:65:f2:d5:c5:32:
         eb:3a:d5:cd:e8:be:ac:00:60:72:73:3d:6c:d7:d2:ce:85:a6:
         a6:7d:eb:7c:c7:33:99:af:f6:12:f8:24:bf:00:88:3c:70:30:
         8f:e9:de:2e:c0:1b:90:b2:58:f1:6c:a0:77:86:62:89:45:1d:
         44:f1:59:b3:53:35:95:47:b9:e4:bb:78:43:eb:a2:33:6d:62:
         28:4d:d8:3e:25:61:90:dc:ca:af:fb:6e:5a:7e:4b:56:11:50:
         a2:7e:97:1e:77:18:a3:35:09:5f:92:31:56:c8:90:86:97:9f:
         c1:aa:ad:d6:35:a1:7f:ad:c2:1a:25:a2:15:cf:ad:38:b9:c5:
         95:9f:ff:04:7a:6a:d3:30:11:23:1f:4d:e5:9f:87:dc:2b:67:
         58:a2:fd:62:88:39:c0:92:94:5a:f3:c4:69:e2:74:1b:c1:cc:
         1f:2a:2a:1b:6d:bf:92:73:e0:c1:36:74:f1:98:96:50:9f:6c:
         07:d3:05:c6:a0:04:a3:dd:b0:90:80:42:9b:da:fc:62:d7:ce:
         c6:d3:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net