Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File:                     2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier:          QqP7i1TvubsKeUvaK52VymDH/odCTCnz8nkP1OOekzA=
Subject key identifier:   72:F6:14:3C:BD:E0:8D:27:D1:AF:A7:C9:18:E2:04:9F:4C:F7:81:A0
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer:       /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number:          0279
Signing time:             Sun 27 Apr 2025 01:19:14 +0000
Manifest this update:     Sun 27 Apr 2025 01:19:14 +0000
Manifest next update:     Sun 04 May 2025 01:19:14 +0000
Files and hashes:         1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: JP3GeSdehaNF6hT1+CQGoAFUZXsTtT1oo5Vwzt9axyo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
        Validity
            Not Before: Apr 27 01:19:14 2025 GMT
            Not After : May  4 01:19:14 2025 GMT
        Subject: CN=680d8612-2314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:57:20:08:21:91:ff:59:ac:c6:d7:03:a6:
                    c8:57:51:09:69:4d:88:e1:de:8b:c3:71:cf:1f:28:
                    7a:70:30:54:94:95:5c:8c:30:3f:97:a3:37:93:51:
                    88:fc:f5:a7:3b:dc:b5:b6:9f:e5:36:6f:81:f0:71:
                    ac:ee:77:19:55:c2:e3:05:b6:aa:a2:ed:d9:7b:ed:
                    de:b0:5a:93:27:0f:0b:69:a5:7a:da:76:9a:c4:04:
                    7a:04:4c:ae:bc:05:db:cd:f5:57:fb:7c:88:df:5a:
                    a0:5b:e1:e8:eb:03:58:5b:83:18:6a:fa:7c:2f:76:
                    eb:5d:78:27:45:dd:fd:ff:0c:7a:a2:c6:47:44:75:
                    e6:3c:3a:4a:88:7c:50:45:bd:c5:ad:88:c7:c2:6e:
                    88:b0:a3:bf:93:cc:a3:ac:33:0c:98:b5:5d:2f:fa:
                    6d:98:48:15:dc:b2:51:67:90:a2:f6:5d:7f:fa:01:
                    0a:4d:13:7d:ce:50:a4:15:9d:0a:ab:6f:6a:3f:67:
                    b8:56:71:04:8e:ec:d6:24:d0:22:97:cb:44:2f:bf:
                    ef:dd:37:12:3c:99:5d:f5:99:93:0b:11:bb:e4:08:
                    5e:0b:8a:31:69:31:f5:8c:7f:f1:85:aa:ad:a1:a9:
                    48:5b:2f:71:37:a0:ae:60:2a:52:55:b9:36:43:2d:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:14:3C:BD:E0:8D:27:D1:AF:A7:C9:18:E2:04:9F:4C:F7:81:A0
            X509v3 Authority Key Identifier:
                keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6b:83:38:d6:47:7c:d5:f9:dc:6f:8a:9f:f7:10:14:2d:6a:
         2c:32:83:27:bd:db:64:9e:48:e5:8a:f9:da:9c:bd:5f:f1:e8:
         a3:96:cc:ba:34:31:a0:d3:6b:42:cd:66:b0:21:31:41:85:95:
         c2:c2:de:53:67:43:8b:97:41:eb:81:09:15:00:7c:3e:92:a6:
         fe:ed:f7:28:37:2c:4e:45:c5:c8:f5:54:f4:fd:08:96:8c:95:
         60:fc:4e:81:b1:c8:7a:8f:a5:79:2e:8d:33:b9:cc:1d:9c:1e:
         83:3a:c3:a5:1d:68:6c:18:56:73:bc:ee:a8:09:ec:6d:07:6d:
         08:fa:79:1d:a8:4c:0d:24:ca:72:c5:53:fb:2f:92:2e:b8:88:
         d3:a7:58:37:b2:7b:c7:a3:ca:4a:46:e2:d4:85:a0:54:dd:95:
         08:99:02:92:74:a4:75:36:54:55:56:5f:05:5b:a6:4d:47:21:
         a0:62:16:c9:07:94:30:b5:e5:90:9c:24:2b:e2:b2:35:55:b7:
         75:ec:88:ae:c4:01:16:e9:b5:77:28:a5:d4:6c:29:9a:db:c5:
         42:ef:c2:77:ff:b2:0f:cc:b1:fe:12:82:21:84:59:68:a8:6f:
         0c:b6:54:51:04:53:4d:ce:f3:fe:72:8c:25:02:6a:6f:f1:58:
         04:70:b3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:46 2025 by rpki-client on console.sobornost.net