Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
File:                     bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json)
Hash identifier:          y/zQyxSfGhCwM8CX7xq5WfdQikYgBngKMR6Z1AHhRvM=
Subject key identifier:   E5:3A:FE:F2:D0:E1:31:D6:9F:79:9B:EF:93:63:55:CC:5F:30:C2:AB
Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A
Certificate issuer:       /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
Manifest number:          1C
Signing time:             Sun 27 Apr 2025 06:43:15 +0000
Manifest this update:     Sun 27 Apr 2025 06:43:14 +0000
Manifest next update:     Sun 04 May 2025 06:43:14 +0000
Files and hashes:         1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: +WE4DUSYHseJrrAQiQy0glJdIJbeybxVLoLHKv9roV4=)
                          2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: wX4c7151grTgYjOcABNVbqGv3q7jdM7FBjuR7z58nBM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl
                          rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
        Validity
            Not Before: Apr 27 06:43:14 2025 GMT
            Not After : May  4 06:43:14 2025 GMT
        Subject: CN=680dd202-f320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:10:a0:81:37:55:f4:c1:97:18:b6:be:83:
                    79:ae:d2:46:0c:a0:79:51:77:54:0a:8c:14:ab:4f:
                    dc:79:34:d3:90:62:41:0c:1a:38:e6:24:43:e9:1c:
                    83:83:cf:1c:16:c7:50:00:73:e7:75:67:8b:4e:1b:
                    62:7a:da:80:17:5c:0e:c4:3e:77:1a:8f:ff:aa:ff:
                    46:34:0b:84:76:e7:3b:40:31:8c:a1:a1:fe:ed:b3:
                    69:1d:de:f6:9d:1e:85:23:a9:93:1f:06:8a:1d:24:
                    d7:24:94:e8:56:a2:08:16:d4:e8:32:6b:5f:fd:a7:
                    80:4a:76:43:89:a8:04:6e:d2:46:65:c9:53:56:ba:
                    0a:69:19:9c:c4:0c:9c:61:f4:cc:13:53:f1:42:f3:
                    90:52:f6:62:13:0c:03:3a:f6:07:22:60:93:21:4b:
                    d0:87:93:71:87:06:7e:9c:90:21:d9:a0:85:99:eb:
                    2c:41:04:c4:61:8e:7f:04:31:8b:94:ed:36:db:87:
                    26:cc:e3:05:e8:c3:e7:17:79:84:fe:e3:83:a8:71:
                    05:31:1a:72:a7:73:de:20:4e:3a:bd:c5:4f:49:7c:
                    c5:89:47:7e:a9:02:47:61:27:65:9f:77:9e:89:4a:
                    02:31:b5:73:32:1a:53:13:71:ad:96:dc:26:2d:01:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:FE:F2:D0:E1:31:D6:9F:79:9B:EF:93:63:55:CC:5F:30:C2:AB
            X509v3 Authority Key Identifier:
                keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:7e:e3:04:9b:0d:1b:55:94:ca:8b:ff:3d:3b:9a:9a:c7:
         2f:f4:a8:be:f5:22:7a:eb:0f:6e:5c:cf:b0:6d:22:85:8a:81:
         2c:fd:71:fd:03:11:09:4b:3f:63:da:42:e3:5a:21:c7:a3:06:
         4b:06:9f:20:c1:bd:d7:09:c3:ff:d2:c5:9e:39:12:26:cc:38:
         48:bc:9b:42:1e:b3:7d:5a:97:e4:6e:ac:7e:dd:ee:8d:6a:06:
         29:93:a4:1b:04:56:60:34:14:5c:79:b7:9e:f0:59:7a:38:7c:
         54:e7:a2:43:4d:15:25:8b:3e:31:34:6f:14:37:ed:74:bc:9f:
         80:12:ed:77:ce:4b:d2:bd:05:e9:6a:89:de:f1:6b:b8:cb:e7:
         e9:f4:6c:27:8b:83:d0:ce:d8:75:4b:84:75:4d:20:55:d0:91:
         25:f0:d6:7e:41:67:3e:34:d2:9b:f4:4b:2f:ce:e9:4d:e3:9c:
         0f:74:68:e2:07:01:03:6c:98:1f:aa:c6:3f:60:38:7d:26:aa:
         81:b1:92:24:ba:6a:3f:c3:78:67:c0:0e:cc:49:41:9a:bb:bc:
         e8:93:bc:ce:ad:22:45:bd:b9:9d:cb:21:dc:10:82:ff:b1:b4:
         40:18:d9:22:39:c9:51:5b:ba:fe:36:a4:57:43:5a:23:68:0d:
         f7:1b:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net