Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File:                     1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier:          ORWnRMk6KZMyiei+3Dky/a4IGiZI6T+WB0oHfGpU2ik=
Subject key identifier:   41:14:8E:8C:18:17:59:0E:B2:5B:32:7A:3A:91:DD:C0:A0:55:B4:09
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer:       /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number:          81
Signing time:             Sun 27 Apr 2025 05:29:12 +0000
Manifest this update:     Sun 27 Apr 2025 05:29:11 +0000
Manifest next update:     Sun 04 May 2025 05:29:11 +0000
Files and hashes:         1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: aXxS5UTmdYI9sg2Xin4nBn4OxBl2HrK5NYRwIKbeHFo=)
                          2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: zTIt7VVx9LOh+fElZbmBDVws/qIJ7/N6iFJRXVOkuO4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
                          rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
        Validity
            Not Before: Apr 27 05:29:11 2025 GMT
            Not After : May  4 05:29:11 2025 GMT
        Subject: CN=680dc0a7-8f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:6d:1e:b9:c9:63:4e:91:a1:79:dc:f6:93:
                    48:0a:89:6b:fc:43:9a:41:8e:c9:e7:b6:8c:6b:2d:
                    9a:f2:f1:41:16:0a:de:52:ac:57:f4:e7:9d:28:5a:
                    fd:1c:b4:a9:8a:36:42:28:e5:25:20:b6:ed:c1:8f:
                    80:7d:e4:6f:75:7e:df:14:fd:12:8e:63:ca:bd:62:
                    29:00:0c:0e:d9:fe:7c:8d:7c:8a:72:14:03:6b:98:
                    48:f4:90:ab:73:4c:25:92:ca:8e:3e:c0:29:3a:26:
                    10:b9:9b:ad:f5:c8:08:b0:fd:71:09:2a:8e:b9:f5:
                    3e:8e:d2:df:18:83:1e:71:56:c9:7e:70:3d:13:ca:
                    c8:21:15:f0:b8:f6:7d:f5:74:eb:3b:01:f0:6a:1c:
                    97:ed:f2:17:d7:37:6a:28:70:fd:f8:f8:83:7c:00:
                    53:bf:1a:a8:15:ee:02:33:5f:02:37:fd:04:3a:f0:
                    5d:c3:50:5f:29:b4:07:54:3a:9b:aa:24:34:46:20:
                    f2:67:b1:81:ac:5f:d0:3f:26:19:f5:7b:f9:1c:3d:
                    23:94:26:a1:4f:8f:84:21:c2:9c:12:9a:1c:ec:40:
                    e4:99:08:3c:19:4a:28:c2:dc:1a:d3:77:1a:59:4f:
                    15:9a:8e:82:aa:67:9c:76:2b:53:2f:08:d6:76:e6:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:14:8E:8C:18:17:59:0E:B2:5B:32:7A:3A:91:DD:C0:A0:55:B4:09
            X509v3 Authority Key Identifier:
                keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:31:e5:5b:52:53:05:46:3d:96:f4:da:63:da:84:ee:49:
         7f:b7:b9:83:e7:70:dc:30:1f:77:29:38:06:c1:3c:e3:25:a9:
         42:64:b8:08:66:20:a8:7f:38:a7:17:ef:b6:d6:46:3d:cc:ab:
         75:90:38:a8:f6:ce:be:f1:e9:03:63:bb:0e:43:73:23:2c:50:
         6f:aa:d2:73:86:83:b3:f4:f3:24:6f:2a:81:8a:45:a2:00:e6:
         53:d3:4c:fe:53:c7:d4:af:ab:e0:ea:d5:1e:64:ba:1d:c1:2b:
         60:5a:05:89:3a:bb:01:d9:24:fc:9f:ee:c0:b0:23:64:17:6c:
         d0:aa:20:fd:79:fb:48:e2:35:eb:76:15:29:84:e7:ac:a7:dd:
         2a:48:cb:3f:a3:24:9b:2e:56:16:63:6c:5c:2d:a6:ba:cf:f2:
         41:5b:86:a1:96:80:3e:ba:5f:12:f9:cb:81:e7:91:a3:cc:09:
         e4:34:c6:f8:19:52:ad:98:3c:6f:4f:df:a6:5f:88:f7:77:cf:
         7c:19:ad:16:6d:52:66:82:7b:93:79:82:ef:89:a3:c1:f8:af:
         0f:8a:4e:34:8a:0c:df:b6:c8:c5:6d:83:bc:25:38:bf:05:6e:
         86:57:6e:26:e8:38:cd:d8:7a:06:fd:be:e5:a2:7e:f7:71:37:
         1f:72:4f:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy
OTE2Q0JBRDEwHhcNMjUwNDI3MDUyOTExWhcNMjUwNTA0MDUyOTExWjAYMRYwFAYD
VQQDEw02ODBkYzBhNy04ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwNtHrnJY06RoXnc9pNIColr/EOaQY7J57aMay2a8vFBFgreUqxX9OedKFr9
HLSpijZCKOUlILbtwY+AfeRvdX7fFP0SjmPKvWIpAAwO2f58jXyKchQDa5hI9JCr
c0wlksqOPsApOiYQuZut9cgIsP1xCSqOufU+jtLfGIMecVbJfnA9E8rIIRXwuPZ9
9XTrOwHwahyX7fIX1zdqKHD9+PiDfABTvxqoFe4CM18CN/0EOvBdw1BfKbQHVDqb
qiQ0RiDyZ7GBrF/QPyYZ9Xv5HD0jlCahT4+EIcKcEpoc7EDkmQg8GUoowtwa03ca
WU8Vmo6CqmecditTLwjWduazHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEUjowY
F1kOslsyejqR3cCgVbQJMB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw
NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr
dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMETHlW1JTBUY9lvTaY9qE7kl/t7mD53DcMB93KTgGwTzjJalCZLgI
ZiCofzinF++21kY9zKt1kDio9s6+8ekDY7sOQ3MjLFBvqtJzhoOz9PMkbyqBikWi
AOZT00z+U8fUr6vg6tUeZLodwStgWgWJOrsB2ST8n+7AsCNkF2zQqiD9eftI4jXr
dhUphOesp90qSMs/oySbLlYWY2xcLaa6z/JBW4ahloA+ul8S+cuB55GjzAnkNMb4
GVKtmDxvT9+mX4j3d898Ga0WbVJmgnuTeYLviaPB+K8Pik40igzftsjFbYO8JTi/
BW6GV24m6DjN2HoG/b7lon73cTcfck+V
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net