Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          6V5ZzcSnWgv6+ACuKZ6QqcnV/GxL52gwHvApcZ74iHo=
Subject key identifier:   90:08:34:DD:CE:0C:9B:C1:D1:B1:5D:A9:9D:ED:E5:7B:E0:61:EF:25
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       0791
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          0789
Signing time:             Sat 26 Apr 2025 21:04:40 +0000
Manifest this update:     Sat 26 Apr 2025 21:04:40 +0000
Manifest next update:     Sat 03 May 2025 21:04:40 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: 5XfUOMYr7MRlitKE4wnlAMDBIkiwerDG9XlUc4XvuGc=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: Apr 26 21:04:40 2025 GMT
            Not After : May  3 21:04:40 2025 GMT
        Subject: CN=680d4a68-c690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:db:7c:df:1c:1d:0f:f4:63:85:61:30:3f:
                    d5:5f:87:ec:b7:0d:fd:03:6b:e6:73:9c:53:52:0b:
                    81:a4:ca:7f:45:91:0f:02:bf:a2:17:81:0b:1c:7f:
                    88:12:df:cf:2f:33:8e:15:ba:ba:07:5b:8f:db:6c:
                    52:2f:e9:96:d1:da:23:69:65:38:dd:a7:dd:b0:7b:
                    06:71:35:44:23:11:eb:23:37:e3:77:8a:0a:37:84:
                    a6:e7:c4:12:cd:ac:35:93:48:24:94:7d:fc:85:ce:
                    54:cd:05:19:20:45:69:c2:32:a6:57:a8:09:be:d9:
                    12:4a:e6:31:3e:06:8e:a3:b4:31:64:b0:17:6b:0f:
                    a7:a9:47:89:33:8d:d7:c7:8a:23:88:04:19:ad:90:
                    19:c7:0c:ec:86:fb:75:55:fc:4a:21:da:90:6d:69:
                    77:47:28:37:ed:09:dc:52:8a:01:d0:4b:66:c9:fc:
                    30:df:85:60:ed:23:ac:1f:39:a3:5a:2a:18:23:8b:
                    53:52:e1:71:59:09:71:a0:15:90:23:6a:97:8e:dc:
                    b8:d9:3c:f2:be:80:26:59:de:0a:96:69:4d:96:b3:
                    70:5e:18:be:0b:0a:f3:9e:e8:af:70:f0:3b:db:84:
                    86:2c:58:2b:70:dc:99:e9:7b:54:40:d5:ce:f3:f7:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:08:34:DD:CE:0C:9B:C1:D1:B1:5D:A9:9D:ED:E5:7B:E0:61:EF:25
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:87:e9:9e:42:74:4e:12:b4:5c:da:95:22:5e:c6:c4:d0:
         17:ae:0f:8b:aa:b7:06:e2:ff:ad:34:e2:e3:d9:20:71:40:fe:
         59:ff:c5:e5:ae:68:50:53:65:44:8f:86:46:86:d5:a2:b9:84:
         90:5b:f5:e1:5f:f9:74:80:fd:e5:0a:d6:1d:10:c2:68:cd:6d:
         d0:aa:0e:e5:4b:74:16:2f:88:ea:c9:7f:dc:05:6e:75:89:51:
         15:cc:83:06:f8:d7:d0:75:82:5c:84:6e:ec:72:9f:8d:f3:ba:
         43:34:a4:22:62:99:f2:6f:e8:0a:3f:04:54:77:bc:4f:93:27:
         88:7e:fe:51:87:13:5c:7d:41:53:60:0f:cb:06:63:63:fa:9f:
         10:3a:6d:aa:ed:22:dd:14:b1:30:a3:a3:c0:4f:3a:a6:cc:da:
         d9:96:4f:8b:98:fc:0f:d3:6e:7e:ae:dd:ce:00:19:29:b6:c6:
         00:65:82:b0:7c:68:38:02:aa:de:be:0d:99:a9:a9:d0:d6:4f:
         ab:3c:9e:56:61:e7:cc:bd:19:6f:9d:8c:66:49:b3:14:94:85:
         0b:18:e2:c3:fc:1f:72:c3:ce:5a:69:f2:24:c0:bc:dc:f5:50:
         ff:bd:a5:97:8f:e4:64:9e:5c:b2:52:43:fd:d5:3e:32:45:28:
         49:c1:c1:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5RUQxMTAvBgNVBAUTKDY4OEJCMDU5NUY1OTVCNzExRTAyNDUwQUNFRTNCMjZD
MTEzQjc5MkYwHhcNMjUwNDI2MjEwNDQwWhcNMjUwNTAzMjEwNDQwWjAYMRYwFAYD
VQQDEw02ODBkNGE2OC1jNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hTbfN8cHQ/0Y4VhMD/VX4fstw39A2vmc5xTUguBpMp/RZEPAr+iF4ELHH+I
Et/PLzOOFbq6B1uP22xSL+mW0dojaWU43afdsHsGcTVEIxHrIzfjd4oKN4Sm58QS
zaw1k0gklH38hc5UzQUZIEVpwjKmV6gJvtkSSuYxPgaOo7QxZLAXaw+nqUeJM43X
x4ojiAQZrZAZxwzshvt1VfxKIdqQbWl3Ryg37QncUooB0Etmyfww34Vg7SOsHzmj
WioYI4tTUuFxWQlxoBWQI2qXjty42TzyvoAmWd4KlmlNlrNwXhi+CwrznuivcPA7
24SGLFgrcNyZ6XtUQNXO8/daWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAINN3O
DJvB0bFdqZ3t5XvgYe8lMB8GA1UdIwQYMBaAFGiLsFlfWVtxHgJFCs7jsmwRO3kv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFRC9CNzcxNEI5NjA5
MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5WlczRWVBa1VLenVPeWJCRTdl
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJdXdXVjlaVzNFZUFrVUt6dU95YkJFN2VTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDlFRC9CNzcxNEI5NjA5MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5Wlcz
RWVBa1VLenVPeWJCRTdlUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCE6IfpnkJ0ThK0XNqVIl7GxNAXrg+LqrcG4v+tNOLj2SBxQP5Z/8Xl
rmhQU2VEj4ZGhtWiuYSQW/XhX/l0gP3lCtYdEMJozW3Qqg7lS3QWL4jqyX/cBW51
iVEVzIMG+NfQdYJchG7scp+N87pDNKQiYpnyb+gKPwRUd7xPkyeIfv5RhxNcfUFT
YA/LBmNj+p8QOm2q7SLdFLEwo6PATzqmzNrZlk+LmPwP025+rt3OABkptsYAZYKw
fGg4Aqrevg2ZqanQ1k+rPJ5WYefMvRlvnYxmSbMUlIULGOLD/B9yw85aafIkwLzc
9VD/vaWXj+RknlyyUkP91T4yRShJwcHw
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:58 2025 by rpki-client on console.sobornost.net