Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          2gGfiUv5m0i9AR3FvtUGmwTXMG2ItL+Kx99roFaQpQ8=
Subject key identifier:   07:37:4F:6E:38:EE:89:7C:FC:81:A5:E7:A8:0E:E3:42:B4:FB:26:26
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0E73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0E50
Signing time:             Mon 28 Apr 2025 17:59:36 +0000
Manifest this update:     Mon 28 Apr 2025 17:59:36 +0000
Manifest next update:     Mon 05 May 2025 17:59:36 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: W6ssQFO5dFgad42h/9jS0bJftNUs/9MMjr3fGCr3F0c=)
                          2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
                          3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 60vuOkQynjGzHB5ZlHpi78kSHRwd9T4kwsOABZu9eBw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3699 (0xe73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Apr 28 17:59:36 2025 GMT
            Not After : May  5 17:59:36 2025 GMT
        Subject: CN=680fc208-0fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:c7:33:eb:a9:e1:c9:e2:8b:ca:2c:6b:56:
                    41:9f:ce:ad:c3:1f:d2:af:e9:0e:f8:dd:f9:ce:3d:
                    45:96:30:d0:e8:38:54:f2:e2:a1:ed:78:5d:7c:05:
                    6d:68:c6:97:33:72:c2:e3:b7:72:96:be:bf:03:d7:
                    8b:c3:bb:ff:71:1e:47:33:7b:c6:12:25:fb:47:0b:
                    f7:d9:80:52:92:98:99:5c:fa:e6:6c:fe:2b:99:e6:
                    fc:80:de:26:97:20:76:f6:aa:17:0d:de:5a:4f:5b:
                    83:67:34:ee:c6:a4:e2:ee:e8:66:b7:17:03:0a:26:
                    72:3f:01:1e:32:ae:6c:e5:d1:88:ce:62:08:51:d9:
                    dc:b8:aa:10:a7:74:54:2b:bc:17:fc:6c:88:a4:dc:
                    3e:31:a5:3e:10:48:11:a5:92:59:d1:10:13:f5:e8:
                    6f:08:80:22:ef:4b:75:38:25:ab:b4:48:ed:87:b4:
                    86:5c:16:40:34:d2:11:9b:d3:55:90:aa:79:85:4f:
                    8e:df:a0:cb:29:30:fd:9c:b1:90:8b:0a:6a:ac:59:
                    ff:e9:77:07:39:3e:f8:af:55:17:e0:0e:00:c7:7f:
                    bd:d6:00:cc:74:c5:b2:5f:ee:fb:b8:15:f8:8c:7e:
                    e8:88:d5:e4:4b:e5:1e:c6:0e:40:90:dc:6c:17:c5:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:4F:6E:38:EE:89:7C:FC:81:A5:E7:A8:0E:E3:42:B4:FB:26:26
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:46:d3:4d:7c:5b:80:10:38:64:a4:04:d6:dd:aa:b9:15:
         0d:7b:43:b6:e9:d9:3e:c4:34:a8:72:93:f9:aa:e6:15:de:e3:
         4e:f1:e1:ba:9f:ff:8f:fa:35:eb:c4:ac:f6:d8:07:71:e1:45:
         cf:89:60:49:c8:92:cb:84:3b:e2:a1:ae:4d:86:eb:7e:7d:34:
         d5:f9:d8:84:59:5b:68:7b:83:a6:b1:d6:10:9b:fe:7b:e9:68:
         55:53:4d:ca:e1:0c:ca:9f:6c:32:a0:96:1a:e2:bc:78:2e:12:
         fd:dd:30:7b:72:48:cc:ee:8b:c3:ef:de:b2:cc:14:a0:a6:2e:
         f7:d8:b1:32:99:5e:66:63:80:fa:81:25:92:02:e3:e5:0b:59:
         4c:ec:be:f7:09:eb:2f:92:76:04:b4:f0:57:53:23:b9:45:d4:
         1e:ee:b2:fa:d9:d1:60:ff:5d:5f:25:82:3e:ac:4b:90:b1:e9:
         ab:5a:15:83:31:26:57:a4:96:d8:ef:65:ce:a3:1c:2b:4e:93:
         b5:fd:24:80:20:7c:59:9d:b9:fe:e7:06:59:b8:35:e7:1f:f5:
         15:15:52:54:b6:d5:f5:ec:95:b2:d6:e7:e6:b9:fd:d5:7c:cd:
         38:68:3e:82:3d:c2:01:0d:a1:c4:61:5c:ba:21:5d:8e:08:09:
         5f:bd:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:35 2025 by rpki-client on console.sobornost.net