Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
File:                     GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json)
Hash identifier:          ftaa/HAy7FmWwsWYbyVXTBM5zLjRVQ7QnTT2pRMXxlM=
Subject key identifier:   3B:72:9F:77:EA:F8:82:5F:7E:0F:E1:A2:22:1C:07:E6:81:69:B0:C8
Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Certificate issuer:       /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
Manifest number:          45
Signing time:             Sun 27 Apr 2025 06:17:43 +0000
Manifest this update:     Sun 27 Apr 2025 06:17:42 +0000
Manifest next update:     Sun 04 May 2025 06:17:42 +0000
Files and hashes:         1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: RRZOfR9lGZrq+Wj89Igqxm0bybV1ccwYx1jj3zLiU6w=)
                          2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: S0OXmYbNImJgx4uOC0U7mhQnmuYrYNwVWM5SzyT3w3g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
        Validity
            Not Before: Apr 27 06:17:42 2025 GMT
            Not After : May  4 06:17:42 2025 GMT
        Subject: CN=680dcc07-e3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:67:82:4e:87:66:ff:38:34:f9:48:27:d1:
                    31:31:80:aa:f1:c2:a9:60:ae:b6:0b:1d:09:a6:9a:
                    ca:d9:6a:0c:b5:c3:a8:f5:b9:10:e0:3a:a9:c7:0b:
                    02:64:ea:2e:77:5a:a9:16:24:9f:23:92:d1:52:a1:
                    14:40:b3:6b:b9:71:91:dd:43:c0:ce:de:b0:d2:4e:
                    5f:b5:23:20:91:ba:ae:00:e7:ce:7d:25:a6:17:b7:
                    ba:07:ca:07:0f:36:dc:5d:27:92:96:41:f3:2a:a8:
                    f1:44:dd:58:af:97:63:b4:a0:d1:80:7f:84:71:8d:
                    1e:67:0f:52:33:2b:71:f5:e5:39:55:9f:03:c2:7a:
                    b0:08:2d:7f:ef:ce:b5:a1:b4:35:bb:dd:7f:d8:13:
                    b4:82:f2:4f:fb:31:63:65:f2:17:e3:47:52:2a:16:
                    f4:ef:86:6c:ec:aa:f6:2d:2e:83:24:76:eb:70:cd:
                    e6:59:45:1f:dd:71:7b:99:17:fe:50:61:9a:80:a8:
                    69:09:ca:e2:35:f1:ce:d9:fd:3a:b1:4c:a3:11:83:
                    ed:e4:66:89:de:ad:bc:08:dd:4e:cf:9b:60:d3:e6:
                    d9:70:c4:83:87:89:f7:02:f9:73:29:4a:4f:4e:11:
                    fc:a8:7e:32:50:1c:b3:96:1d:9c:91:6f:bb:b2:22:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:72:9F:77:EA:F8:82:5F:7E:0F:E1:A2:22:1C:07:E6:81:69:B0:C8
            X509v3 Authority Key Identifier:
                keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:80:4a:73:9d:25:98:cb:89:d3:d5:42:8b:cf:b7:ad:ea:c8:
         79:b0:2b:db:49:7a:23:db:39:f5:57:49:22:6e:0d:8e:e7:0e:
         18:19:17:9e:00:04:af:07:ca:03:6c:04:eb:8a:01:4e:35:ae:
         bb:53:52:5f:6f:75:7c:79:18:fb:34:02:a1:d6:fa:04:d8:20:
         89:39:86:c2:cb:1e:40:71:ce:b0:a5:22:af:c6:94:3b:2b:e2:
         48:c6:3c:51:3e:2c:c8:4c:70:3d:b7:96:cc:25:7e:fc:ed:19:
         16:78:1a:23:e4:b5:86:06:53:14:6a:d5:05:f9:6f:6f:95:9e:
         df:4b:5a:69:b2:4a:1a:8d:f3:3e:7c:80:15:1a:22:3f:39:3b:
         6a:79:29:7b:f8:f9:21:71:c8:00:a4:65:2b:21:0f:69:af:8b:
         09:8d:9b:60:17:44:86:f4:ed:90:94:11:ed:1d:ce:b5:a6:cf:
         c5:ff:ea:14:b4:40:b6:fa:ec:34:45:58:54:e0:c3:b9:0f:57:
         a8:fa:df:75:9d:a6:69:dd:31:a9:a1:73:40:fd:28:dc:67:a7:
         e5:71:c2:b8:e1:8c:ef:fd:08:9b:e4:0f:0c:7e:40:5c:bc:ff:
         d3:ad:c0:74:81:05:da:03:4b:f7:b8:73:8d:f7:f5:82:62:e9:
         73:2d:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net