Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File:                     PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier:          kbF63/evr5Y66tkOHf2IYvhXdBJsmZN7Cv9IcM2dIUs=
Subject key identifier:   AF:8E:5C:E5:98:D9:04:60:1A:B2:18:55:F6:39:1A:6F:A5:F5:C1:45
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number:          0294
Signing time:             Sun 27 Apr 2025 01:16:52 +0000
Manifest this update:     Sun 27 Apr 2025 01:16:52 +0000
Manifest next update:     Sun 04 May 2025 01:16:52 +0000
Files and hashes:         1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: NPq1hVsiNT8Fy18WtJF5bawGY6Fyvtb333fgqQaOW34=)
                          2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=)
                          3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=)
                          4: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=)
                          5: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
                          rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Apr 27 01:16:52 2025 GMT
            Not After : May  4 01:16:52 2025 GMT
        Subject: CN=680d8584-6348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:f6:b6:59:9c:fd:5a:4f:5c:c4:40:43:2a:
                    1f:5f:e4:df:6d:94:bf:3f:c2:68:5d:78:d6:31:b0:
                    c8:50:04:2b:2c:9f:b5:e7:d9:88:da:cc:b9:16:6d:
                    a6:e4:c6:1c:6e:bb:b2:f2:af:fa:eb:8c:c4:62:e4:
                    f8:12:aa:2d:35:97:d7:7c:e9:b4:ae:47:ac:82:d7:
                    a0:67:75:b8:d9:0f:4c:a3:5e:18:de:91:2c:21:a1:
                    50:88:f2:b1:fe:d5:c6:17:51:63:9a:0c:8c:04:22:
                    21:8c:8a:4c:4e:16:ab:6f:95:4d:f6:57:11:99:0e:
                    d5:de:12:31:4a:ba:7f:23:7c:7c:b1:ab:8d:b5:b1:
                    ec:bb:94:c7:92:db:f5:20:21:8b:9d:12:37:c0:01:
                    70:69:c0:64:e1:29:8e:31:95:33:7c:84:cc:e6:25:
                    2d:1d:7a:30:71:d1:f7:e6:42:a1:4e:a0:73:e0:30:
                    12:2b:19:cd:e2:9f:e7:01:a2:3c:aa:1a:fc:6c:b6:
                    db:49:d5:3f:f4:4d:dc:de:57:33:f4:be:2d:1f:9b:
                    6a:2e:13:81:32:91:d9:fd:be:27:c1:59:4b:94:09:
                    78:3c:e8:5f:47:ac:42:35:37:21:72:3e:39:e8:b4:
                    d1:80:bb:26:e8:05:0c:eb:a6:52:0d:65:dc:fd:e9:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8E:5C:E5:98:D9:04:60:1A:B2:18:55:F6:39:1A:6F:A5:F5:C1:45
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:c5:7a:6c:01:45:84:87:21:5e:a2:e1:38:68:e4:10:e4:
         07:9e:d5:82:0b:10:16:47:0f:e7:41:e4:5b:fa:fe:fc:62:ab:
         ea:05:13:00:5b:15:d0:0d:e4:b7:61:0b:00:37:5f:b1:8a:0e:
         1d:de:7b:a1:1b:1f:8e:31:a3:80:06:c9:86:40:54:42:62:5d:
         c0:49:35:2c:c5:86:b8:29:f0:ff:b4:9a:d1:22:39:f5:18:7c:
         e1:75:76:2b:7e:d2:0b:e7:e5:e6:56:4e:ce:04:66:86:07:b3:
         ed:39:ad:52:83:7a:14:6b:46:71:33:e7:ce:c1:ab:0a:76:6c:
         9b:a8:24:93:46:d5:27:5d:22:0a:a7:38:07:c4:ad:e7:41:bb:
         85:cf:4a:8e:09:23:4f:b2:e8:63:3f:0d:f5:5b:29:52:f3:39:
         e1:5c:9e:24:b6:2e:44:94:76:c9:16:19:a1:59:9c:de:e8:e0:
         33:30:5e:49:3e:9d:f1:0b:2a:ae:c7:73:ec:06:3f:fc:45:7b:
         a6:a1:95:31:25:1d:95:1f:1a:ba:ef:3c:55:79:fe:5c:f3:38:
         ed:1e:e3:0a:28:dd:59:7e:9d:bb:2c:0f:c3:2e:a2:45:19:b4:
         94:65:2e:12:08:ab:4d:fa:40:91:64:7f:e2:6f:c7:75:63:aa:
         7e:7b:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:47 2025 by rpki-client on console.sobornost.net