Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          ymAGV8zShIa7O8BQNWSHO2Ow3Q2MNlyMKom1WB8x2T0=
Subject key identifier:   09:B8:B6:34:B5:D7:B0:5D:BA:07:13:3B:A5:85:D2:25:B1:C2:DF:BC
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          0252
Signing time:             Sun 27 Apr 2025 01:27:34 +0000
Manifest this update:     Sun 27 Apr 2025 01:27:33 +0000
Manifest next update:     Sun 04 May 2025 01:27:33 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: 3t43Objamb+BFEQozRDDwDKuK2HY5Y9t5s/bJQPFiPo=)
                          2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=)
                          3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=)
                          4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Apr 27 01:27:33 2025 GMT
            Not After : May  4 01:27:33 2025 GMT
        Subject: CN=680d8806-d57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:45:b5:67:4a:cc:69:86:1f:7c:1b:ad:c9:
                    58:84:7e:45:ac:f5:81:97:ba:a5:0c:f2:30:c6:55:
                    1b:b1:63:40:df:bd:54:69:09:99:26:14:0c:f0:ce:
                    13:7c:e9:a3:44:dd:58:4e:73:f8:e0:a3:61:40:5c:
                    42:b4:87:2e:67:e8:c1:58:8e:83:95:86:1d:c7:57:
                    da:f6:0d:4a:10:41:21:95:50:de:a7:bc:df:dc:ab:
                    43:9c:87:ae:e4:49:9e:c3:d3:10:06:c1:8f:f0:dc:
                    49:01:8e:62:fa:e7:95:6a:2e:a8:e6:b4:95:76:8f:
                    8c:6f:c0:59:82:09:b2:00:1d:2c:a5:5d:75:63:5c:
                    78:02:f8:b8:6b:72:49:71:05:6d:4e:87:c4:49:bc:
                    ab:0e:27:af:21:fb:bf:c2:47:06:92:51:4c:c3:60:
                    63:9f:30:28:5b:00:40:a8:3d:33:f3:f9:9f:7c:16:
                    89:90:ee:af:e8:fe:82:cc:c5:56:8e:46:1e:a0:f3:
                    fd:b4:01:ac:ec:b8:9f:35:83:82:2a:09:7c:34:54:
                    b5:4a:95:6a:51:46:52:a6:bd:1c:43:23:23:c6:c5:
                    fd:c4:0b:2f:e2:5b:6f:83:ab:c3:49:e4:05:fe:c2:
                    b0:3a:63:9e:b5:78:36:70:40:f6:52:bb:b6:14:02:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B8:B6:34:B5:D7:B0:5D:BA:07:13:3B:A5:85:D2:25:B1:C2:DF:BC
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b0:3f:eb:4d:ba:69:3d:c4:ef:1f:7c:70:4c:2c:87:68:69:
         59:5f:3d:41:d7:8e:cd:e9:7d:38:bb:6a:1d:c9:ca:e9:bf:b4:
         5e:89:4d:53:c0:83:5d:9a:fd:8a:4d:b7:5b:c7:58:6c:82:b9:
         30:61:61:23:ed:a8:ca:34:c2:a8:87:82:bc:dd:7f:72:b5:0e:
         59:e1:63:e4:de:7f:01:d1:18:3f:6f:e2:1f:2e:90:4f:e5:ec:
         71:c4:3b:21:ba:a1:56:cc:b3:5e:2a:05:14:ce:bf:6e:37:e6:
         99:70:c5:6f:40:b1:b2:50:25:fd:76:0b:b4:5d:61:3c:82:6a:
         d9:aa:d6:7c:9d:8e:20:41:c8:0e:f1:9c:58:29:5a:c6:83:27:
         2c:b1:81:53:c0:81:be:87:b5:89:31:81:67:c3:64:6a:4c:87:
         d7:9d:83:91:c8:29:ed:b2:1a:38:2a:1e:dc:ae:48:64:74:e2:
         55:d2:48:40:12:c3:08:bb:eb:d7:c3:4d:2f:39:ef:af:47:94:
         e0:74:af:50:0a:fd:e1:0d:ca:8c:c7:a3:17:26:75:57:37:d3:
         2c:13:87:2f:0f:c8:a9:9d:3d:10:94:0b:69:1b:ae:83:7e:7d:
         32:fb:a5:e0:97:35:cd:c0:fd:65:07:52:d6:ce:5a:6f:b2:04:
         1e:63:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:47 2025 by rpki-client on console.sobornost.net