Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
File:                     lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json)
Hash identifier:          FuXwxHDEbOvjZhfUu7kIVf+N2XlzhwRgBXB+gq2FwIM=
Subject key identifier:   E7:D7:E0:C1:8A:D9:5F:B9:12:C9:19:CE:DE:12:3F:03:3A:EE:98:B0
Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
Certificate issuer:       /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Certificate serial:       1782
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
Manifest number:          1F6D
Signing time:             Mon 28 Apr 2025 16:47:05 +0000
Manifest this update:     Mon 28 Apr 2025 16:47:04 +0000
Manifest next update:     Mon 05 May 2025 16:47:04 +0000
Files and hashes:         1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: zpTtN42deeGQTYxvit80XdXvgzM6dXJbZZtB3SjF4v8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 16:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6018 (0x1782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
        Validity
            Not Before: Apr 28 16:47:04 2025 GMT
            Not After : May  5 16:47:04 2025 GMT
        Subject: CN=680fb108-faac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:50:f2:ec:5c:3b:22:65:4b:f7:ed:07:24:
                    b8:4c:a2:1e:5e:84:7b:c1:cd:58:b6:03:fd:7e:43:
                    38:d2:92:40:14:07:0b:ff:8f:76:09:4f:54:c6:d1:
                    ca:b6:17:b1:6b:27:1a:6f:0b:c4:28:be:6a:d7:db:
                    da:fd:c3:fa:c3:0b:5c:c0:8f:15:dd:ad:0b:d4:12:
                    94:c1:ae:6c:34:d7:e8:de:ec:2b:83:e9:14:c4:e3:
                    b0:dc:49:10:20:6a:a7:3a:9b:5a:86:82:eb:03:f8:
                    ff:c3:f6:dd:2b:7f:f2:d6:e7:42:54:85:d4:d9:50:
                    16:6c:4c:31:0a:a9:ad:0f:c1:ff:21:ad:bf:82:ed:
                    71:5b:4a:1a:9c:8b:e4:2c:9b:f5:e8:6e:83:37:e7:
                    ff:da:bb:5d:95:db:fc:5f:83:0e:e7:ea:31:75:33:
                    c9:ce:2f:a9:2f:2f:f6:2e:ff:ab:b1:97:9e:60:ed:
                    fc:85:72:b4:ff:d9:92:cf:81:0b:fe:4c:70:9a:83:
                    6e:f1:54:c2:af:c5:4e:fa:da:0f:77:12:36:54:ea:
                    fd:22:b0:26:25:d6:3e:a1:3f:ec:4d:03:47:4f:10:
                    0d:81:94:60:6f:57:de:aa:a9:78:0f:b8:d7:e2:21:
                    c2:ea:e8:49:40:3b:15:75:3a:0a:86:e1:81:9d:c8:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D7:E0:C1:8A:D9:5F:B9:12:C9:19:CE:DE:12:3F:03:3A:EE:98:B0
            X509v3 Authority Key Identifier:
                keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:17:63:0e:0a:40:5c:f6:f6:03:c8:13:5e:63:56:6d:ea:57:
         0d:f3:f2:3c:8e:cd:8b:d7:5a:53:44:91:7d:6a:76:56:4a:56:
         7d:ae:3c:d3:2b:e6:da:31:f5:aa:09:4c:eb:9e:16:4c:44:05:
         4f:90:97:8a:07:da:77:4f:f3:b4:e6:80:38:50:5b:1d:4d:25:
         67:5c:cc:b2:85:3e:ef:de:29:59:bf:d2:ae:9d:1b:a3:6a:01:
         11:a5:9b:85:04:c2:66:0f:d6:4e:53:72:7a:fb:35:ee:0c:59:
         27:14:ae:d3:f4:71:e1:f0:0e:a3:ea:17:9e:ab:63:a3:27:b6:
         ba:1c:95:78:bd:ad:77:41:8e:49:d6:51:84:78:45:34:7a:ab:
         53:5c:04:a6:d4:0d:ab:e3:a8:68:1f:73:42:b2:99:63:87:a4:
         f3:25:82:80:69:37:8a:7c:38:3d:ff:dd:e7:d2:83:f1:15:39:
         49:bf:a5:c0:8b:ff:e5:bd:94:e1:27:1e:ba:23:84:45:99:d9:
         b3:09:d8:99:33:e9:f4:c4:1b:d1:7c:5d:52:bb:2e:95:f2:fe:
         5e:36:eb:ed:e3:92:c3:f6:dc:f4:9a:90:01:5e:13:31:4a:14:
         83:4a:e5:30:cc:f2:73:97:c3:47:24:b4:bf:6c:73:8e:ab:ef:
         78:dd:f5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:36 2025 by rpki-client on console.sobornost.net