Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          xGcPIuj0D5WwiTrPUEmxAN66PTRuef8KolaV8M1r1vs=
Subject key identifier:   30:F4:D0:91:77:95:D8:3C:67:32:0E:43:D9:91:9A:A3:EC:D9:5F:9B
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0D2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0B87
Signing time:             Sat 26 Apr 2025 19:53:04 +0000
Manifest this update:     Sat 26 Apr 2025 19:53:03 +0000
Manifest next update:     Sat 03 May 2025 19:53:03 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: x5wYc6TElE4hTka89rCQGhgGK9Ut33jcExEdc654L58=)
                          2: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: LCTaAks4BqlupqHXTz1VdaXnEXMyWZW8ZhZmp2UYH3Q=)
                          3: 92A205F4191111F095164E59C4F9AE02.roa (hash: 3xwUQICiJWltnsaPPc+uKPTybyb67JmaTUlAe4OstQ4=)
                          4: 9F9996C213D111F0AA6BA06DC4F9AE02.roa (hash: XvmtAl4P5a29aqS9e6mLU5ktzC3FHG1NMRnHUBLds0Q=)
                          5: BC7FD008F9A511EF885CA76EC4F9AE02.roa (hash: Ex7392prc1zunazGcvbevro7VL69lZXVyb5pMImsMLI=)
                          6: C5251E64F97A11EFA49F1830C4F9AE02.roa (hash: 1s6o144svvuBT7bM0nKhLdrQKAxPDy6rl1DbIqyk5zw=)
                          7: 75EBFC30147A11F0B6BF5B67C4F9AE02.roa (hash: KG2RLaKQGPSadB3NRv2ridHAGMaUMBRbwy2ETF/NtCo=)
                          8: 95F1EC2A20E011F086D75E5CC4F9AE02.roa (hash: CnHAKJhcFhKxT9bBgQkQzh3x9o/fPEBq15JlvNEADLg=)
                          9: 0CA13B5E204211F08913AD7EC4F9AE02.roa (hash: Z1Sr7v7B5X0gptNz8O3a/LI7uJqeiBgmcVw94I47NgQ=)
                          10: D8538FA2204411F0B6649425C4F9AE02.roa (hash: uqPVCmw8xhCuAFmHWCKeDdfNdsicl8lxhmTwM3JVS44=)
                          11: F0D4053EEDCC11EF8C545F54C4F9AE02.roa (hash: 4QfTRpAN+SnkWQoS+a8PlbB83aqDd8EbkaEm2nM3FeI=)
                          12: 4CF0A0BA203C11F099B69612C4F9AE02.roa (hash: 4ZKf/xoqZfwCwC8ZZP+pa6ZQRHPV0PGk6ZyQjnRsPBQ=)
                          13: CC2CFF76161F11F097D3DF59C4F9AE02.roa (hash: kRO7k4BulRhHisoR6+EUfbpDnd1NcNjfEli/hLZ+UXQ=)
                          14: 96D29A2220E011F086D75E5CC4F9AE02.roa (hash: KRy0P5JWQx6Y2V5q4Ftt2uIQCI1mbwGMxyDRESmryUU=)
                          15: C61D8A7CF97A11EFA49F1830C4F9AE02.roa (hash: nuITOYdIhOArGSoGSt5j2KXEgn3a91gHsJvT7gl/ffo=)
                          16: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: YJQ9SpoqXrkvlRkEN5wsjZZeJRNdP87R6x7oDal+xTw=)
                          17: 90A6E260F97711EF931B0A48C4F9AE02.roa (hash: yNt3+76oxiczQlWAKFrrom/dgPrfFKQXLtrONN2mqsc=)
                          18: 1D8C62546F8011EFAB7D8E27C4F9AE02.roa (hash: V60KygzTK9eNVxmxKjhWraiuv3ggFGZ8iow3OUP1MyY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3375 (0xd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Apr 26 19:53:03 2025 GMT
            Not After : May  3 19:53:03 2025 GMT
        Subject: CN=680d39a0-5c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:f6:26:99:fb:e6:35:86:3d:94:25:e7:f2:
                    d5:b1:0f:f2:bb:f9:25:b2:c1:76:8b:73:df:3d:95:
                    2c:7a:3a:54:d7:41:71:08:5c:d2:a0:b6:31:e3:93:
                    20:09:7e:6c:f4:67:4d:b8:56:3d:43:2d:cf:f2:68:
                    a5:ef:c4:55:d1:c9:9b:26:13:26:1c:40:e1:e6:f1:
                    b3:b3:de:b7:79:f4:c9:ee:41:9a:55:66:c3:13:ed:
                    7d:de:fa:bc:85:4d:17:a3:28:61:2c:9a:93:3a:52:
                    d7:2c:28:e0:b7:88:c4:97:66:7a:cc:00:c4:1a:52:
                    2c:87:5d:91:d3:ae:16:75:5b:f5:4a:8c:36:d4:92:
                    85:da:89:b3:da:8a:63:94:84:ce:19:04:bb:e0:11:
                    81:6b:a8:05:a2:f8:3c:2b:85:0b:9b:79:fc:76:a2:
                    3c:6c:41:32:93:12:41:59:05:0a:7d:1b:9d:c8:0a:
                    45:03:b5:c4:77:e6:05:83:c8:05:38:08:46:87:31:
                    16:8c:b0:b3:a6:5a:9b:0a:9a:0f:3b:73:a5:f8:35:
                    2b:41:08:ee:85:66:d7:0f:d5:cb:07:62:b5:20:49:
                    ab:80:55:93:75:15:fe:6b:6a:cc:4a:c6:6b:20:ed:
                    87:15:18:8b:71:4d:e3:10:bc:53:07:46:65:75:30:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F4:D0:91:77:95:D8:3C:67:32:0E:43:D9:91:9A:A3:EC:D9:5F:9B
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b1:cb:0f:e0:a8:f3:75:0e:33:43:b9:cc:76:87:9a:76:bc:
         82:6f:4b:14:a4:e0:56:85:26:e7:ca:61:9f:5d:ca:a2:8c:e8:
         30:c1:4c:41:4c:98:e9:f1:ad:9b:e9:4b:d0:9c:a6:52:91:ce:
         e7:51:d5:6e:89:28:20:97:9d:34:72:65:67:97:72:0e:ba:a3:
         70:31:3b:e0:6d:62:59:ed:7f:2e:88:b1:18:87:7b:a2:e7:30:
         61:da:7b:43:55:09:0d:91:c1:1a:e6:f8:e8:93:8c:19:4f:45:
         90:e7:a7:9a:d3:8b:e5:c7:28:6e:12:8d:e4:4b:f3:e1:08:2c:
         b8:ca:ee:d7:07:b2:87:ef:5a:88:a8:c6:bd:80:48:c6:4a:31:
         53:67:9f:c3:62:5b:2f:04:e1:fb:af:89:ed:77:b0:07:ea:b0:
         6f:91:87:86:77:0f:e4:c7:19:68:c7:0d:86:6c:7d:bc:da:c1:
         a7:d1:0d:5a:4a:e2:03:1a:53:34:bb:ba:ee:b1:53:8d:b0:96:
         17:d5:c7:1e:d1:7e:92:3c:00:6f:7d:a8:12:c6:c4:d1:65:fb:
         97:f9:f8:f3:d6:29:ae:fd:e4:5f:4a:06:d6:e6:28:3e:3c:f8:
         62:3c:b4:f7:1d:99:41:7d:e1:ca:ee:3b:fb:05:02:58:57:64:
         55:df:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net