Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File:                     OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier:          Arv+Bq0IEa4nZwa2W1nwyag8j2AEjIjjGjXAYASHcBw=
Subject key identifier:   9D:93:BB:4A:C1:76:27:EA:5E:87:52:5B:11:78:95:12:A0:55:C1:1B
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer:       /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number:          016F
Signing time:             Sun 27 Apr 2025 02:50:34 +0000
Manifest this update:     Sun 27 Apr 2025 02:50:33 +0000
Manifest next update:     Sun 04 May 2025 02:50:33 +0000
Files and hashes:         1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: Bo702DBlPBDyidBebUJy/v5+RkQBdgQmwaJOrIch49Y=)
                          2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: LDgnrMv06w2uH/2SaOTlpFRL0ITCYwRDAQrZfxJgOVo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
                          rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
        Validity
            Not Before: Apr 27 02:50:33 2025 GMT
            Not After : May  4 02:50:33 2025 GMT
        Subject: CN=680d9b7a-65d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:be:f1:a5:26:f1:a8:98:c5:9e:e6:09:54:
                    be:94:74:ab:48:66:cd:6a:fa:4e:12:9b:a9:ff:0c:
                    7b:8a:b2:27:e8:16:88:f0:68:18:ab:24:8e:a1:7b:
                    3e:87:ff:db:5f:a4:33:c1:31:8f:5f:f7:b3:bc:e5:
                    c7:99:cc:83:1d:2b:86:22:eb:d1:19:1b:43:46:a2:
                    5b:b7:54:54:8b:20:72:7e:66:88:bb:21:6a:4c:35:
                    8a:23:e7:f9:55:d8:8b:ef:29:4f:b6:ec:a9:d7:16:
                    6a:4e:db:98:04:32:51:7d:7b:2f:db:e5:f2:01:0b:
                    d1:17:c6:3b:a2:63:19:a5:30:b9:a6:92:4b:4d:1c:
                    3f:0a:22:dd:d9:d2:c2:b4:a4:a1:8e:0d:e1:0b:01:
                    2f:4e:2f:7f:b2:0f:80:4b:ff:08:c9:5b:d3:c4:e4:
                    1b:55:b9:47:00:aa:a7:58:19:68:ba:50:a0:d3:2b:
                    b5:a1:98:88:a8:a8:99:68:53:e1:64:5f:19:e7:92:
                    43:81:39:22:e5:49:04:73:ec:11:45:73:22:6b:40:
                    dd:f4:4d:13:aa:92:be:30:c1:de:82:b9:6c:e1:d0:
                    6d:86:c9:ed:47:47:dd:41:e5:25:cc:55:70:fd:bd:
                    c6:99:02:a2:67:43:f1:0e:ad:3e:60:1e:6c:be:5e:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:BB:4A:C1:76:27:EA:5E:87:52:5B:11:78:95:12:A0:55:C1:1B
            X509v3 Authority Key Identifier:
                keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:78:b0:55:57:97:a9:53:4d:08:dd:71:40:96:ab:25:e9:f3:
         b0:6e:3e:17:b1:71:8c:9c:1e:d3:67:a2:98:5e:10:b0:c0:9b:
         82:17:c1:f9:61:46:f2:12:3a:47:77:ec:64:d3:74:af:5b:2a:
         77:e8:96:6a:24:da:cb:a8:19:2c:a5:10:ae:f6:ed:0b:86:7e:
         ae:86:14:0c:82:d3:22:30:b1:a4:52:53:3b:ab:5d:25:4d:27:
         42:40:d2:6b:ed:32:cd:4c:51:04:67:74:ca:1d:5e:4a:06:1a:
         75:3e:a2:4a:de:cd:05:dc:20:22:2a:e0:af:7b:f6:aa:6c:3c:
         be:d5:e5:44:23:eb:0d:3d:37:84:22:6c:54:e5:dd:5f:23:0c:
         f7:e7:fa:86:35:1c:6e:54:e1:23:10:d4:4e:83:9f:8e:4d:69:
         3d:73:f5:31:55:a6:72:a5:f8:7b:f2:fe:a9:ee:21:a0:ae:23:
         05:f1:55:82:b7:e4:d8:09:3b:66:cf:01:db:a6:5f:63:ac:1a:
         77:b3:20:0a:1a:6d:89:c3:03:c9:e3:b1:92:06:19:11:93:5b:
         d7:b4:79:86:f0:81:3b:43:0a:e1:9a:bf:41:f1:43:25:9e:b8:
         3a:fb:9d:d2:2b:21:7c:8b:12:8a:19:6d:14:8f:8e:46:ef:ab:
         01:d4:cf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:49 2025 by rpki-client on console.sobornost.net