Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
File:                     g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json)
Hash identifier:          VNXI4m4fixk8lQXCwnYK9Ju1r5TnJRDBBhxn7bPXQQ8=
Subject key identifier:   F8:5F:07:1E:8F:AF:C9:CB:A4:7E:62:D8:E5:01:36:E8:FC:51:BC:D5
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Certificate issuer:       /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
Manifest number:          E5
Signing time:             Sun 27 Apr 2025 04:21:56 +0000
Manifest this update:     Sun 27 Apr 2025 04:21:56 +0000
Manifest next update:     Sun 04 May 2025 04:21:56 +0000
Files and hashes:         1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: yhXupD9k5Gs0yUKQ9Zl+kJw55kg40f+69of4B5ii0rU=)
                          2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: ReL28hF+/x2h0RKcTZEQ3GcIbkXQcDw6s6esZ8caJwY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
                          rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
        Validity
            Not Before: Apr 27 04:21:56 2025 GMT
            Not After : May  4 04:21:56 2025 GMT
        Subject: CN=680db0e4-c262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:30:e7:e1:24:2e:7c:8c:ad:cb:de:be:6d:
                    d9:db:a8:97:cb:2f:d8:3d:26:14:c5:10:3f:7b:51:
                    d0:aa:3b:80:88:ac:d2:91:48:d5:71:3d:ea:f4:79:
                    d6:d0:3c:3a:30:1f:23:59:c2:b4:20:c0:88:c0:a5:
                    36:07:9c:b6:f1:b3:d3:38:b5:94:c5:f6:f1:a4:25:
                    28:bd:aa:19:0a:8b:13:5c:d5:e6:07:9c:78:d7:7c:
                    bc:da:b0:75:ac:14:2b:46:02:de:29:b9:0f:b1:aa:
                    42:2f:2f:c2:8c:92:17:0f:3f:42:0b:76:42:44:75:
                    7a:e3:bd:b4:b1:99:2e:5f:68:71:c0:04:3f:77:e7:
                    95:7b:69:86:f3:6e:37:a0:7f:c4:16:99:40:c6:4d:
                    3d:2a:37:ba:66:5c:a9:0f:bd:dc:17:81:77:07:9b:
                    cd:06:85:36:52:b7:88:eb:9b:6a:7c:56:43:cf:d9:
                    8f:52:ad:b7:c0:77:88:2a:5f:aa:ef:66:ce:e7:78:
                    d8:78:c0:5d:39:25:55:85:e4:e7:c4:4a:6c:a9:a8:
                    c6:37:87:28:b1:25:96:9b:a7:e1:a8:4f:65:3e:78:
                    c9:c6:df:24:9c:cd:b2:60:3c:30:f5:52:28:6c:ab:
                    bd:9a:16:b0:f5:e4:d9:7e:50:1d:b4:8b:20:d8:15:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5F:07:1E:8F:AF:C9:CB:A4:7E:62:D8:E5:01:36:E8:FC:51:BC:D5
            X509v3 Authority Key Identifier:
                keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0a:c6:10:b6:5d:a8:e8:b0:7f:10:2b:d3:75:4f:6b:41:fb:
         82:70:68:0c:67:62:b3:c3:09:89:0f:4c:3b:b1:f7:3c:0e:aa:
         cb:62:dc:95:f9:2c:30:8d:7c:5a:3e:6b:aa:43:cb:5a:37:7b:
         46:ba:3c:c5:58:74:c7:c5:4b:bb:16:05:b6:db:7c:29:0b:c5:
         9a:d3:25:3b:ac:60:d1:32:32:80:93:12:f9:18:d8:6e:ed:f4:
         43:c4:0c:10:d3:52:ca:16:32:ec:af:16:14:c0:72:07:d0:f8:
         cc:a3:0c:58:b6:80:24:ce:67:a7:e7:b8:99:04:2c:1c:7c:a7:
         e3:48:cf:0a:cb:f5:ec:bb:32:42:c0:e3:7f:ec:7b:4c:3e:2f:
         db:9a:86:1b:65:2f:99:1f:b1:ae:0f:d0:ff:9b:b3:80:d5:c0:
         96:c7:ac:0c:e8:ff:fd:20:1c:70:60:25:ef:50:5c:96:d2:1b:
         b3:ad:65:01:a1:f5:31:af:b4:4a:93:1e:9a:4c:e7:30:8a:8c:
         99:54:fa:c5:ca:c3:32:7d:f8:61:2f:18:d6:cd:0f:72:ea:15:
         40:49:d2:86:37:d2:54:f3:18:47:7e:cd:bd:e4:c9:36:b5:e5:
         7a:44:32:a8:7a:28:d9:cc:be:bf:91:74:15:d3:20:78:01:12:
         21:ff:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net