Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          IoUmpAcmudTOGlUXWeU8BKLRS8rrydzS4Op+qNjJS8g=
Subject key identifier:   8E:E6:D4:CC:15:59:66:72:2B:5B:15:62:75:35:53:C5:5F:2D:C4:10
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       34CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          349D
Signing time:             Thu 24 Apr 2025 15:19:26 +0000
Manifest this update:     Thu 24 Apr 2025 15:19:26 +0000
Manifest next update:     Thu 01 May 2025 15:19:26 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: tg8wsmt+iXTBVDGJ5oKQhQl6Z2lbOK4rc0r0QYuVUD4=)
                          2: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=)
                          3: 1DF2E9F2D3D011EFAF492E7BC4F9AE02.roa (hash: DdcwMrYgxms39/2lnopBgWj9ObBDY+6LEivm3sNs/Qs=)
                          4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=)
                          5: 1D7E458ED3D011EFAF492E7BC4F9AE02.roa (hash: cfuG3Q6SxCv5NEHrNvBKgcm8n0lxZoatwiMQRslcJQQ=)
                          6: 40B6E2081B5C11F08C45FC65C4F9AE02.roa (hash: BvepmJmkwHdx9eDwegND6OvYI1a/Clt8J0RGrX/Bg74=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13518 (0x34ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Apr 24 15:19:26 2025 GMT
            Not After : May  1 15:19:26 2025 GMT
        Subject: CN=680a567e-6d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:c1:8b:26:9d:3e:f2:46:b4:06:d9:7f:e4:
                    6a:59:da:45:8b:af:2a:1f:bf:93:4f:cd:fc:bb:7d:
                    97:a3:c8:95:6c:cb:9b:1e:46:cd:32:ca:24:d7:c3:
                    4b:b9:38:c4:75:3a:4d:1d:69:a2:ed:0a:40:46:6c:
                    15:9b:eb:71:a4:6d:d2:07:ea:21:b8:7d:25:d4:4f:
                    f5:8a:e1:de:81:f4:8a:09:fb:01:f1:04:87:46:ec:
                    f1:0b:e8:10:ad:5f:37:62:fb:eb:f9:20:70:62:ae:
                    88:d5:7a:8c:43:a1:97:55:9e:fd:00:e0:17:82:e0:
                    44:5b:cc:dd:0d:d1:20:cd:75:44:55:2e:a1:41:b9:
                    ad:7d:72:b7:78:8a:c1:78:f0:46:4a:76:21:98:53:
                    48:9a:b4:2a:36:e8:8f:46:4e:78:52:07:32:f2:25:
                    dc:2e:a1:5b:bf:33:5f:cb:8f:f4:2a:6f:1b:02:5e:
                    a3:41:5e:be:27:15:c6:89:36:86:62:b5:65:08:13:
                    26:ee:28:1e:50:16:73:34:02:27:e0:36:3d:34:04:
                    90:fe:ca:1e:9a:37:06:33:76:a3:b5:4c:ca:0a:4b:
                    f0:03:a7:94:a9:dc:59:08:3f:58:5b:39:ec:3e:79:
                    cb:7b:b4:1d:bc:f4:d8:5c:84:69:d0:67:92:b1:49:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E6:D4:CC:15:59:66:72:2B:5B:15:62:75:35:53:C5:5F:2D:C4:10
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:d1:b8:b6:32:b1:5f:b1:e2:60:5f:e4:b1:f4:3d:df:da:
         06:bf:0f:85:e5:00:5c:25:68:08:37:fe:52:16:3a:dd:3a:62:
         bf:c7:bc:38:24:45:48:a2:27:81:41:d6:92:67:40:fe:fc:2a:
         9f:28:50:37:35:99:b5:df:0e:2e:39:9b:5a:27:30:57:32:27:
         e5:89:2c:23:26:3b:52:ec:70:e0:f6:f1:f8:47:a7:60:3e:b2:
         ba:4a:ae:fb:a9:71:71:fa:4c:a5:2c:8b:0d:6a:97:25:85:3e:
         24:c4:ac:04:88:35:9c:e8:68:92:74:92:7d:03:e0:74:af:16:
         e0:73:79:80:c7:66:1d:17:5b:32:d7:d0:01:db:bf:5b:85:45:
         bd:66:87:9e:1d:65:8f:90:67:fc:1c:86:f4:05:2e:79:ac:91:
         e2:44:a5:a8:26:cc:31:64:09:05:51:4c:e8:39:fd:5e:7a:fe:
         d5:16:37:21:c0:38:4e:06:91:51:b4:7c:54:6a:d0:d8:ff:37:
         72:6e:39:8e:e2:a9:a6:74:91:13:09:36:94:90:47:1f:e1:bc:
         a6:8a:84:cb:ca:b2:f7:b0:66:68:89:7e:9b:2e:12:d5:a5:67:
         15:b7:5c:81:61:bf:1f:5e:62:e4:68:de:fa:db:db:36:6c:d5:
         99:43:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:08:10 2025 by rpki-client on console.sobornost.net