Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File:                     967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier:          jiw8rvOAo9nSQQORbfPLzl2SpRC1z6Vw8wDZ+fu9x6I=
Subject key identifier:   06:51:01:85:92:5A:26:F6:28:4D:66:74:0A:57:92:31:A4:19:93:0F
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer:       /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number:          015F
Signing time:             Sun 27 Apr 2025 03:01:56 +0000
Manifest this update:     Sun 27 Apr 2025 03:01:56 +0000
Manifest next update:     Sun 04 May 2025 03:01:56 +0000
Files and hashes:         1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: lIZw66W45xf/gvDuSi0T3+oBuuNtFZSbOSWTzDf7hEc=)
                          2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=)
                          3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=)
                          4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
        Validity
            Not Before: Apr 27 03:01:56 2025 GMT
            Not After : May  4 03:01:56 2025 GMT
        Subject: CN=680d9e24-6ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:bf:ab:a0:e2:b4:4a:f6:61:11:93:13:6c:
                    0c:58:65:65:fb:23:aa:35:94:ac:0d:de:98:f0:41:
                    4e:45:f8:56:f4:8f:ef:4c:96:3f:d5:68:45:c0:16:
                    73:db:92:cb:97:7a:5c:56:90:89:e5:ba:8d:66:f0:
                    d9:9d:51:6b:85:34:a6:8f:1f:56:3c:6d:bc:c0:cb:
                    37:e3:6a:34:b7:df:a9:9e:8d:1e:09:ff:47:3c:dd:
                    ff:d7:91:77:83:ec:a0:cb:64:c5:8f:70:8f:51:05:
                    6a:ac:00:e3:90:d0:09:4b:92:37:9c:b8:73:fc:5d:
                    b4:3c:c8:5c:1e:e1:5b:f5:52:c6:5d:53:0e:6e:80:
                    7d:08:46:d3:14:02:63:7a:7c:5c:8f:de:99:77:b4:
                    61:9e:89:fe:da:75:19:f8:70:88:19:f5:f1:98:c0:
                    c0:9f:98:81:6e:61:38:5c:1a:9b:b8:04:fc:1a:75:
                    5b:73:26:ae:f4:42:af:41:20:9b:05:8e:a0:99:d8:
                    4a:55:6e:66:bd:f1:a2:4a:0a:a4:c9:5f:39:7a:93:
                    19:fd:19:74:ff:fb:d2:76:ad:cd:3a:76:c8:0f:54:
                    1b:1e:ed:bc:a1:66:e3:2f:8c:cb:db:d1:38:7d:24:
                    69:d0:39:0d:27:90:91:97:28:d7:9d:c4:b7:2b:c5:
                    93:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:51:01:85:92:5A:26:F6:28:4D:66:74:0A:57:92:31:A4:19:93:0F
            X509v3 Authority Key Identifier:
                keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:c7:0c:26:f3:6d:21:08:47:a0:ef:78:4f:df:f4:fc:10:
         38:a9:05:a8:f4:db:88:5f:a6:f5:b5:b6:b2:4c:ea:9c:c8:29:
         f3:a8:b7:dc:4d:fb:ab:5c:c8:5e:b8:28:c9:27:17:89:1a:fa:
         9b:4f:bc:5e:15:7b:0d:66:87:6e:c6:a0:2e:ca:20:52:ae:71:
         a4:12:9f:77:50:0f:94:7e:53:23:78:b1:7a:e9:b0:70:aa:54:
         e6:bf:4a:af:c7:aa:f4:c7:90:f2:72:a4:72:74:55:37:ba:93:
         94:0a:8f:38:4d:87:e7:4c:6b:83:f1:91:6d:08:f0:ff:15:bd:
         ff:55:cf:87:6b:5e:b8:77:f4:78:a2:b3:e2:ae:5d:08:20:b7:
         76:c0:24:8d:33:81:96:62:9e:10:74:4c:74:5e:fd:13:3d:30:
         9d:b5:55:9e:07:65:fa:54:41:52:53:f6:3b:8a:ac:13:6b:c4:
         2c:03:39:ac:03:11:17:c2:c8:b0:59:e8:39:b1:01:2e:ee:a7:
         9f:1a:fd:e2:ff:92:e5:fd:01:b5:3c:4f:a2:0d:37:10:1c:2f:
         25:f7:39:b0:44:6a:88:75:90:61:00:85:bf:17:19:ee:9b:ff:
         89:e9:f6:ca:98:7a:21:68:e2:74:30:fc:48:2c:70:30:16:fc:
         2d:c7:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:51 2025 by rpki-client on console.sobornost.net