Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.mft (raw, json)
Hash identifier:          YkwUxvSMIeuyDAACWUWo8vy8mCvHDf99mBLundysnYo=
Subject key identifier:   65:7B:DC:FE:E8:29:81:69:01:C3:30:71:14:1C:4E:DD:67:05:AA:F7
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       3487
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
Manifest number:          347D
Signing time:             Mon 28 Apr 2025 14:38:32 +0000
Manifest this update:     Mon 28 Apr 2025 14:38:32 +0000
Manifest next update:     Mon 05 May 2025 14:38:32 +0000
Files and hashes:         1: Teu44SIr4OPyOu23UkXg-XuHx00.crl (hash: 0CiyNRvj6UN0Xu6u5vFJQQYQoyjuIh5OWQxwfEAP9Sw=)
                          2: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (hash: yf+DtpQHK15DsIR7hfI9Gbc6iXm71Iwwp13I2Suk7Rw=)
                          3: 66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (hash: 69INgpKoMOy/gwg7BVvVMfejSm+vv8+6md6SESKON5E=)
                          4: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (hash: QLCxOEmWgCa369miIkbLMZGjORq6IjjCOA26AQZ1+A8=)
                          5: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (hash: VVrcitZ2B7U6+APe/mOfl0d7tYYMkpvIARKDnYAu3Cs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13447 (0x3487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Apr 28 14:38:32 2025 GMT
            Not After : May  5 14:38:32 2025 GMT
        Subject: CN=680f92e8-7bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:99:f0:ad:c7:5a:87:9b:a8:6f:de:98:9c:
                    92:55:14:35:27:d3:d0:4c:a1:78:69:48:79:11:73:
                    29:87:fb:f6:15:39:39:08:3a:db:4a:a1:f6:65:a2:
                    ce:ba:05:8d:52:f3:14:de:0a:b2:43:21:5f:e9:75:
                    de:7b:6e:73:85:7f:06:ba:a0:3b:02:54:70:95:65:
                    a3:07:df:f7:0b:30:54:d0:25:c2:2c:e9:91:92:b9:
                    fa:48:d0:33:ed:ac:67:69:99:1c:0c:54:8b:1d:00:
                    39:90:96:91:3b:80:d9:a5:8e:25:26:2f:14:bc:76:
                    14:bb:b2:96:4f:a3:48:d6:84:c6:f3:76:d4:11:41:
                    5f:83:9f:9b:e7:1a:fb:42:d0:52:9e:70:b5:1d:d2:
                    d6:69:a0:0a:f0:c1:52:60:f5:ed:29:5b:80:0b:8b:
                    eb:00:15:b0:68:67:77:ec:76:ce:ae:bc:12:b3:b7:
                    d3:7b:26:da:48:e5:2a:c1:ad:75:a2:6c:06:80:a9:
                    d6:3f:46:1f:db:b9:81:d8:49:80:2d:17:71:f2:e8:
                    c6:ef:fe:88:ee:6b:7c:8c:01:74:0b:75:78:08:1b:
                    a0:4d:a2:d6:d3:87:e5:55:24:08:64:86:f3:17:1c:
                    2f:17:10:c6:99:15:c1:05:f5:be:a8:12:df:1a:c0:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:DC:FE:E8:29:81:69:01:C3:30:71:14:1C:4E:DD:67:05:AA:F7
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:07:c6:bc:f8:45:63:d5:e9:e1:2d:f5:ff:5d:0c:21:d2:ce:
         6b:87:81:23:5d:de:91:2c:c2:1c:1c:72:e3:3b:98:62:24:6b:
         bd:58:94:8b:33:36:57:d1:57:3b:3d:0c:e0:47:03:3c:63:49:
         a3:e0:a5:d1:44:ce:8d:d2:8a:c8:f9:4e:b1:29:19:42:cf:84:
         82:6d:95:0a:11:f6:a9:f6:42:b9:d5:d6:b8:99:d1:29:8d:a8:
         5f:f9:9b:3f:b4:fc:d5:00:37:fe:70:de:9c:fb:91:9c:16:2d:
         98:cb:b3:65:79:1e:4d:89:3b:b7:85:ba:04:f2:32:fe:04:74:
         36:77:79:33:a3:41:2c:32:2b:42:09:b9:e4:bc:52:01:c4:f2:
         bb:fa:9b:06:f2:a9:2f:d0:6c:64:60:d1:be:c5:55:d3:02:37:
         1e:e5:97:43:9a:90:72:24:c7:72:cf:64:9b:fe:e7:8e:10:21:
         6a:09:70:32:f4:65:fd:4b:2e:38:ca:7f:a5:41:ed:12:4d:5a:
         94:2c:d9:bc:e6:ae:ed:16:b4:ca:cf:53:c4:f9:1f:30:6d:9f:
         0d:e1:d6:59:22:c9:dd:4c:45:4c:25:a7:fc:5a:8b:6f:00:33:
         a0:e0:72:7b:2d:1e:1a:eb:5a:4d:55:51:40:07:e2:07:13:74:
         62:e6:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:07 2025 by rpki-client on console.sobornost.net