Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File:                     xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier:          HHZ0seaD448SmjRE4VvXYgtEsUp7jiJundS+4Ujz1Qo=
Subject key identifier:   4D:14:D4:78:87:C5:9B:5F:E4:9C:B0:13:A6:F2:BE:F7:FF:04:F8:FF
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number:          0193
Signing time:             Fri 25 Apr 2025 02:56:57 +0000
Manifest this update:     Fri 25 Apr 2025 02:56:57 +0000
Manifest next update:     Fri 02 May 2025 02:56:57 +0000
Files and hashes:         1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: q2E3Ipr8bI/3Rwr38KsbrtziqV65O/fi8j3BObU6iNs=)
                          2: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=)
                          3: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=)
                          4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=)
                          5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Apr 25 02:56:57 2025 GMT
            Not After : May  2 02:56:57 2025 GMT
        Subject: CN=680af9f9-a0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:69:5f:78:e0:21:73:8a:aa:63:73:15:95:ee:
                    14:2e:98:59:c2:64:0e:f1:cb:7d:b5:fa:1b:22:05:
                    bd:78:ee:83:83:a3:9a:49:ec:7e:15:e0:09:3b:ec:
                    65:cb:fd:19:49:a9:35:a7:8f:67:59:46:21:be:ce:
                    f6:9f:ef:10:be:f1:db:29:f5:7e:d2:3c:1d:da:0d:
                    e0:3a:17:8f:31:ae:5f:8d:1b:75:7b:c6:bc:3f:0a:
                    f8:50:5f:5c:17:97:db:32:d7:8b:4a:a3:12:e0:bc:
                    bb:49:cc:b3:b8:b6:48:b7:8c:4a:4c:54:15:ca:b1:
                    69:1b:d2:e2:34:9a:d8:7f:e0:32:95:6d:e7:2b:fb:
                    bb:17:7c:a9:11:68:17:a1:8d:08:1a:9f:7d:20:8c:
                    fc:ed:51:6f:ed:90:7e:39:70:02:e6:7d:f9:98:83:
                    f9:9c:5e:99:96:6a:52:86:ab:0e:63:4b:41:2b:4e:
                    65:f2:ef:da:c8:54:b1:33:d7:fc:0f:5d:15:62:f2:
                    13:39:ce:e8:0a:60:b0:20:67:92:74:99:87:62:e8:
                    af:0e:a8:57:9a:a8:dd:72:19:fa:ca:49:92:17:03:
                    82:b5:1f:bc:64:17:28:26:21:02:9c:b6:a2:1a:f5:
                    1d:e8:82:ee:f9:f2:4a:de:bb:2f:5a:24:85:3b:3f:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:14:D4:78:87:C5:9B:5F:E4:9C:B0:13:A6:F2:BE:F7:FF:04:F8:FF
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:7c:76:9f:2c:a8:ad:13:0d:8d:c2:06:58:e2:cb:32:7a:
         a6:3f:53:17:37:7d:45:27:d0:b8:23:30:de:32:8d:2a:f6:e4:
         79:a6:f5:1d:28:f3:9b:68:09:de:b1:03:65:04:0b:20:80:04:
         51:4a:65:2b:03:12:5e:3d:25:b6:51:61:00:9a:08:52:df:18:
         f2:f0:24:6a:20:94:7f:e2:42:2f:28:73:7d:4e:0a:72:5f:3e:
         2f:ec:e9:6c:2d:e7:09:2c:37:dc:a2:c0:f3:c3:3c:de:63:6f:
         fd:6b:b1:12:67:20:7b:a8:8c:89:d7:d4:75:a2:9b:fe:72:ec:
         0f:a2:2b:98:f5:48:fd:89:ff:ed:ef:00:9d:67:36:ea:fd:2c:
         97:ff:d0:1a:64:05:12:2a:f6:19:bc:f7:68:c6:d2:2d:f1:60:
         06:3a:86:2c:ed:16:06:a9:41:59:c7:b2:71:ee:8a:c9:79:76:
         fb:cb:66:5b:92:d4:8a:67:f8:e3:1a:11:31:44:00:f0:b0:8a:
         06:5b:81:c2:10:a6:6d:ee:ab:7a:aa:47:81:16:83:d0:6a:fe:
         48:0f:b3:e0:ce:59:09:15:cc:f8:61:2c:86:3b:80:5a:23:4d:
         81:97:c9:ba:e1:83:a6:65:40:f7:4d:70:d4:2b:65:95:67:9b:
         53:1b:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:54 2025 by rpki-client on console.sobornost.net