Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          EzmStEFmkGCN488Uz/AvvDfsWV4nEsjC/tOKyEHJZWc=
Subject key identifier:   79:0A:A8:AD:E1:79:CC:D3:8D:18:D8:E2:C2:A4:E5:E0:B2:D2:E3:B5
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0D87
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0D68
Signing time:             Mon 28 Apr 2025 14:23:39 +0000
Manifest this update:     Mon 28 Apr 2025 14:23:38 +0000
Manifest next update:     Mon 05 May 2025 14:23:38 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: pTWh2hF+UR30kMFcp0pG6FOaXKFYF+M0tM5swF+hZoo=)
                          2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: p/azHtFptIXURVSRFgPxqoeDhngoYTd2NG88s2QFFzY=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: 9l1Haea64b2aYD99677ab4KdKZDozQlY1l2PmY/FJ1w=)
                          4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: 7OpoMhu5yrBYJukUqf3gKs+QCXSGnK6psVOlWcESVPA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3463 (0xd87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Apr 28 14:23:38 2025 GMT
            Not After : May  5 14:23:38 2025 GMT
        Subject: CN=680f8f6a-a7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:84:92:50:2a:c3:c8:a8:15:2d:f0:85:72:
                    7b:69:aa:a1:0b:c4:75:cf:b1:d6:9e:33:91:58:29:
                    0b:8b:68:20:74:9f:aa:77:a0:48:b3:c4:d6:48:45:
                    ae:7f:81:e8:93:eb:ba:fc:5b:85:77:86:57:04:6c:
                    04:e1:7e:b7:4f:ac:15:0d:43:2f:75:49:7e:a1:f4:
                    63:71:72:0f:23:ff:df:ef:47:98:73:43:f1:34:3b:
                    17:c5:95:fc:b5:25:fc:bb:5d:a7:13:05:a3:26:ef:
                    58:5c:1f:13:3c:b7:3e:2d:98:26:8d:6e:f4:f8:04:
                    58:49:9a:d2:dc:92:0c:f2:c6:c0:3b:6a:0f:0e:43:
                    7e:0f:e8:f6:68:7c:b2:87:5e:ad:87:01:cf:04:cb:
                    d4:8e:41:20:34:66:98:17:1c:58:5d:36:b1:ab:d2:
                    b6:34:97:1c:83:67:2d:22:a5:3e:f9:c7:46:0e:d3:
                    90:8e:dc:a8:7a:1f:a1:fe:30:eb:76:4e:8d:08:bc:
                    50:0a:e2:e3:d0:0f:41:88:09:16:24:d3:43:9f:5d:
                    23:9d:68:99:56:11:1d:20:e8:27:07:8c:e1:4b:49:
                    15:d9:11:ba:ce:1f:72:6b:dc:cb:6b:52:57:5e:0b:
                    cf:58:5e:16:de:88:34:f1:6b:c5:bd:a4:70:29:0e:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0A:A8:AD:E1:79:CC:D3:8D:18:D8:E2:C2:A4:E5:E0:B2:D2:E3:B5
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:68:67:ad:61:67:4b:4c:f1:3f:07:83:af:00:da:aa:a1:
         11:e7:a4:28:b2:2b:5d:46:6d:f8:31:58:94:ad:42:52:a8:4d:
         d3:dc:d6:63:f1:5a:5c:16:bc:46:81:bb:4b:10:51:3c:1b:af:
         0d:0b:f0:1d:0d:1a:08:ec:c7:57:c1:a8:d3:f7:eb:93:87:6a:
         56:58:86:9c:4c:90:5a:f6:92:a9:97:61:b3:d3:63:7d:9b:b1:
         83:b7:bd:5d:d2:73:ba:2e:a7:5e:02:38:84:28:e0:9d:5c:17:
         a1:31:92:ba:81:09:5b:00:55:81:2f:9a:65:a2:39:77:c2:ff:
         52:14:0a:82:d5:c6:87:ca:0b:81:9d:af:8b:ff:21:fd:75:78:
         c3:3a:d1:74:96:2f:d8:31:60:f7:31:fa:df:b3:44:bc:3e:20:
         b4:82:da:b6:27:08:47:f3:8d:a9:61:c1:42:fd:24:f0:b5:8a:
         9f:99:99:cc:1b:90:1c:68:98:2a:f9:a4:bb:b6:7c:33:d5:06:
         3d:d9:e9:89:f7:cf:b0:ab:e7:3b:3e:31:65:e0:c9:05:9d:e8:
         00:7d:9c:15:10:74:49:da:d5:2c:00:cb:0d:31:92:c1:60:89:
         dc:60:47:4d:b8:ae:aa:c0:c9:5e:ea:a7:0b:a9:ca:d8:6b:69:
         39:d5:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:07 2025 by rpki-client on console.sobornost.net