Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File:                     etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier:          mKpA+XJvI9qGyinnAXFbyKzDCoTvNvd3jF/whwfw9wI=
Subject key identifier:   59:BE:22:AF:A4:79:82:09:31:92:1F:B3:F0:F2:97:B1:53:27:10:F8
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       07BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number:          07AD
Signing time:             Sat 26 Apr 2025 20:53:44 +0000
Manifest this update:     Sat 26 Apr 2025 20:53:44 +0000
Manifest next update:     Sat 03 May 2025 20:53:44 +0000
Files and hashes:         1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: 14tZWn7qPkCgqMtI/FnRMe7fLbs0c1/8k0HpH8Dg/go=)
                          2: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: +WSibnx37gSo4JTMELKjvSg5tqCiJEiitdnIM0rgO/E=)
                          3: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: UHXDMWaMF4j4QvTDDnj7fpF8e54veeD4dGxcEoD4ALo=)
                          4: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: a8B15QiOGju+otFzMCk+02tM5sltnBBLqlft6HyPU0k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980 (0x7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: Apr 26 20:53:44 2025 GMT
            Not After : May  3 20:53:44 2025 GMT
        Subject: CN=680d47d8-9330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:ad:3f:37:37:80:cb:85:45:c7:70:87:cb:
                    e4:41:b3:c2:7d:77:76:ec:40:a5:4d:ab:d2:ff:a8:
                    4d:a9:2d:f4:01:6f:51:92:af:20:76:65:75:99:04:
                    0b:5b:a7:10:bd:6e:f3:c4:fb:e1:fe:ed:93:af:07:
                    c1:da:a7:58:d4:8d:7f:c8:58:f7:04:d9:26:fd:76:
                    3e:ca:e7:8e:68:f4:80:a6:60:1e:d0:f8:24:2e:24:
                    1c:5e:e7:76:df:d7:29:18:c2:4c:b7:18:4e:af:5b:
                    dc:66:d6:1a:82:76:77:f7:e4:d0:a6:d9:a4:f1:ba:
                    c2:24:a7:2b:a7:90:54:52:e1:a8:87:ce:f9:f3:0e:
                    4e:8f:69:f5:93:bf:57:cc:e1:1e:ec:f8:5f:09:b4:
                    e9:ae:48:5e:ea:01:e5:f7:a2:3d:8b:b5:d6:cb:ec:
                    5c:f4:0a:61:7b:90:5f:98:10:d2:fb:f5:fb:7c:dd:
                    54:92:d9:e1:06:f6:e7:e7:1d:47:96:6f:7c:77:58:
                    7f:ca:b1:db:be:2f:ff:f3:55:5e:7e:8b:46:d1:d1:
                    df:5b:c4:1f:dd:60:f4:e8:d7:a8:a8:46:37:ed:e0:
                    10:81:7d:ce:0c:c3:71:db:f3:e4:d7:91:b0:f1:2a:
                    e9:d9:21:c5:76:89:32:d9:c5:1c:07:b2:bb:aa:e0:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:22:AF:A4:79:82:09:31:92:1F:B3:F0:F2:97:B1:53:27:10:F8
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:7d:19:30:d8:0f:c4:aa:6e:59:47:ff:d8:a6:d0:bd:d5:
         13:f7:c9:b9:c9:df:3b:01:5d:24:ef:22:c1:fc:04:6e:50:dd:
         5c:ff:98:9b:d7:8e:d2:f8:82:0d:c6:28:56:e7:f2:4a:1f:79:
         c6:a6:aa:b2:df:69:71:87:de:4d:2b:62:7c:05:a4:19:a2:53:
         07:f5:a0:af:2d:cf:fc:1d:4e:7b:53:3f:f7:31:7b:9b:8e:eb:
         02:3a:04:50:76:c3:2e:1e:59:6e:bb:fc:d7:fa:c8:1b:23:29:
         79:78:70:7c:90:bb:35:ce:8f:ab:24:c4:1a:5d:d5:fd:d8:b2:
         79:5b:69:c0:8a:15:b9:c9:84:2e:95:c0:8d:e4:2d:0e:4d:22:
         e0:5d:1a:7d:c5:6c:fc:51:be:5f:a5:89:7b:9b:ba:5a:da:dd:
         9d:fd:e4:2a:b8:17:78:2c:6c:9f:f5:5f:70:4b:8a:37:ec:07:
         d7:89:91:7b:fb:99:ee:15:ba:d3:d7:f0:f5:25:4b:65:73:7d:
         00:1b:d4:a5:71:91:ba:8b:f2:76:e4:56:80:2e:29:18:7f:d9:
         1e:70:ac:d5:8f:9b:cf:ed:bf:56:09:bd:27:50:00:ba:ce:1d:
         ba:9d:21:e8:74:d0:27:fc:33:3e:0d:bc:ce:63:33:6a:89:45:
         0a:4e:6c:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY5MTIxMTAvBgNVBAUTKDdBRENBNzFFQkUzRTE5MTMzMEUwM0M5NEQyQjRGNEZG
ODk4ODQ1QzUwHhcNMjUwNDI2MjA1MzQ0WhcNMjUwNTAzMjA1MzQ0WjAYMRYwFAYD
VQQDEw02ODBkNDdkOC05MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDKtPzc3gMuFRcdwh8vkQbPCfXd27EClTavS/6hNqS30AW9Rkq8gdmV1mQQL
W6cQvW7zxPvh/u2TrwfB2qdY1I1/yFj3BNkm/XY+yueOaPSApmAe0PgkLiQcXud2
39cpGMJMtxhOr1vcZtYagnZ39+TQptmk8brCJKcrp5BUUuGoh8758w5Oj2n1k79X
zOEe7PhfCbTprkhe6gHl96I9i7XWy+xc9Aphe5BfmBDS+/X7fN1UktnhBvbn5x1H
lm98d1h/yrHbvi//81VefotG0dHfW8Qf3WD06NeoqEY37eAQgX3ODMNx2/Pk15Gw
8Srp2SHFdoky2cUcB7K7quC3FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm+Iq+k
eYIJMZIfs/Dyl7FTJxD4MB8GA1UdIwQYMBaAFHrcpx6+PhkTMOA8lNK09P+JiEXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjkxMi8zRDhGMDY0NkZB
MTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdSTXc0RHlVMHJUMF80bUlS
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0eW5IcjQtR1JNdzREeVUwclQwXzRtSVJjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjkxMi8zRDhGMDY0NkZBMTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdS
TXc0RHlVMHJUMF80bUlSY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpRX0ZMNgPxKpuWUf/2KbQvdUT98m5yd87AV0k7yLB/ARuUN1c/5ib
147S+IINxihW5/JKH3nGpqqy32lxh95NK2J8BaQZolMH9aCvLc/8HU57Uz/3MXub
jusCOgRQdsMuHlluu/zX+sgbIyl5eHB8kLs1zo+rJMQaXdX92LJ5W2nAihW5yYQu
lcCN5C0OTSLgXRp9xWz8Ub5fpYl7m7pa2t2d/eQquBd4LGyf9V9wS4o37AfXiZF7
+5nuFbrT1/D1JUtlc30AG9SlcZG6i/J25FaALikYf9kecKzVj5vP7b9WCb0nUAC6
zh26nSHodNAn/DM+DbzOYzNqiUUKTmxS
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net