Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File:                     f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier:          k7v7TMNP/gaymt8BLfcaTy+SkzG/m1/gx04jxP3wwyY=
Subject key identifier:   D8:0E:98:37:D0:98:04:14:61:DA:6C:7A:78:78:D9:0C:6D:48:91:83
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer:       /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number:          48
Signing time:             Sun 27 Apr 2025 06:15:58 +0000
Manifest this update:     Sun 27 Apr 2025 06:15:57 +0000
Manifest next update:     Sun 04 May 2025 06:15:57 +0000
Files and hashes:         1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: gIGMPMUmYwgN8cPngzlD5AwwIJlqHXUm4rpoGU3AJJU=)
                          2: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: 6wwD4dCdXwtS+LnCDXktDC+zo03fJil5+xbscBQAfeQ=)
                          3: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: qhXg7OZORCQmwfeMjxBNXmP6ZMvJvKn0GRTuJzNo35M=)
                          4: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: m2+w3MuoT8jahcLbP8IymDcYrHQo98+RI8vF7vbfRjY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
                          rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
        Validity
            Not Before: Apr 27 06:15:57 2025 GMT
            Not After : May  4 06:15:57 2025 GMT
        Subject: CN=680dcb9d-da12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:11:1a:2e:43:2c:2f:86:a2:0b:24:7a:70:
                    a9:64:2e:36:21:9f:ea:ff:e1:4f:6f:aa:3e:0e:be:
                    1b:c6:b5:ef:77:67:f3:be:3d:a2:52:bc:ab:78:5c:
                    41:24:83:ad:92:71:24:2a:0a:8d:56:87:c7:7b:2e:
                    9e:98:5a:51:49:67:37:fa:d0:bf:bc:5a:6d:b1:75:
                    7e:1a:3f:e6:38:b7:80:d7:c6:a9:bd:5b:d3:f7:61:
                    e7:c9:92:37:0b:3a:52:4d:1e:99:2a:a5:ff:23:71:
                    8a:2a:8d:50:09:a1:67:1d:71:3e:1c:f0:1c:6d:17:
                    5c:b5:ac:50:a3:94:83:05:9d:2b:fc:01:05:dd:64:
                    13:ce:91:8a:58:6d:85:63:a3:cf:34:26:3e:75:5e:
                    1d:16:45:49:bc:2b:ab:09:9a:07:05:58:67:ee:b0:
                    70:ed:56:e9:e5:4b:8a:93:96:eb:de:38:d5:14:3d:
                    00:3e:34:77:82:9f:d7:44:68:8b:65:88:21:8b:ae:
                    e2:2f:c5:60:6d:85:23:23:52:9b:0f:77:73:92:08:
                    a6:f8:3c:4f:a3:d0:96:bb:a7:9e:39:c5:62:1c:c4:
                    2d:ad:f6:43:0a:00:78:e1:71:99:20:b8:9d:c5:86:
                    8e:c5:77:f8:1c:b2:f4:5a:7a:31:b3:ff:f5:13:74:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0E:98:37:D0:98:04:14:61:DA:6C:7A:78:78:D9:0C:6D:48:91:83
            X509v3 Authority Key Identifier:
                keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ab:21:c4:f0:a8:3d:d5:3c:7c:82:5b:98:20:fc:f0:a9:ac:
         0d:cc:fc:45:96:3a:79:43:7d:d0:c3:c7:e0:7d:f1:17:08:ad:
         da:cd:51:f6:0c:a1:e2:5f:cc:04:90:67:4f:7f:b7:66:ba:70:
         fd:47:35:b5:0d:27:70:39:e0:90:f5:85:70:fc:c9:40:07:b8:
         56:74:fa:ff:79:23:69:68:14:c8:95:cc:d3:1a:5c:53:2b:23:
         e6:54:6e:8f:99:2f:d0:eb:7c:20:62:27:bd:0d:e3:21:9c:dd:
         33:5c:ba:be:5d:3e:b4:76:90:e1:00:58:64:12:eb:94:33:8d:
         8e:49:2d:30:14:b6:45:9b:b7:14:1b:d0:a7:64:3b:a1:3c:89:
         3b:b3:f5:e4:fe:54:ef:39:5f:fd:a8:c1:84:ac:48:e6:34:0e:
         d5:04:24:ca:39:26:a8:7a:3f:3f:4a:57:25:ff:22:6e:11:87:
         6d:de:ff:7e:2f:fd:17:66:3b:2d:24:3d:c6:9a:e1:dd:c4:ae:
         92:75:be:ec:f9:fb:cd:38:f8:06:8c:ab:fd:70:24:da:90:61:
         3d:18:29:3f:05:73:7d:b6:d7:3d:5d:14:e4:2e:a5:ec:27:15:
         98:c3:3c:e2:0c:f4:70:a6:56:4a:c9:b8:37:86:29:dd:e1:7c:
         b1:09:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net