Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
File:                     Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json)
Hash identifier:          SaNwz8Qrwex0R2+Dei7txOK4IEZoUdsgpw3HKmNwZoo=
Subject key identifier:   AA:6C:39:15:8A:6D:D7:B6:F6:F2:79:CF:0C:0B:48:E1:9B:2D:34:82
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Certificate issuer:       /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
Manifest number:          0289
Signing time:             Sun 27 Apr 2025 01:18:47 +0000
Manifest this update:     Sun 27 Apr 2025 01:18:46 +0000
Manifest next update:     Sun 04 May 2025 01:18:46 +0000
Files and hashes:         1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: 1+eKAmXDGfErHoDU9dj8w8P+fMRzpjnyDvWbbzmnZhA=)
                          2: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: R8BTOL86V2lkOQsbW+rQ8pt2tHQCxt6FoHVMOBZZhL4=)
                          3: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 7CKylBpxKWewvw1jHj+wa1g1s5Juhm7MXUJtNktQtY4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
        Validity
            Not Before: Apr 27 01:18:46 2025 GMT
            Not After : May  4 01:18:46 2025 GMT
        Subject: CN=680d85f7-968d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:95:df:42:81:97:52:91:fb:6f:56:e9:09:
                    39:f7:3f:6f:85:77:0d:b3:aa:d5:ee:a2:c3:8c:e6:
                    cb:51:da:44:1e:db:c0:db:40:59:12:97:c8:ca:2b:
                    bf:7a:73:f7:b9:54:36:fd:88:54:a2:2b:c9:18:79:
                    df:32:2f:d5:c5:f9:ca:7d:06:b9:33:3b:2b:d6:ed:
                    49:42:11:f1:47:46:d8:b5:a1:b4:3f:1e:5e:0a:db:
                    db:fc:76:b4:94:68:32:02:05:b2:79:b2:b2:a8:2b:
                    50:98:41:f9:f3:1e:a0:8b:7d:43:8b:50:4b:d1:63:
                    7e:53:81:c9:c5:c0:ec:e3:0d:78:15:28:61:cb:5c:
                    f6:9b:a0:06:01:75:8d:74:ac:65:b7:9d:ac:c0:c2:
                    c5:96:2c:f7:25:47:81:8e:c7:72:b2:d1:62:3f:9e:
                    b1:6f:3b:6e:f2:9e:f3:d7:06:26:4a:04:d2:53:26:
                    62:a5:dd:75:46:f7:a8:3f:a0:01:71:79:1f:17:f5:
                    5d:77:7d:29:7a:f9:ad:6a:70:22:d9:74:81:be:d2:
                    42:eb:69:ff:38:07:b3:20:4f:ac:4c:e8:cf:74:e8:
                    8f:84:6a:fd:34:71:b8:7f:c2:7a:d8:be:1a:34:74:
                    09:f8:d5:93:52:02:b9:9f:dd:1a:af:d9:a3:fa:a6:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6C:39:15:8A:6D:D7:B6:F6:F2:79:CF:0C:0B:48:E1:9B:2D:34:82
            X509v3 Authority Key Identifier:
                keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:78:cf:16:b5:30:aa:37:c1:fa:ba:25:13:d5:9a:05:26:
         98:81:b5:2b:e1:cd:7b:3a:ff:23:11:92:8e:ac:40:2c:e2:7a:
         39:e9:36:f7:84:fe:12:3f:65:05:9c:f7:58:5f:0f:55:8a:1d:
         68:0f:fd:d4:ce:a4:76:e9:f3:39:da:e4:fa:8f:6a:ed:70:aa:
         a0:12:26:99:7b:7e:6f:4b:39:fb:12:96:47:93:62:69:a4:e7:
         1f:62:cc:17:3e:83:75:58:e9:ad:a1:5c:48:58:d6:d3:c6:ec:
         ba:9c:70:53:f8:74:05:27:f2:ea:06:d6:22:77:ad:5d:09:2c:
         35:3d:b6:82:68:b5:db:52:44:73:70:b3:ab:0b:15:74:3c:92:
         c2:ed:01:37:44:92:98:af:47:27:41:99:b1:06:0d:02:6a:8b:
         61:c0:31:02:3c:c3:93:88:1d:a7:07:3b:ca:c5:d8:a1:17:b6:
         51:b1:2c:42:ee:c2:43:c5:9b:84:5b:06:42:92:da:bf:98:fc:
         4d:c0:b8:72:e4:25:a4:75:77:06:18:ce:9f:bc:f6:c8:53:84:
         a4:12:0e:cc:9e:c9:c2:4d:ee:8b:ef:5c:a7:61:c4:23:03:d8:
         1f:60:b8:55:ce:3f:40:a4:94:9d:2b:db:2f:71:a6:0b:a8:01:
         9d:39:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:55 2025 by rpki-client on console.sobornost.net