Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File:                     PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier:          vD4O55UOzR33jCHZ6z3O6lo3kg6ER0MbobhiwOJ0QGc=
Subject key identifier:   A1:31:CD:6E:15:82:9F:FA:3A:BE:C1:25:93:74:57:2E:CB:5F:32:F1
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer:       /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number:          88
Signing time:             Sun 27 Apr 2025 05:19:53 +0000
Manifest this update:     Sun 27 Apr 2025 05:19:52 +0000
Manifest next update:     Sun 04 May 2025 05:19:52 +0000
Files and hashes:         1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: iBWerN4Jyk7jSPgYk3M17V6ngV0OkKD1X+JjExSesN8=)
                          2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
        Validity
            Not Before: Apr 27 05:19:52 2025 GMT
            Not After : May  4 05:19:52 2025 GMT
        Subject: CN=680dbe79-1547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:9a:4d:0d:05:db:91:54:bb:db:67:6f:57:
                    99:e6:96:03:55:01:b5:95:c2:72:de:d4:36:ec:12:
                    32:6b:84:1b:63:58:c9:f3:fe:20:0f:06:0a:ad:40:
                    69:c6:03:71:31:03:d9:7e:aa:94:0b:2c:c3:ff:9b:
                    0e:0e:45:3a:9d:2d:82:83:72:8b:80:f8:dd:13:8f:
                    ca:78:18:81:37:fd:15:16:b5:c7:82:b0:56:21:5a:
                    15:85:73:73:4f:1e:2c:fa:a1:24:82:8c:53:8c:91:
                    47:f8:e2:1b:00:6f:7d:4f:54:d7:96:18:11:81:0f:
                    93:71:9a:e7:5d:d9:0f:8c:0b:db:e6:d2:00:2a:6e:
                    18:5a:60:6a:1f:5c:d9:ab:4f:6d:ef:67:de:2f:cd:
                    47:ac:dc:30:9f:04:ac:aa:77:ec:e9:92:36:be:a8:
                    cd:3d:7e:bf:db:6a:b4:b2:2e:ca:50:2d:ff:75:ab:
                    09:2e:38:f9:33:72:7f:a8:31:86:00:7e:6b:5b:61:
                    03:65:2c:4f:b6:6b:f7:5f:e2:2e:a0:bd:e7:aa:f4:
                    f8:9d:33:40:5d:18:67:2c:e6:fc:e8:ef:a2:fa:1b:
                    4f:8f:d2:74:02:bb:79:4d:2a:8c:89:a5:92:a6:b6:
                    77:b9:44:04:4e:7e:03:96:2b:76:da:46:43:54:f5:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:31:CD:6E:15:82:9F:FA:3A:BE:C1:25:93:74:57:2E:CB:5F:32:F1
            X509v3 Authority Key Identifier:
                keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:2c:5a:4d:08:f0:3c:6b:f7:31:50:f0:3b:07:49:57:23:
         e6:2c:16:02:12:25:bb:c2:8e:47:3f:ce:b9:4c:22:17:0f:70:
         4b:e3:c9:2e:30:35:12:5f:31:5c:08:8a:7e:ab:33:25:d5:1e:
         a6:3a:17:c7:3e:bb:d4:c6:ea:90:f8:6e:e6:5b:a7:77:b3:85:
         a5:26:c8:ed:9d:ba:11:70:c9:1a:e1:33:96:e6:6e:bc:51:85:
         5a:22:62:47:f7:12:6d:06:59:17:bb:c8:15:c2:58:01:bb:83:
         4a:e4:d5:1d:83:fb:b3:0f:6d:b0:d0:85:3e:1a:05:dd:b2:86:
         8a:5b:ca:63:65:07:0e:22:53:6c:67:16:8b:5e:7d:1b:4c:3d:
         a8:d2:a5:22:ce:c0:9e:9e:dc:16:68:3f:ba:47:be:91:52:da:
         40:6d:2c:e8:62:2e:cc:ba:81:f7:88:d3:ab:e2:92:c8:0e:b4:
         7b:b9:60:41:8b:d0:d8:76:0e:e4:57:f5:06:70:ac:53:fc:d3:
         a3:08:19:fc:3e:7b:70:66:e3:be:22:60:13:c7:92:d9:0c:42:
         80:e4:0e:0b:cf:15:b1:14:c4:5f:21:69:65:09:a8:af:14:5c:
         0a:f6:f3:0a:6e:a0:09:e4:f7:9d:94:e5:27:89:45:02:17:ff:
         ba:d6:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net