Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
File:                     4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json)
Hash identifier:          8l0Vfj1UvxTyYRMUPgL5B5tCmcc3RSVCA5gYEE5Rnjs=
Subject key identifier:   45:33:48:A3:DA:CD:27:58:23:47:90:88:2E:BB:A7:9D:4B:5D:7E:23
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Certificate issuer:       /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial:       068B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
Manifest number:          0630
Signing time:             Sat 26 Apr 2025 22:40:32 +0000
Manifest this update:     Sat 26 Apr 2025 22:40:31 +0000
Manifest next update:     Sat 03 May 2025 22:40:31 +0000
Files and hashes:         1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: JITJW63qX70sVLT6471GbsizSb3saPuIrwEYss6scXc=)
                          2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=)
                          3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: 9u1pwHKpVreKyVfB8nkyg0RNfC4miwkyLL7dTpwha4U=)
                          4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: BRqUa6lx1hCo3MEvTs8NlHFfgRjiFksL6MonNo6Ic5M=)
                          5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yYeYBpFrN5yAKPhvdNbBpvXOyw5PkXSnUg/nn3TG4vM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
                          rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Validity
            Not Before: Apr 26 22:40:31 2025 GMT
            Not After : May  3 22:40:31 2025 GMT
        Subject: CN=680d60e0-903f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:d5:82:c4:d5:00:dc:42:93:c1:d5:a2:54:
                    91:a8:8f:e7:de:93:f0:ae:b1:38:14:1b:cb:c6:85:
                    25:b1:50:d0:0b:71:5a:be:13:19:33:c6:54:c4:2b:
                    10:8d:12:cf:28:41:54:1a:98:6c:74:79:7d:5b:67:
                    0d:88:25:0e:a9:08:e2:b8:6a:66:49:af:7a:4d:50:
                    c7:42:06:0f:6d:d3:0b:47:96:8c:aa:48:ec:f6:a0:
                    82:b5:47:14:65:49:96:d9:0a:21:ee:f9:5c:56:ac:
                    d3:c3:35:08:29:1a:4d:78:cb:16:b1:65:3f:6f:5c:
                    24:44:82:23:03:4a:21:e2:ba:17:a1:29:53:db:65:
                    eb:01:63:74:85:12:91:48:65:51:04:11:d6:a9:a2:
                    89:05:b0:23:63:db:36:75:8a:98:f6:59:12:eb:03:
                    1d:54:48:22:1f:d3:2f:9c:b1:99:2e:4a:c9:a6:26:
                    7e:5f:f7:ce:b0:e3:5f:1a:29:71:4c:c2:ef:c5:72:
                    1b:78:84:5e:8c:5f:08:47:85:e3:dc:0f:d0:d9:2f:
                    56:97:00:3c:4f:03:19:61:ff:c5:d3:3c:9c:f3:e3:
                    d4:e3:1a:39:4c:20:5c:7f:ea:16:d5:b8:53:96:85:
                    62:42:84:b3:f6:e8:16:07:fe:5e:d6:2d:cc:43:b4:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:33:48:A3:DA:CD:27:58:23:47:90:88:2E:BB:A7:9D:4B:5D:7E:23
            X509v3 Authority Key Identifier:
                keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:fa:a8:42:19:e6:4d:f0:6c:bb:02:00:c7:e5:17:51:23:
         ac:ef:1b:15:ce:50:3a:d8:16:c8:63:8d:41:78:47:9e:07:a8:
         95:0d:9b:5b:a3:8a:1a:ad:27:1b:a3:46:b7:c6:39:ed:a0:95:
         7a:ec:f7:db:f5:60:5a:3c:d5:2d:2d:86:29:fa:bc:95:b0:2a:
         38:cf:8c:0e:a2:7d:05:26:c6:e2:47:91:2f:49:a6:8a:e7:f2:
         5a:b8:ed:a1:9c:6e:13:09:03:54:11:c3:f0:73:06:28:3d:de:
         be:c4:75:67:e5:e3:f7:93:99:35:a5:c5:af:c6:91:9d:a8:7d:
         af:78:a1:bf:c0:69:77:3a:a5:dd:5a:b5:f2:93:b1:d8:bb:76:
         14:9e:f2:d0:96:8b:da:4f:5b:d8:bc:c8:17:64:86:87:1f:62:
         4f:b5:53:95:81:55:a8:97:89:da:06:82:84:c2:08:90:45:dd:
         8d:69:a5:0d:c7:09:86:ee:88:6b:18:2d:8f:8d:f7:a0:33:e5:
         48:7f:9b:35:00:7c:9b:fe:d9:38:8b:4d:7a:a5:33:a5:a1:d1:
         31:9a:0c:da:03:6e:a3:f1:f9:55:6b:c2:eb:cd:3c:7b:62:f5:
         6f:37:b4:21:46:9f:ba:49:e1:fb:d6:e9:8b:3b:29:e8:00:8c:
         53:ee:24:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:56 2025 by rpki-client on console.sobornost.net