Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          qWdVBgD7vWXYMf0Dq7VcrA1Ra0cLvREPLrXNWFe2M7s=
Subject key identifier:   0B:B6:AF:20:8C:1D:2F:EC:D6:81:98:5C:8C:9C:9D:8A:E2:31:5C:30
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          68
Signing time:             Sun 27 Apr 2025 05:46:21 +0000
Manifest this update:     Sun 27 Apr 2025 05:46:21 +0000
Manifest next update:     Sun 04 May 2025 05:46:21 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: sH5DshUV7RRGfOJFhM491oRtT/q0vqtBk5F8xNZsHTQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Apr 27 05:46:21 2025 GMT
            Not After : May  4 05:46:21 2025 GMT
        Subject: CN=680dc4ad-ee26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:02:50:45:02:ce:6a:4d:aa:b1:f1:d3:c1:
                    98:26:ed:7c:4e:4a:b8:dc:41:44:b8:6d:7a:44:28:
                    3f:43:c2:50:ad:fe:8f:9d:a9:b7:db:91:55:ae:1d:
                    7e:04:94:f4:eb:db:93:f5:11:1d:35:97:6e:fb:25:
                    7a:64:3d:c5:63:9c:33:09:82:06:74:fb:04:d6:e5:
                    12:2a:9a:0e:df:de:24:c8:5f:f9:15:a3:4e:dd:f3:
                    08:9a:c4:08:ab:04:3d:20:c2:7f:25:7e:75:e2:09:
                    bf:38:ae:37:7e:0e:47:fe:0b:b1:47:bc:26:53:45:
                    c7:bf:b8:21:86:4c:a1:17:a9:1e:80:1a:c9:14:c1:
                    7c:8b:e5:50:56:81:f5:88:a4:72:ee:44:f8:33:73:
                    5f:3d:7a:e7:2d:87:a7:68:a4:69:99:8d:cd:5b:ae:
                    b3:d0:5e:90:92:c3:ec:48:30:a9:19:fa:3a:99:ef:
                    1c:60:62:07:9f:c6:16:ec:39:3e:d2:08:72:43:44:
                    40:46:50:e6:5b:9d:f4:78:ce:ce:c3:09:de:44:99:
                    9d:d9:6c:0a:dd:3b:d2:5d:4a:ab:cd:5f:9a:52:34:
                    b3:15:a5:0a:90:2f:4e:b4:59:8a:f8:a3:eb:40:70:
                    6c:0c:aa:bb:b3:dd:6f:c7:8c:69:a5:8b:da:d4:e5:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B6:AF:20:8C:1D:2F:EC:D6:81:98:5C:8C:9C:9D:8A:E2:31:5C:30
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:33:2d:dc:26:48:4d:2c:88:93:45:1c:bf:8a:ad:56:9f:
         b5:4e:f2:12:90:56:8c:25:5d:f6:1a:aa:57:40:bb:87:14:31:
         65:92:9b:77:d3:ff:77:d2:a6:2a:03:73:41:5e:69:6c:14:09:
         3e:e8:4f:18:f8:f3:c6:73:9e:69:b1:20:b2:4b:cf:64:7c:f8:
         a2:f3:2e:68:5d:83:98:fe:cd:3f:71:55:87:6e:4a:f7:f5:b4:
         36:c8:f8:b8:00:d0:fb:dc:ba:11:be:59:05:81:49:98:15:cf:
         7d:ca:d4:fa:0e:9c:55:36:1b:43:de:40:7d:64:71:d0:52:13:
         47:c5:24:24:c1:15:66:31:66:99:44:58:08:42:c9:7b:71:97:
         78:f7:03:89:ef:bf:47:b7:f0:d4:24:54:20:13:81:d1:50:17:
         c2:45:84:35:3c:38:a7:22:38:01:6d:46:e9:34:5c:a5:5b:a8:
         f2:ff:fb:61:34:2c:a5:0f:f2:bc:3a:1c:09:d6:b7:c4:80:07:
         a4:0e:87:7e:0a:20:79:13:fc:73:42:41:52:83:39:f7:37:ab:
         30:ce:d6:db:0d:00:25:42:27:30:60:21:cd:86:ac:ad:41:4f:
         07:b2:18:a4:93:7d:3c:50:8c:bc:0e:80:08:7c:e0:34:45:4b:
         84:7a:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net