Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
File:                     75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json)
Hash identifier:          aZvIqwM/LSM8eBivFl44abk4rrqQyH3G4sVG28Bw6MQ=
Subject key identifier:   D5:34:23:06:F2:35:9C:DE:8A:61:35:44:2E:6C:83:C7:A9:43:1C:4F
Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
Certificate issuer:       /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
Manifest number:          24
Signing time:             Sun 27 Apr 2025 06:43:08 +0000
Manifest this update:     Sun 27 Apr 2025 06:43:07 +0000
Manifest next update:     Sun 04 May 2025 06:43:07 +0000
Files and hashes:         1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: 4GY/HKXmeobJQmdSK39F9fWUB5WCiKG5+eZpahD28tA=)
                          2: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
                          rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
        Validity
            Not Before: Apr 27 06:43:07 2025 GMT
            Not After : May  4 06:43:07 2025 GMT
        Subject: CN=680dd1fb-fca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:3b:ac:a9:e3:ba:64:43:22:90:7a:ca:f5:
                    9e:0d:d3:50:ff:2e:f1:de:42:ed:62:bb:a3:60:e4:
                    59:77:75:cf:17:a5:dc:52:0d:bf:eb:e3:13:66:5d:
                    00:fb:20:ab:c5:69:0f:e0:9b:b1:12:3a:a1:65:2e:
                    57:08:16:42:75:7b:ed:84:33:ab:81:0c:8f:cb:59:
                    65:fd:83:46:74:89:40:79:7f:78:d6:08:25:ff:cc:
                    73:6b:30:23:c8:c6:18:5b:99:55:de:b6:c2:ed:fb:
                    ba:b9:f0:c4:60:93:b9:46:c8:4b:37:4f:93:8e:5f:
                    27:33:5e:a2:67:fb:f6:b8:8c:95:15:45:e6:a0:91:
                    3b:05:04:fd:b7:59:df:9f:33:13:69:c1:94:15:30:
                    59:8b:6c:7e:11:eb:b8:b5:38:e9:25:94:95:9a:c9:
                    ee:39:93:42:ec:62:45:59:42:06:25:c9:af:eb:8a:
                    4d:75:e3:2e:6b:8f:78:76:62:9d:f7:b0:4d:b4:77:
                    3c:30:0c:dc:98:9f:44:40:39:fb:20:6d:9a:87:c8:
                    9e:3a:01:ac:30:fe:77:84:8b:30:7b:0d:17:ec:33:
                    df:7b:cb:68:5b:51:9b:1e:fd:05:c6:81:e0:e4:fd:
                    b0:71:75:b7:2e:c3:ce:61:16:6c:b5:ce:26:1f:4c:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:34:23:06:F2:35:9C:DE:8A:61:35:44:2E:6C:83:C7:A9:43:1C:4F
            X509v3 Authority Key Identifier:
                keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:11:31:f9:53:69:14:f7:9b:cf:c5:fd:ee:15:a7:e8:ba:25:
         e7:fe:9a:75:4a:36:d0:10:6f:41:b3:4a:f7:a9:51:24:a0:8f:
         8d:85:d5:20:93:49:68:dc:d4:3d:25:8f:96:fb:38:d4:65:1d:
         ed:74:46:5d:e4:62:98:74:35:f0:c4:e5:b6:08:a8:0c:54:59:
         13:c5:a9:98:27:2a:31:1c:bc:86:04:6e:a1:e9:1c:27:0b:27:
         f1:73:17:56:9d:59:f8:57:35:79:cd:b7:5e:6a:cf:08:b7:98:
         9a:59:47:6c:3e:77:e9:67:46:14:67:cb:90:52:6c:4b:10:ff:
         30:4d:42:16:ae:d7:7f:af:e6:6a:15:7f:82:fa:d2:53:c7:6f:
         3b:eb:c4:8c:6b:b2:79:ee:94:ef:cf:d7:c3:5a:22:4f:92:98:
         5e:23:75:df:95:18:cd:6d:0d:36:d3:96:d7:ab:50:39:d9:79:
         ae:25:55:a3:62:2c:48:82:4c:d3:a0:a4:21:5c:98:32:89:b8:
         66:a2:a1:95:2d:c4:99:90:21:58:f2:17:fe:49:d7:5d:22:ef:
         29:8f:f1:18:27:bf:4c:c0:bc:31:98:0e:22:37:f6:1b:de:96:
         b1:1a:5d:a6:85:98:52:eb:67:39:07:98:a0:18:c6:46:e4:41:
         a9:5b:7a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net