Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
File:                     OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json)
Hash identifier:          7bdOIazxKexG8KBohvX4MQ80m7t94RQWSXcyMTscw4c=
Subject key identifier:   AB:AE:DC:EE:48:BF:35:BA:1F:80:BB:BD:B6:78:9B:7E:DB:EC:BF:D3
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Certificate issuer:       /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
Manifest number:          014D
Signing time:             Sun 27 Apr 2025 03:18:08 +0000
Manifest this update:     Sun 27 Apr 2025 03:18:08 +0000
Manifest next update:     Sun 04 May 2025 03:18:08 +0000
Files and hashes:         1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: Jt0SmjpeQ5e/rh1em0ULpdqnYBXCaYiV+MzV0voEK6M=)
                          2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: sWStjNphAJOS4ge/ZJtqF5XrPnq1MWPX1eiC04Kwz6A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
                          rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
        Validity
            Not Before: Apr 27 03:18:08 2025 GMT
            Not After : May  4 03:18:08 2025 GMT
        Subject: CN=680da1f0-4ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:51:63:1d:9e:56:8c:02:83:61:84:d9:00:
                    9e:ba:30:3d:a6:95:5c:ea:e4:45:53:4f:51:18:95:
                    43:bf:90:78:22:fd:c5:b4:99:f9:a0:ab:7e:aa:77:
                    f5:45:9b:fa:5f:a1:81:f4:39:81:b4:10:fa:61:4b:
                    3b:60:7d:67:e5:03:70:56:c0:df:53:a4:d3:40:8b:
                    26:a8:29:b3:3c:1d:86:ec:33:8e:bb:4b:ff:6d:ff:
                    04:61:21:14:c0:ea:d2:d5:1e:00:ce:a4:86:16:87:
                    b3:e9:f8:91:25:89:e8:ea:1e:d9:13:03:74:19:e4:
                    90:c2:a6:0b:cf:56:c3:a3:67:49:20:8f:50:cc:14:
                    1a:2c:89:b6:6d:5b:c8:1e:1e:e4:25:29:e1:3b:70:
                    7f:f4:69:fa:b5:36:1c:bf:07:c4:34:6b:db:a1:89:
                    ef:f6:2b:b3:ce:34:e8:d6:75:18:3c:39:21:1a:3e:
                    68:2f:66:81:aa:db:21:74:58:34:8b:67:c0:f2:d4:
                    95:3c:b3:aa:09:ef:40:27:ac:6c:8a:b8:a5:9a:eb:
                    55:a3:2a:9b:ff:55:9d:79:84:52:40:ea:58:28:28:
                    f9:bb:82:fd:55:e8:bd:50:27:e7:06:9e:c0:1c:5f:
                    05:36:27:9d:52:65:d5:1d:01:a5:e4:3b:70:58:6e:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AE:DC:EE:48:BF:35:BA:1F:80:BB:BD:B6:78:9B:7E:DB:EC:BF:D3
            X509v3 Authority Key Identifier:
                keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:78:d7:af:b5:b3:94:91:e3:0e:c6:27:cd:8d:98:a2:d3:
         e4:ca:31:c1:07:74:67:fa:e9:cb:be:78:3e:e8:5b:ca:72:57:
         ff:25:14:27:1d:fb:9f:5a:dd:3d:90:42:b1:29:e9:e9:92:56:
         94:b8:0d:40:4e:56:df:ee:e3:23:70:01:2f:67:e0:cd:f6:c7:
         f7:38:50:24:04:0f:6c:04:61:9f:bf:ee:a8:c1:98:1f:44:ec:
         12:2b:9f:f9:4b:2c:4a:fa:ab:dc:c8:56:7c:5d:bf:06:2e:f5:
         69:c0:6d:ed:73:d6:76:e3:c5:1b:82:0f:43:d0:02:07:5a:95:
         ee:20:70:5b:9c:3e:90:85:5c:53:ac:0c:ff:24:c1:9f:a8:f0:
         b8:28:f8:ed:94:b4:52:e2:4b:4f:3c:2c:45:63:99:21:c1:84:
         4b:b2:0c:52:c0:8e:88:5e:8e:f0:c1:f6:8b:38:85:c9:73:75:
         74:73:df:1b:fd:16:0b:37:7a:64:a3:cd:92:23:a2:ac:52:75:
         db:69:8f:6c:40:a7:f5:ea:56:aa:c1:77:1e:c9:38:81:8d:ad:
         46:ff:ff:29:98:7a:d2:3c:a0:07:e8:2b:85:80:c3:f8:6a:ee:
         e6:e9:8d:56:2e:3b:ad:d4:a0:82:4a:4b:c0:ce:e5:4e:8b:60:
         b8:aa:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:57 2025 by rpki-client on console.sobornost.net