Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
File:                     B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json)
Hash identifier:          yjlN8C3NpOuzpcl89lITGjnrqYwtnQgGfukOUO3kd18=
Subject key identifier:   39:4B:68:24:8B:1D:DD:87:88:30:7F:26:2D:C5:0F:69:ED:A8:26:38
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Certificate issuer:       /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial:       08B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
Manifest number:          089C
Signing time:             Sat 26 Apr 2025 20:20:46 +0000
Manifest this update:     Sat 26 Apr 2025 20:20:45 +0000
Manifest next update:     Sat 03 May 2025 20:20:45 +0000
Files and hashes:         1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: TFJzdi4mXo4pjp06rGXE2IJkYzaYoh5zCGfXeeQfTx8=)
                          2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: Rbebv7a/3bjYuOYYlHIXr662xadEzX5etaY1VAtT19Q=)
                          3: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: unM5ewA/QOJvINE5uAU/tFjaV4piAYCJJAvmIWLeMb8=)
                          4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 2TPeWUxi8y2dJKsuFTVthNuMYrZypRCJy1Y/CFzYdHQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
                          rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228 (0x8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
        Validity
            Not Before: Apr 26 20:20:45 2025 GMT
            Not After : May  3 20:20:45 2025 GMT
        Subject: CN=680d401d-782b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:eb:11:85:25:fb:ea:4d:67:89:4f:dd:c4:
                    02:7f:62:1a:f8:01:0c:2d:f5:40:c6:e6:4d:4e:9f:
                    0b:11:bb:26:94:38:dd:89:ef:eb:f1:21:cf:ab:33:
                    c9:e9:ae:1b:d8:8d:0f:75:4f:dd:f9:37:69:d0:bb:
                    ee:b9:b4:93:3e:ce:c2:ec:80:31:84:c0:ba:8d:5e:
                    45:69:cd:f1:d2:d0:60:21:b8:c6:53:f7:fb:8b:9c:
                    83:50:36:46:af:c3:b5:b7:47:09:79:ee:af:2e:84:
                    74:c5:f7:6f:5a:be:2e:2c:d7:b6:79:c6:1c:f0:69:
                    3d:e8:1c:2f:6d:e4:dc:79:da:a7:d0:dd:94:52:1b:
                    38:46:0c:fd:d3:ef:35:38:45:5a:5d:5a:5f:46:a9:
                    71:f8:fa:ec:d5:bb:83:ec:59:ef:4a:4c:11:ee:55:
                    4f:f6:4c:1e:dd:ad:72:3c:f8:2f:88:ad:55:e5:7c:
                    1c:43:a7:de:91:4c:da:0d:d0:ac:55:4b:e2:94:3f:
                    63:c0:26:1e:cb:f3:31:67:20:41:fb:76:c0:5a:41:
                    59:d0:9f:cf:d2:fb:04:e9:ac:f1:e8:1c:b9:94:59:
                    64:54:b2:8b:2b:99:fc:ab:ea:37:47:4f:a3:37:44:
                    5b:22:2f:36:09:0d:d4:6b:35:30:52:4f:73:d8:8b:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:68:24:8B:1D:DD:87:88:30:7F:26:2D:C5:0F:69:ED:A8:26:38
            X509v3 Authority Key Identifier:
                keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:bc:eb:2d:db:f5:57:49:a2:0f:05:01:b5:ea:ea:24:0d:
         db:19:35:3b:e5:95:cd:e6:83:5c:7b:a2:8a:ef:4f:eb:fd:e2:
         c7:40:18:f0:25:8d:da:a6:a9:71:e0:28:54:c5:18:2e:84:5c:
         60:f1:eb:49:00:c9:71:f6:f4:3f:a0:e2:2e:69:2e:a3:3a:0f:
         60:ed:9e:ba:52:a6:f2:55:1b:2c:b6:b3:dc:d2:3a:62:dd:64:
         9f:8b:44:c9:6c:3b:ba:bb:e3:cf:58:db:3b:ad:85:d8:9c:e7:
         54:18:f3:f9:9e:4e:c2:75:c8:fa:44:03:16:d9:a6:2e:13:72:
         71:da:58:dd:08:82:ee:6d:ad:4e:46:64:bb:4b:a3:e7:0e:16:
         f0:64:bf:31:00:bb:55:99:76:bc:d4:c8:ee:cf:df:a7:3a:5c:
         26:f5:d0:d0:79:de:47:99:10:0a:84:c7:de:e6:e9:c3:91:31:
         79:59:a6:b6:fa:31:8b:1d:fd:b0:62:bc:21:1b:e9:2f:7a:39:
         30:be:e7:00:ea:85:7a:ac:07:38:64:c4:2a:6e:96:cf:af:0a:
         05:c1:96:65:6a:28:21:d6:72:30:dc:90:e8:aa:76:62:a6:fc:
         f1:20:90:36:f3:58:85:d6:58:aa:59:f7:df:e4:d3:ef:b7:92:
         4f:3b:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net