Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          XOZDafwnM/OQlKJN39wQJAetZ/a618Ve0WIXkuUty2Q=
Subject key identifier:   BB:DE:01:70:7B:29:9C:AE:E8:9F:6F:02:0B:E3:AA:06:4F:6D:EF:04
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       34F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          34BA
Signing time:             Mon 28 Apr 2025 14:47:27 +0000
Manifest this update:     Mon 28 Apr 2025 14:47:27 +0000
Manifest next update:     Mon 05 May 2025 14:47:27 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: 0PjPCIRi41HPD71VZrWOrFs2VZqVqfWI/fpEHcyKPEs=)
                          2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=)
                          3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=)
                          4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=)
                          5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13560 (0x34f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Apr 28 14:47:27 2025 GMT
            Not After : May  5 14:47:27 2025 GMT
        Subject: CN=680f94ff-dcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:77:b8:ba:37:10:6f:08:a2:ce:a8:39:ac:
                    d1:37:dc:ff:64:e6:0a:1e:da:07:12:1d:52:c5:41:
                    2d:2e:b2:7f:29:79:c5:a4:d5:61:cf:ff:9e:71:76:
                    0f:cc:f5:f2:c3:27:ae:26:b8:c4:a3:04:19:9c:cf:
                    03:4b:3d:16:8e:29:bf:b7:68:d9:5c:71:eb:f5:ac:
                    9a:69:0f:73:6d:df:2e:f4:35:24:4d:cc:74:f9:8d:
                    0b:01:54:ac:8d:60:40:d1:3e:c2:36:17:1b:56:a8:
                    05:78:46:d7:17:2c:60:5e:87:e8:95:93:16:68:d4:
                    81:1a:2f:9c:ab:eb:fd:e3:fd:11:8b:08:e5:d5:df:
                    f6:8e:41:99:ed:b4:66:72:3b:fc:19:1d:8d:b0:75:
                    1b:64:8f:e7:4f:9c:10:9f:50:7c:bb:33:b6:11:2e:
                    11:18:ef:88:d8:31:50:6c:7c:69:c0:8b:dd:be:74:
                    ed:26:df:68:9c:d6:69:ff:e1:37:fe:a8:04:93:b3:
                    3c:a1:fb:a0:5b:a9:5d:03:ae:c0:86:59:aa:2c:d6:
                    fa:b7:10:31:70:87:b3:d3:c0:5a:58:e6:ca:16:09:
                    32:55:d0:25:e3:c2:b0:ab:b8:68:69:da:8c:95:38:
                    a1:1c:91:8e:13:37:7c:2f:c5:36:19:7f:c2:dc:89:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DE:01:70:7B:29:9C:AE:E8:9F:6F:02:0B:E3:AA:06:4F:6D:EF:04
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:46:cb:23:52:0a:d6:95:63:39:2a:5a:95:69:9a:1b:e3:42:
         9f:58:ef:d8:bd:24:8a:6c:36:f9:c2:63:58:b6:bc:4c:bd:6c:
         40:e6:3a:07:74:19:41:b5:40:cb:2e:84:f3:fd:a6:e8:3b:51:
         f9:e0:ef:a6:ff:ba:13:d4:93:da:4e:2e:25:d5:de:52:68:b9:
         91:e0:b0:75:f4:1b:9e:6c:16:bc:bb:00:1c:cb:a4:8c:73:cb:
         4e:c7:76:d8:df:0a:ce:ad:00:ae:3f:65:92:7b:7c:46:8f:e0:
         f1:36:7a:97:ff:e0:31:a2:28:f1:3c:99:be:d1:d9:28:cb:ab:
         ae:a9:bd:eb:c3:67:25:7f:e8:3e:b4:05:5b:a9:c8:6f:24:8f:
         16:60:70:2d:38:d2:7f:0f:a4:7f:dd:ff:f3:de:67:3d:b3:67:
         5b:bb:10:be:76:54:c7:98:ee:43:4a:4b:77:6d:f1:04:b2:94:
         1b:f5:5f:ad:d3:c4:3a:d6:f2:9b:da:5f:cb:f8:e1:74:3a:83:
         06:ba:e5:d0:7a:52:82:10:2b:98:e1:bd:91:19:01:f7:50:2c:
         d3:97:20:95:58:50:52:0e:7f:b3:11:a6:aa:2f:45:3d:3b:d7:
         bd:dd:15:b7:99:bd:50:72:66:39:94:57:f5:71:3f:b4:ce:37:
         46:ac:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:08 2025 by rpki-client on console.sobornost.net