Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
File:                     yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json)
Hash identifier:          0G7iG9GCXZ9UDJh1UXauHRk080zh+Yzjfsoy5NaaU5k=
Subject key identifier:   B1:4D:C5:4B:DD:5A:D8:E7:C5:06:05:51:E8:F5:1E:B8:AE:A3:CD:5B
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Certificate issuer:       /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
Manifest number:          4C
Signing time:             Sun 27 Apr 2025 06:11:54 +0000
Manifest this update:     Sun 27 Apr 2025 06:11:54 +0000
Manifest next update:     Sun 04 May 2025 06:11:54 +0000
Files and hashes:         1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: HnieaO3w7on82eXtaiLiCkr+h4LhYXEd3OYsnTIt1cs=)
                          2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
        Validity
            Not Before: Apr 27 06:11:54 2025 GMT
            Not After : May  4 06:11:54 2025 GMT
        Subject: CN=680dcaaa-9599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:9c:d6:83:fc:49:59:e3:0d:fc:a8:0a:83:
                    96:e6:5d:16:11:bb:fc:d6:fd:22:be:95:7e:a1:82:
                    f1:84:a4:40:fe:01:0b:12:da:f3:78:59:17:a1:07:
                    53:7a:2f:f1:be:1c:3f:cd:59:36:0c:d0:b0:e2:d4:
                    82:c0:be:ed:ee:41:ff:97:76:d5:3e:8c:22:79:c5:
                    90:1f:36:93:29:d1:94:7c:b6:f5:bc:db:47:78:e2:
                    7f:1e:f6:65:7a:fa:0a:d6:03:9f:47:d6:38:02:38:
                    df:8b:ba:06:87:d9:6b:dc:31:68:6a:1f:a4:9e:cf:
                    71:78:5b:a7:59:c9:2a:fa:74:f5:64:e6:64:34:92:
                    0c:a3:37:dc:48:d0:22:47:31:05:d5:6f:e0:78:5a:
                    67:b2:9b:bf:82:69:71:59:52:08:86:29:df:0b:86:
                    04:2f:f2:37:8b:71:16:a6:88:c8:a3:56:65:39:a8:
                    b0:27:e4:6c:cd:fe:a2:5b:88:85:ea:2b:80:c4:bb:
                    06:30:74:30:45:62:c1:d6:f6:d0:56:a6:e2:b7:e4:
                    10:a4:8b:2e:81:2a:bb:1d:6b:c1:b0:bd:28:22:3b:
                    c6:53:90:c7:50:04:fe:54:dd:a9:db:de:aa:6e:b1:
                    4e:08:d9:35:b2:a6:45:d1:6d:43:e0:d8:e4:81:dd:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4D:C5:4B:DD:5A:D8:E7:C5:06:05:51:E8:F5:1E:B8:AE:A3:CD:5B
            X509v3 Authority Key Identifier:
                keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:6f:07:d6:59:c0:48:c5:62:7a:b5:71:1f:50:87:ec:c8:
         7f:de:98:d4:19:3b:a8:6b:e8:90:fe:be:41:b9:dd:5e:a8:df:
         b7:0e:58:9e:64:a2:ea:7a:8b:40:dd:28:4d:15:03:36:13:f8:
         79:9d:c7:f8:fe:4f:88:78:33:5b:f2:90:06:cc:29:1e:45:cc:
         1a:7b:7c:21:07:c8:05:02:20:ae:99:ad:5a:32:3f:1d:2f:cd:
         b6:5a:ea:9c:53:69:6b:55:67:8e:7a:29:40:6e:b3:53:6f:69:
         2c:47:11:32:ba:16:37:47:12:f3:3e:e9:e9:48:db:1f:2b:ce:
         5a:41:bd:00:c8:5e:07:98:ca:35:9c:e3:48:e9:65:2f:55:36:
         d1:20:b7:cb:f3:4b:f2:df:39:bc:34:51:90:86:3b:99:42:56:
         3d:5b:9b:51:f5:a6:9d:c5:a6:0c:ef:d6:75:b1:33:7f:31:83:
         a4:46:70:cb:86:3f:a9:68:32:1b:91:b4:e3:1c:35:c1:b6:87:
         80:08:8d:56:4f:f8:22:08:ed:2f:3d:d7:1f:09:20:4f:6a:56:
         c6:73:96:c5:a8:9d:7d:a1:cf:62:5f:b7:4c:3f:0d:ac:ff:e6:
         80:57:2c:67:a3:0d:17:22:25:5c:50:37:06:9b:99:2e:df:f0:
         0c:77:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net