Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File:                     xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier:          QhSDMVWeotEDNVga2ZJbu0mT0Rhwa1Nq4Pl85xSxgVs=
Subject key identifier:   63:D9:F8:A0:DE:CC:1A:28:DF:E6:BB:5C:3A:BD:AE:51:0A:B0:78:87
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       0731
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number:          070A
Signing time:             Sat 26 Apr 2025 21:37:08 +0000
Manifest this update:     Sat 26 Apr 2025 21:37:08 +0000
Manifest next update:     Sat 03 May 2025 21:37:08 +0000
Files and hashes:         1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: Lifx32jPDiZ87wICdWNY9txkYWwU88Mj96joEWA1he0=)
                          2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=)
                          3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=)
                          4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=)
                          5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Apr 26 21:37:08 2025 GMT
            Not After : May  3 21:37:08 2025 GMT
        Subject: CN=680d5204-52ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:11:6f:45:f8:87:5a:a3:79:62:cd:5d:3c:
                    a8:7c:c5:bc:04:21:21:aa:bd:fb:d1:07:35:ac:5b:
                    ff:98:20:4a:03:79:24:83:a6:1d:56:9d:02:3a:7a:
                    60:4c:37:b5:8f:79:e2:16:de:7d:88:91:f7:9b:8c:
                    d4:cb:75:97:73:bc:6e:4b:76:74:ad:97:a7:8e:52:
                    d3:a7:11:9d:ec:5d:58:9a:fa:a5:3f:a4:85:5b:cb:
                    36:15:c8:2a:65:3e:e6:2c:7f:9c:e2:69:11:d4:89:
                    e9:4a:52:3e:1f:87:80:5f:a4:ac:1f:a5:95:ed:dd:
                    62:38:a8:b1:04:b9:27:2a:27:77:6f:98:ed:43:77:
                    1b:26:b6:eb:70:1e:16:76:be:9f:6b:65:0f:c9:38:
                    16:29:d7:92:5c:84:73:19:ac:f0:05:83:a5:da:d8:
                    4b:65:ba:0b:c8:d3:71:b3:32:19:dc:d4:c4:a2:d3:
                    89:1b:ab:b7:10:70:22:1a:8e:44:b3:2f:0d:45:e5:
                    25:69:d7:a5:e8:26:cf:a3:60:40:80:d1:71:a3:7d:
                    65:0e:54:54:43:9d:fa:c9:4b:26:a8:90:8d:8f:a0:
                    f1:c2:79:2a:90:a0:6c:b4:d4:3a:14:5e:33:80:93:
                    88:c5:15:02:aa:cd:06:60:9b:94:a0:a2:47:cd:5e:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D9:F8:A0:DE:CC:1A:28:DF:E6:BB:5C:3A:BD:AE:51:0A:B0:78:87
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:3a:f0:7b:d5:76:cb:4b:9f:d4:d6:ef:1a:99:ae:c1:42:
         48:7a:c8:0a:2e:b9:f2:3d:d2:bb:eb:87:e0:bf:be:c8:79:b5:
         3b:fd:f4:d0:7a:c9:ff:f1:3c:7b:55:0e:9d:7e:8b:0f:63:a7:
         5d:ff:8c:54:d6:98:a0:8a:59:6d:c1:11:aa:5b:38:41:8e:81:
         e9:6e:2a:6c:7f:ec:89:4a:c6:88:d8:5b:e6:b9:67:4d:fa:17:
         64:6e:2c:e2:73:1d:0f:f4:fe:3c:98:03:a6:c7:56:03:21:0b:
         92:55:54:bd:49:8f:15:df:02:17:d1:c3:2b:75:96:cd:e8:3a:
         2a:05:f4:78:d4:1b:e1:5f:cc:91:60:4d:00:b6:f5:a7:d2:e4:
         08:9c:78:2e:54:f4:61:48:8e:78:2f:88:f8:18:46:c4:11:57:
         82:cb:40:59:93:ad:24:01:bf:fa:fe:0d:6e:11:15:9b:c2:c6:
         fe:3f:bf:5a:41:5f:ec:12:1a:04:5b:6d:cb:4f:4d:2b:0a:39:
         40:8a:a0:e4:d9:b8:87:24:d1:e6:fd:7b:7b:3f:c9:7a:51:7a:
         0a:ab:c3:d2:a2:d0:0d:1f:65:24:d0:2b:cf:1a:f3:53:54:cf:
         af:26:78:4d:83:40:ef:1f:92:eb:91:01:47:c9:26:2a:63:7d:
         68:23:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net