Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File:                     UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier:          ckRvrbmVO7LqEnF3Fphdjm337caot082wXYIIlGVi6w=
Subject key identifier:   B2:E2:28:31:D8:3F:FE:F3:10:44:82:66:D3:08:BA:3E:A1:E3:D3:84
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer:       /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial:       1916
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number:          1916
Signing time:             Thu 24 Apr 2025 16:26:12 +0000
Manifest this update:     Thu 24 Apr 2025 16:26:11 +0000
Manifest next update:     Thu 01 May 2025 16:26:11 +0000
Files and hashes:         1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: ZB1EG5ZgwqtpJv2MKwr/JXy44+8iNTQPUzNA2qx2J6k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6422 (0x1916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
        Validity
            Not Before: Apr 24 16:26:11 2025 GMT
            Not After : May  1 16:26:11 2025 GMT
        Subject: CN=680a6624-6e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:af:fe:88:82:26:53:7c:26:aa:f7:a3:9c:
                    61:2f:3f:1f:af:c3:02:78:b3:c8:4e:9f:07:06:b9:
                    8f:ce:3b:c7:10:36:dd:14:e1:b1:6c:bb:1b:2f:24:
                    93:77:86:53:d2:2f:b2:27:65:49:70:3c:cb:77:13:
                    31:81:7f:15:19:8c:fe:d4:13:43:4d:ad:8c:49:b7:
                    d3:d8:d5:1f:9c:25:ff:1e:cb:9a:38:a0:25:cb:1a:
                    41:b2:75:e5:81:39:d2:aa:2f:0d:07:e2:d8:af:a2:
                    d8:de:8e:74:59:56:f4:1a:bc:e4:c6:b8:1a:cb:7d:
                    6e:d9:4c:69:b9:f3:4f:d3:99:68:3b:38:5a:4f:1e:
                    68:eb:61:24:7c:ac:ac:51:ee:83:e3:80:e3:82:e3:
                    06:45:61:87:48:9e:a5:49:73:12:6c:e0:1e:9a:2a:
                    5f:01:7e:16:bd:58:d6:8e:73:eb:b5:0e:42:ac:9d:
                    33:be:f2:7f:5e:a4:1f:20:19:f7:8b:38:a0:3f:bc:
                    c3:34:fe:23:a9:d1:86:51:57:43:44:99:1c:a7:bd:
                    fc:9d:97:f8:80:4a:c4:1b:4c:ca:f9:59:6a:dd:03:
                    ef:4f:e0:25:a8:4c:f9:2e:ea:c9:4f:ae:82:de:02:
                    5c:cc:49:2c:96:5e:c0:40:21:7d:d3:7d:1d:33:cd:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E2:28:31:D8:3F:FE:F3:10:44:82:66:D3:08:BA:3E:A1:E3:D3:84
            X509v3 Authority Key Identifier:
                keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7e:65:f5:22:2e:00:6e:69:0d:5b:06:8b:7f:60:1f:41:e3:
         3d:7f:bb:19:28:3a:b2:e8:90:f6:e2:d9:7c:20:e4:e7:05:64:
         3d:ad:e5:5b:88:5b:9a:aa:ba:59:d9:13:0a:29:9f:8b:46:c1:
         d4:b3:63:b4:12:fa:31:bc:ae:a0:14:98:84:ce:33:02:e4:db:
         b0:d8:08:31:f0:dc:5b:2f:2e:2c:32:2c:9c:92:df:6b:cd:6a:
         50:55:d8:bf:d6:f5:1f:44:0e:e9:e8:b6:66:cb:72:1d:b1:42:
         cd:3c:eb:f7:b5:05:cc:11:8b:40:7c:ca:b1:e8:22:5c:d9:e2:
         74:48:d9:31:3a:6a:f5:43:a5:06:0c:b9:be:fc:55:b9:5a:65:
         d0:8f:29:fe:73:c5:a4:98:a4:da:49:0f:8f:07:4e:db:26:68:
         e9:77:50:79:3e:a8:56:c4:dd:f1:6f:cc:18:79:98:81:89:1d:
         af:d9:6a:0a:5f:e3:5e:23:29:f4:aa:b1:e6:4d:3a:61:29:5a:
         76:f0:04:c6:89:98:2f:b6:29:bb:0b:2c:77:2a:91:b0:b3:36:
         bb:e1:07:e2:af:df:24:a3:a7:c2:82:9a:00:ad:a5:53:31:6a:
         60:c5:c5:83:01:7a:06:e9:89:05:d6:a2:7d:72:40:57:d5:e0:
         9f:ff:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:08:25 2025 by rpki-client on console.sobornost.net