Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File:                     MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier:          U1mBkYtFOyt8newMDH5xZyn+kSpj6fZtqmftIJY2Jjs=
Subject key identifier:   A3:22:12:5C:79:E4:2F:1F:4B:70:95:9C:F0:71:82:02:01:BD:FB:60
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number:          067A
Signing time:             Sat 26 Apr 2025 22:03:15 +0000
Manifest this update:     Sat 26 Apr 2025 22:03:15 +0000
Manifest next update:     Sat 03 May 2025 22:03:15 +0000
Files and hashes:         1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: CokpATCU0xAMwdc/vdoxjTY50z+ENsERhaMcv6Pb+iM=)
                          2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Kmy121XzUGh8ewwF3KZSeQZhERtI3ipUIuwTYhIH4NM=)
                          3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: h+i7d4l1n6vcg20ldi1OzleaWsx0vPPuUjmVScWRXXI=)
                          4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: PifTuQf9ETmHsQRTOYGkROLV+pof9sWcOvRDOEXvkJE=)
                          5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9n7ji7mRbxqw5LbmJKOtKEWm7L5OaLEva61LWM3vFFM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Apr 26 22:03:15 2025 GMT
            Not After : May  3 22:03:15 2025 GMT
        Subject: CN=680d5823-5d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:a7:01:b6:1e:fb:fb:01:d4:14:09:ba:84:
                    8e:15:7d:15:ce:d3:62:31:ac:12:72:dc:df:47:6f:
                    9b:ca:83:ef:d9:57:0b:b4:10:2f:49:b3:62:dd:22:
                    23:10:06:e6:78:81:1d:43:f6:44:e2:be:7a:5f:20:
                    8c:b9:ee:0c:ed:55:5b:44:5c:8d:b9:6b:41:8e:b2:
                    95:02:43:70:35:15:55:13:f7:d0:ba:04:9f:c8:5e:
                    d5:10:f3:af:64:3a:22:a7:20:f3:5e:e7:ed:cc:0e:
                    b3:6e:a1:46:02:58:c5:23:09:0a:de:40:88:0c:c5:
                    96:4f:2e:3e:9d:57:37:ce:98:6c:9a:a7:4a:54:c6:
                    14:7c:8a:d6:5c:81:67:60:3b:94:dc:11:b0:5f:18:
                    89:35:ac:67:9d:5d:62:12:df:e4:89:a6:86:9f:dd:
                    f7:b5:f5:c9:d7:01:7e:ab:70:38:b0:02:50:b9:bf:
                    67:2d:af:36:97:33:6e:a4:d5:77:70:32:08:12:fe:
                    29:98:4e:9a:cd:11:10:d4:16:f1:d0:37:9f:ec:47:
                    9a:3d:68:2a:17:a3:e3:e4:7d:1a:4e:12:7a:b5:54:
                    92:bd:82:0e:97:fe:9d:48:0b:83:e1:11:eb:d6:d4:
                    75:b5:59:ac:df:80:23:5a:f9:70:e1:ab:36:38:a5:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:12:5C:79:E4:2F:1F:4B:70:95:9C:F0:71:82:02:01:BD:FB:60
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:f7:96:76:98:f0:39:f5:7c:1d:a9:e9:9e:9a:eb:e4:77:
         97:c2:e2:af:76:2a:a5:c8:96:15:22:36:07:c4:1c:16:ee:52:
         1f:0f:39:9c:f0:40:13:ef:b6:33:4c:a2:b2:e1:9f:65:4b:95:
         82:47:0e:9a:62:cd:5b:67:5a:49:7d:df:aa:9a:d0:ed:23:f9:
         e9:07:70:83:6b:bd:40:a1:b3:bc:8d:8b:a7:3c:11:fb:dc:b9:
         4a:ea:19:02:25:63:d8:37:8a:22:36:41:44:b8:0e:06:38:f6:
         16:f1:d6:2f:6c:34:e5:40:29:5f:5a:db:5e:34:95:ec:f6:d8:
         12:36:3d:d3:d8:c8:fd:ef:75:93:c2:d2:00:0c:d5:75:5e:ea:
         b4:b7:51:24:62:2e:18:9c:be:8b:9a:a7:21:63:19:d3:a2:ea:
         f1:cb:7a:65:39:b1:b2:b0:2b:13:b9:01:81:a2:85:da:6d:87:
         c5:01:45:e2:61:10:1c:b9:0c:1b:c5:1b:ce:7e:f1:44:7d:0a:
         2f:6a:57:56:fb:6a:ad:9d:c7:94:19:cc:de:df:4e:af:44:11:
         da:82:40:30:9f:34:58:6b:8d:f5:78:24:3c:9b:d1:64:97:79:
         40:1c:e2:40:35:6a:02:33:38:23:77:42:d0:c8:49:3c:89:2f:
         bf:f2:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:04 2025 by rpki-client on console.sobornost.net