Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File:                     Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier:          0f47J1xCrOsQCRrmv/lzgusNwHz5pGoJTIg+za4baVo=
Subject key identifier:   FA:83:3B:4B:59:DB:6E:96:9A:50:04:20:DF:8E:E1:BC:19:1E:5C:0D
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       34F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number:          34B7
Signing time:             Mon 28 Apr 2025 14:16:48 +0000
Manifest this update:     Mon 28 Apr 2025 14:16:48 +0000
Manifest next update:     Mon 05 May 2025 14:16:48 +0000
Files and hashes:         1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: jnn8lJzFI6n2fDbAYx4AbkdnhOW/VVkUceXyzmugjzE=)
                          2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: lNgj4TvSe3KKVyyrTSvIWXZ/d+PVLLALfHGvhjBEEiE=)
                          3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: nfzhFLP0jYKTq0z6wHGwsoz8GMYhYCaKTE6tTnCuKUk=)
                          4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: r9l8dniBLJAah6kBshgsvvbb8QtLGysiZozs08rVUnY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13559 (0x34f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Apr 28 14:16:48 2025 GMT
            Not After : May  5 14:16:48 2025 GMT
        Subject: CN=680f8dd0-a028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:eb:9c:5e:a8:3a:8f:44:38:67:17:88:10:
                    29:70:b2:37:9c:78:78:fb:b3:ec:40:ab:a3:9a:55:
                    67:4f:bf:90:38:dc:4c:39:b2:98:a6:f2:e2:f9:68:
                    34:2d:76:d6:85:66:88:95:8b:ed:64:f5:86:41:14:
                    ef:66:ae:cd:1d:e7:29:ff:e9:6a:ad:85:c7:0b:53:
                    4c:ba:aa:29:31:15:31:e0:f6:f3:23:d9:14:bc:60:
                    1f:59:73:60:8b:04:4a:a0:4b:49:53:01:92:c4:b2:
                    f2:68:f6:e6:ea:e7:4d:ae:41:79:7f:95:5f:31:b5:
                    08:9e:5f:81:62:5e:6e:3b:72:0a:0c:d7:56:ba:34:
                    50:2d:7a:26:db:f0:54:8d:70:08:68:7e:e9:72:e6:
                    1e:20:e7:e7:65:04:22:cd:fc:34:72:86:1a:6f:cd:
                    4d:98:92:de:5d:f8:9f:45:1e:51:4e:1a:ce:86:3d:
                    f5:65:99:23:62:18:c0:a1:4c:41:d2:1f:a3:d6:f7:
                    58:3b:81:7c:74:e0:b5:93:bf:e4:b1:77:dd:e8:c3:
                    10:9f:ea:2c:5a:ab:8f:1b:05:41:ae:72:0b:fd:06:
                    84:87:da:0a:73:46:24:ae:00:c6:84:98:13:a2:e6:
                    42:3e:57:db:91:1a:dd:d6:cc:82:81:a3:6d:5c:a2:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:3B:4B:59:DB:6E:96:9A:50:04:20:DF:8E:E1:BC:19:1E:5C:0D
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:26:71:13:d2:87:f6:87:4f:ec:18:71:37:77:23:09:6a:93:
         17:44:f0:74:b9:50:1b:54:d1:74:8d:32:35:55:a2:96:90:2f:
         24:d8:43:d1:68:b6:34:50:1f:3b:1b:30:f0:a3:77:25:cb:ac:
         f7:89:eb:e8:92:52:cb:fb:9e:98:c0:a4:e5:89:ad:5a:1f:0e:
         2f:30:28:18:bf:ed:e7:cb:17:10:de:d3:80:6b:b1:d5:d3:8c:
         32:80:0b:cd:7d:cf:e1:d5:08:da:d7:9a:5d:a0:41:59:7f:7c:
         87:a5:2a:7a:f9:d3:98:18:23:0e:ae:a4:37:57:20:9f:ee:6b:
         bd:d6:a8:be:5d:27:69:2e:f8:45:95:48:67:5c:77:13:fe:c1:
         81:13:12:47:0f:12:0f:0b:b4:48:bf:a3:cb:a9:76:d4:78:3b:
         10:ec:25:b6:5b:b8:f2:b1:99:79:12:ce:99:10:0f:fb:79:e8:
         2b:c8:17:72:cc:1f:cc:e1:03:21:03:aa:7a:8e:ee:b7:5e:1f:
         84:9d:f3:f0:55:84:91:f0:8c:2a:80:78:18:8c:45:f1:2b:e1:
         6c:fd:cf:65:78:2e:a5:ba:2e:c5:2e:1a:e8:a1:17:af:22:13:
         64:43:be:c3:8c:d2:6f:b8:8a:85:46:49:5c:19:5b:ea:61:6d:
         8b:17:c8:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy
MEFDMDM1MjcwHhcNMjUwNDI4MTQxNjQ4WhcNMjUwNTA1MTQxNjQ4WjAYMRYwFAYD
VQQDEw02ODBmOGRkMC1hMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+PrnF6oOo9EOGcXiBApcLI3nHh4+7PsQKujmlVnT7+QONxMObKYpvLi+Wg0
LXbWhWaIlYvtZPWGQRTvZq7NHecp/+lqrYXHC1NMuqopMRUx4PbzI9kUvGAfWXNg
iwRKoEtJUwGSxLLyaPbm6udNrkF5f5VfMbUInl+BYl5uO3IKDNdWujRQLXom2/BU
jXAIaH7pcuYeIOfnZQQizfw0coYab81NmJLeXfifRR5RThrOhj31ZZkjYhjAoUxB
0h+j1vdYO4F8dOC1k7/ksXfd6MMQn+osWquPGwVBrnIL/QaEh9oKc0YkrgDGhJgT
ouZCPlfbkRrd1syCgaNtXKJLnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqDO0tZ
226WmlAEIN+O4bwZHlwNMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE
NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU
U3BxT1BuM2FqWTBnckFOU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhJnET0of2h0/sGHE3dyMJapMXRPB0uVAbVNF0jTI1VaKWkC8k2EPR
aLY0UB87GzDwo3cly6z3ievoklLL+56YwKTlia1aHw4vMCgYv+3nyxcQ3tOAa7HV
04wygAvNfc/h1Qja15pdoEFZf3yHpSp6+dOYGCMOrqQ3VyCf7mu91qi+XSdpLvhF
lUhnXHcT/sGBExJHDxIPC7RIv6PLqXbUeDsQ7CW2W7jysZl5Es6ZEA/7eegryBdy
zB/M4QMhA6p6ju63Xh+EnfPwVYSR8IwqgHgYjEXxK+Fs/c9leC6lui7FLhrooRev
IhNkQ77DjNJvuIqFRklcGVvqYW2LF8gi
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:10 2025 by rpki-client on console.sobornost.net