Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          Q6HmxmUBqa5ae4TpTLH6PSWbnyHMFI3ZooVFAJ7uJHI=
Subject key identifier:   77:B6:FD:7B:5D:9E:B3:1A:63:51:27:62:FB:70:8B:60:BC:05:5D:0D
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          0236
Signing time:             Sun 27 Apr 2025 01:31:37 +0000
Manifest this update:     Sun 27 Apr 2025 01:31:36 +0000
Manifest next update:     Sun 04 May 2025 01:31:36 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: zcxD/TaXnvHddLEORFcervBAhFU/+AunlHVE1NmwfB8=)
                          2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=)
                          3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Apr 27 01:31:36 2025 GMT
            Not After : May  4 01:31:36 2025 GMT
        Subject: CN=680d88f8-cf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:02:ff:7c:7e:fe:ae:bf:88:eb:d1:2c:fd:
                    34:f3:03:72:d1:1e:94:f2:8a:cd:93:90:1a:b2:fd:
                    33:81:9b:ea:25:15:94:98:92:61:45:f3:e6:8b:68:
                    a6:e3:34:2f:94:3f:6d:1a:1a:48:6e:8a:c6:ee:95:
                    ad:6b:00:e1:e8:47:fd:3a:6f:6e:c4:2a:96:18:2e:
                    9d:6d:c7:2e:3a:b3:ae:e2:91:67:ec:53:99:58:fb:
                    96:2c:82:0c:15:f2:16:f4:2b:f4:67:bc:7b:c2:ca:
                    71:2a:86:af:b2:11:14:bc:42:37:ee:55:31:75:09:
                    59:01:06:34:e1:79:f5:d0:3e:35:61:f1:78:bf:64:
                    b8:cd:aa:db:f9:17:5d:b0:25:03:0f:30:76:03:e9:
                    0c:47:03:f0:5f:13:d8:16:7f:c9:db:a7:40:4f:98:
                    df:76:33:6a:b2:09:1b:3d:ac:89:17:b7:91:eb:18:
                    e3:62:8e:bf:e0:eb:c3:2b:e6:bb:ae:cc:36:a4:53:
                    6f:d8:8f:5d:48:fd:6c:c6:05:97:bf:53:8f:05:02:
                    07:29:63:85:4e:74:aa:5b:65:ec:b8:ce:9d:e7:74:
                    99:2f:7e:e2:3b:4f:10:1e:8e:dc:1c:0e:a5:97:86:
                    fb:62:ae:b0:cc:54:a5:c7:c5:e7:b0:b1:8c:01:5b:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B6:FD:7B:5D:9E:B3:1A:63:51:27:62:FB:70:8B:60:BC:05:5D:0D
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:b6:fd:cc:2b:56:a9:28:d9:60:f7:bc:1a:27:0e:ec:e3:
         20:ad:5d:ab:01:9a:28:8f:a9:4d:6a:8e:0e:44:f2:55:5e:1d:
         e5:c7:7e:51:2d:ec:6d:82:f3:71:79:0e:8d:ab:5d:bc:7b:8e:
         1c:8f:75:7b:12:3f:7c:f8:27:43:81:de:7f:f0:af:33:6c:e7:
         a1:da:8b:74:f1:2f:32:d8:0b:2f:2e:12:af:2b:24:88:8d:a3:
         7e:d4:7c:de:50:b4:fa:7e:3b:4c:fc:4e:a0:a9:c4:7e:9e:11:
         41:70:e5:5c:c7:e3:1d:79:24:16:b6:5f:3f:b1:8b:53:07:84:
         b5:2b:41:cd:da:bb:19:7e:c1:ee:97:25:22:ba:6d:32:70:4a:
         8a:f1:39:27:0e:eb:6b:2d:b5:dd:6c:d6:17:b5:ef:a1:54:e7:
         12:04:0e:a7:d3:8f:14:dd:cd:75:87:7e:90:3c:7b:9a:86:c8:
         4e:ce:a5:a9:d9:4d:c4:89:95:16:6e:50:d0:4b:5b:af:cb:63:
         9c:6c:42:6b:c8:ff:27:d4:24:06:5c:d4:36:e0:3b:39:48:d3:
         41:45:a6:7d:aa:e6:39:6c:e0:2f:ae:d1:79:ae:f6:9a:9f:d6:
         cc:ba:3d:35:e0:bb:20:3d:8f:ae:b6:4f:a0:2c:d0:01:c9:35:
         d1:9c:10:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD
OTI4OTQ3NDgwHhcNMjUwNDI3MDEzMTM2WhcNMjUwNTA0MDEzMTM2WjAYMRYwFAYD
VQQDEw02ODBkODhmOC1jZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoj0C/3x+/q6/iOvRLP008wNy0R6U8orNk5Aasv0zgZvqJRWUmJJhRfPmi2im
4zQvlD9tGhpIborG7pWtawDh6Ef9Om9uxCqWGC6dbccuOrOu4pFn7FOZWPuWLIIM
FfIW9Cv0Z7x7wspxKoavshEUvEI37lUxdQlZAQY04Xn10D41YfF4v2S4zarb+Rdd
sCUDDzB2A+kMRwPwXxPYFn/J26dAT5jfdjNqsgkbPayJF7eR6xjjYo6/4OvDK+a7
rsw2pFNv2I9dSP1sxgWXv1OPBQIHKWOFTnSqW2XsuM6d53SZL37iO08QHo7cHA6l
l4b7Yq6wzFSlx8XnsLGMAVvs3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe2/Xtd
nrMaY1EnYvtwi2C8BV0NMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy
ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm
UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUw7b9zCtWqSjZYPe8GicO7OMgrV2rAZooj6lNao4ORPJVXh3lx35R
LextgvNxeQ6Nq128e44cj3V7Ej98+CdDgd5/8K8zbOeh2ot08S8y2AsvLhKvKySI
jaN+1HzeULT6fjtM/E6gqcR+nhFBcOVcx+MdeSQWtl8/sYtTB4S1K0HN2rsZfsHu
lyUium0ycEqK8TknDutrLbXdbNYXte+hVOcSBA6n048U3c11h36QPHuahshOzqWp
2U3EiZUWblDQS1uvy2OcbEJryP8n1CQGXNQ24Ds5SNNBRaZ9quY5bOAvrtF5rvaa
n9bMuj014LsgPY+utk+gLNAByTXRnBCk
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:04 2025 by rpki-client on console.sobornost.net