Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
File:                     QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json)
Hash identifier:          i8cdupDffQPhaCtxyz2x1i43ak/LNvmJuoB7kRLbCEw=
Subject key identifier:   56:92:58:F7:B6:49:21:E7:B7:10:B2:5B:91:26:FB:7F:AF:B9:14:68
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Certificate issuer:       /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial:       082E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
Manifest number:          081A
Signing time:             Sat 26 Apr 2025 20:38:36 +0000
Manifest this update:     Sat 26 Apr 2025 20:38:36 +0000
Manifest next update:     Sat 03 May 2025 20:38:36 +0000
Files and hashes:         1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: 4BD68T8nZNU7k+SF8ts9laeWJTVbe6nkfsBBm/UtEfo=)
                          2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: +e8I8Bn+e9DYeBtqHQQ6KWWC7iXcvB3bn0K/EgTSp6U=)
                          3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY=)
                          4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: jruCV8o7M+K9hoZkMPNs3l4bUYZ+XPug7o900UdOtso=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
        Validity
            Not Before: Apr 26 20:38:36 2025 GMT
            Not After : May  3 20:38:36 2025 GMT
        Subject: CN=680d444c-e6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2c:05:2d:4c:47:77:5e:65:cc:64:6e:03:a1:
                    7d:2e:4e:1d:75:e8:9c:ec:da:f8:c9:c3:26:b6:42:
                    f0:fe:88:ca:6d:70:81:f1:ec:b7:ca:7d:84:d4:9b:
                    88:9e:95:89:f0:95:f0:c7:9f:71:dc:2e:c1:1c:41:
                    05:3e:dc:17:be:22:3d:f9:be:02:d0:32:cd:fd:b7:
                    bb:8d:d1:f3:d2:c7:ca:09:b1:90:7c:e4:13:8e:0e:
                    2e:01:81:97:6b:33:11:1a:54:cf:4d:e9:5b:6a:91:
                    8e:56:4e:fc:7b:28:c4:d6:00:7d:5f:1e:b3:59:31:
                    f4:b5:23:eb:06:4c:d0:43:c0:f3:0a:32:c0:da:7f:
                    ee:cf:3b:08:b7:4f:39:7a:94:fe:9d:c2:c2:7c:51:
                    d2:5f:95:0f:b9:a3:10:d9:e2:b5:f5:ad:f7:d6:fa:
                    d2:dd:6e:d0:50:a0:69:64:6b:bb:b2:60:36:1d:0c:
                    7e:5f:db:13:47:fd:46:31:d0:75:71:e9:ba:86:90:
                    de:3f:e9:6c:96:ae:2b:71:79:8a:9b:e3:c8:58:12:
                    aa:d4:2d:7a:e9:49:9a:b0:9a:38:8a:91:44:a5:1b:
                    ce:30:87:4c:e2:87:b2:bf:62:fa:9f:49:13:a0:26:
                    ac:1c:70:70:21:94:0b:bd:85:68:a3:7b:ff:5e:1b:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:92:58:F7:B6:49:21:E7:B7:10:B2:5B:91:26:FB:7F:AF:B9:14:68
            X509v3 Authority Key Identifier:
                keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f4:3d:27:ed:e0:db:ac:c3:81:09:fe:7f:15:60:ed:b5:b7:
         2c:f7:de:71:e9:cd:f7:86:db:29:91:8a:9c:c4:be:17:56:5f:
         2a:95:8f:cf:37:a2:69:ef:bf:a1:ea:72:56:d9:f2:8d:2b:da:
         2b:7b:ca:58:21:3d:21:20:83:4f:00:65:1b:03:ce:ac:bd:c3:
         69:09:27:5d:d0:c8:a1:d6:52:8b:70:68:63:3a:ae:ed:06:46:
         64:ba:8c:b8:1b:54:ae:03:8e:26:46:6f:c3:d7:9b:04:da:d1:
         b6:81:8c:1e:63:ae:78:14:8b:ed:fb:dd:84:87:3f:44:9f:f6:
         55:eb:a4:35:30:e2:bb:62:b9:d3:e9:5b:ec:c6:01:a8:c1:3c:
         24:73:81:22:57:98:fd:a0:99:3c:d5:4f:63:ef:61:81:80:e2:
         35:ed:cc:28:17:9e:63:d6:60:e5:12:3a:2f:87:b2:5a:85:41:
         9b:d5:35:f9:fd:e1:af:c6:52:06:28:83:63:31:95:0d:97:61:
         53:bb:b3:fb:20:78:fd:c9:ea:e8:ec:5d:db:c3:6b:2a:b7:4a:
         37:cf:f8:d4:cb:7c:31:82:e3:a0:1e:c7:e6:3e:c0:8d:2d:0d:
         5c:13:a2:d9:f3:3c:fc:ea:b8:d3:34:4b:ad:5c:71:8f:79:82:
         18:39:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net