Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
File:                     iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json)
Hash identifier:          6gwR9/Ly68E90EZ9SQ/CUNKSZjH2D9PUBRsjRUhGT10=
Subject key identifier:   69:37:39:BB:B8:67:EF:FA:62:2D:3B:FE:9E:B7:A9:CA:56:DC:12:63
Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F
Certificate issuer:       /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
Certificate serial:       0791
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
Manifest number:          078C
Signing time:             Sat 26 Apr 2025 21:01:49 +0000
Manifest this update:     Sat 26 Apr 2025 21:01:49 +0000
Manifest next update:     Sat 03 May 2025 21:01:49 +0000
Files and hashes:         1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: w5ERJeYj1/CHX9bA20PLXtVCr7WJTBGOriIQQ64KnFs=)
                          2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: 7kdaecQrFfrsndKpjXaOO6IRjRmwLt9+kq/Fe+7XLxo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl
                          rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F
        Validity
            Not Before: Apr 26 21:01:49 2025 GMT
            Not After : May  3 21:01:49 2025 GMT
        Subject: CN=680d49bd-041e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:68:b2:0b:fa:3e:4b:49:01:02:7f:6c:01:
                    34:88:32:77:ae:39:7e:a1:3b:bf:3b:80:c4:17:a9:
                    b6:d7:96:dc:2d:6e:b6:e8:66:33:fb:11:b0:55:cb:
                    a7:91:7d:fe:52:50:58:2d:95:b7:f1:48:2e:42:8a:
                    84:14:42:08:25:d3:88:d8:4c:6b:4c:9a:18:a6:5f:
                    5d:e1:fc:bc:89:09:91:f7:ba:6a:53:62:96:4c:5f:
                    c5:1a:ef:04:7b:df:7f:f5:19:98:66:d0:db:c2:cd:
                    47:73:12:6d:bc:8b:84:e0:f9:a8:62:81:49:6b:9c:
                    76:89:62:10:67:81:fc:c9:43:41:f3:b8:e7:71:6f:
                    c0:3e:b4:f6:b5:0c:69:c7:8a:87:36:d5:da:6d:95:
                    62:62:8e:44:74:6c:f5:65:f6:ce:e0:5c:f7:a0:24:
                    0a:60:8d:b0:e6:78:35:70:22:ba:33:76:12:ed:c9:
                    44:31:23:b2:66:51:4d:1a:e2:a5:10:14:0a:b7:fa:
                    31:bf:53:d1:f9:9f:eb:cf:e6:5f:a8:52:95:e7:68:
                    aa:df:32:9c:f3:e9:fb:ea:6a:64:55:82:c1:b3:51:
                    51:28:94:13:68:96:dc:92:c8:d9:40:4f:f9:e1:42:
                    54:b1:ef:ac:7e:7a:ce:55:85:a7:53:a1:5f:ed:24:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:37:39:BB:B8:67:EF:FA:62:2D:3B:FE:9E:B7:A9:CA:56:DC:12:63
            X509v3 Authority Key Identifier:
                keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:70:a1:87:ac:2d:9b:7f:59:79:96:7e:19:bc:ba:2b:b0:d5:
         7e:b2:a9:f6:35:e9:d3:58:ad:cd:eb:f3:b2:68:63:f6:89:40:
         2a:75:84:b7:fd:93:b6:3c:e5:c1:df:74:49:93:1e:a9:57:99:
         5b:0f:2a:ab:c5:ce:b2:84:ec:3c:26:d5:d7:ef:20:34:12:92:
         17:b4:a1:99:65:b1:1f:db:e7:10:72:7a:42:7f:ce:88:b2:db:
         ed:4b:30:aa:da:69:b6:92:aa:40:cd:eb:a0:44:59:b2:4d:b3:
         61:52:e8:31:21:05:79:53:fc:73:00:dd:64:e2:09:59:c1:99:
         10:22:fc:94:9f:4a:a2:ca:d3:e0:e2:c0:93:78:12:d4:11:44:
         ae:8e:34:2a:db:b3:ac:e2:06:2c:0c:ca:74:d7:a0:bb:ee:4b:
         c7:26:f2:61:3b:1d:8b:44:04:2b:93:8d:f1:0c:51:37:71:2a:
         37:d9:23:c6:58:57:10:15:a5:19:cd:a0:ba:04:88:b1:11:b2:
         f7:9c:f8:56:b5:61:b5:20:93:fa:3a:70:96:25:1e:22:a1:94:
         e2:04:92:b6:3a:7f:c6:e9:9c:7c:74:d0:d2:57:99:ce:18:9d:
         45:54:7d:29:a6:cd:f5:b2:c7:04:a5:3c:cf:2e:4c:2e:1e:84:
         c9:a9:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net