Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
File:                     PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json)
Hash identifier:          K1N4mZE4x6qXi2vA1BDxhL4Pt9meRcLn6OnJoCOlO4k=
Subject key identifier:   93:B2:4E:7D:15:85:64:5B:94:DD:E1:28:5B:42:B8:57:3E:CB:B0:21
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Certificate issuer:       /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial:       07B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
Manifest number:          0795
Signing time:             Sat 26 Apr 2025 21:05:00 +0000
Manifest this update:     Sat 26 Apr 2025 21:05:00 +0000
Manifest next update:     Sat 03 May 2025 21:05:00 +0000
Files and hashes:         1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: Bssbo9LT1wXQGJebva7xl3FOD5NTHM06WHz+lq0Fja4=)
                          2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=)
                          3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=)
                          4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=)
                          5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=)
                          6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=)
                          7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
                          rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
        Validity
            Not Before: Apr 26 21:05:00 2025 GMT
            Not After : May  3 21:05:00 2025 GMT
        Subject: CN=680d4a7c-381e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:21:ed:eb:5a:11:68:a9:30:b4:7a:ac:11:
                    68:0c:bb:89:1d:18:19:9d:8d:27:ec:ea:b4:57:f7:
                    c2:6f:6c:cc:a7:ec:fa:46:27:f4:19:92:cc:6b:5b:
                    40:5e:1d:e9:a8:70:68:77:6a:43:10:14:bf:c1:77:
                    b7:58:63:0b:b3:5b:8e:03:85:74:6b:d0:0d:1c:93:
                    8a:30:5f:0f:d7:69:b1:0b:b1:cf:70:f1:d8:8d:9a:
                    2b:de:70:8c:5f:00:07:e3:be:c1:58:6c:5f:32:d6:
                    05:53:8a:99:d6:f3:0b:75:93:59:77:a1:00:50:cf:
                    93:c7:06:4f:01:b2:fd:ff:c9:12:d4:6a:45:c1:ad:
                    e7:d6:d6:51:d2:dc:eb:9b:f9:18:f3:e9:18:11:52:
                    0b:d8:41:13:69:0e:70:3b:d8:ba:e9:15:b6:e3:a9:
                    80:b3:f0:5f:eb:d9:4b:34:59:61:24:32:97:51:cc:
                    7d:c7:ce:7c:b6:3c:e3:d1:0e:d8:e7:03:11:52:ec:
                    72:e3:4e:1c:d3:ef:94:13:bf:65:58:45:17:2a:0d:
                    33:8a:b0:46:53:a4:d0:18:6c:85:c7:51:b5:43:f0:
                    9f:4c:4f:3d:32:ef:be:b8:13:a1:7d:57:9c:88:32:
                    08:e3:55:b0:48:e8:41:ed:81:79:1c:84:4e:c9:b4:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:4E:7D:15:85:64:5B:94:DD:E1:28:5B:42:B8:57:3E:CB:B0:21
            X509v3 Authority Key Identifier:
                keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b5:47:fb:b1:f1:d0:66:90:ec:e9:fd:7f:e1:00:c1:2f:54:
         8d:b7:05:2c:22:5f:59:75:a7:a8:a9:e3:ca:94:03:b5:28:30:
         ee:2c:85:84:7b:ea:17:aa:90:7a:2a:47:d9:09:80:f1:e4:94:
         4b:a6:22:26:87:53:72:21:1d:00:31:9f:0a:9d:e4:75:50:94:
         ba:3c:c0:c9:f3:51:27:19:50:74:47:68:4c:ee:94:e2:a0:fc:
         23:23:0f:c3:c6:58:bf:33:b9:4c:4a:06:bc:91:74:5c:51:06:
         b7:a0:c6:a4:3a:fd:b6:f4:8c:73:09:42:25:9d:66:c0:cd:99:
         f1:26:29:6e:18:a4:c1:8b:45:05:44:4c:d0:f8:5f:ca:ac:73:
         1a:a9:9b:a4:0a:62:f2:2e:00:78:11:95:0e:93:76:6f:2f:28:
         e4:20:58:ca:a7:a1:9f:12:d7:91:e0:41:66:d5:dc:cd:49:1a:
         7f:bd:8e:bf:c8:a0:60:51:71:bd:71:0d:36:1b:7f:92:f6:be:
         c3:d1:fe:1e:54:eb:0d:95:45:7e:8b:61:72:ac:d8:aa:33:7f:
         44:07:1d:a1:eb:1e:5e:53:88:13:99:05:35:89:be:1f:7d:aa:
         80:d8:96:ab:d3:55:3c:47:f5:b9:5c:db:c4:bf:96:ed:a5:0f:
         ef:c7:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net