Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
File:                     _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json)
Hash identifier:          irFwUHNJQYgqPS7Tp9xN0w46aP8ob64qqA0JvSgEZMk=
Subject key identifier:   05:AF:35:F2:ED:73:C8:99:8F:77:1D:6B:EC:FB:45:95:21:72:35:EE
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       082B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
Manifest number:          0813
Signing time:             Sat 26 Apr 2025 20:35:29 +0000
Manifest this update:     Sat 26 Apr 2025 20:35:28 +0000
Manifest next update:     Sat 03 May 2025 20:35:28 +0000
Files and hashes:         1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: pXk13hQGmgqypKYjsudugSYSud1JpRos2vKdvafT5+k=)
                          2: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: Mn7ItdYnGzk2vxLqw1AVtuZYDQiItp3zXBAlKbNDtKc=)
                          3: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: 4icuUSKqKo2QJPkSrodEInfP0cRxUmkdK43z1P7OpSk=)
                          4: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: 6XbGe14/Coj2CMIOzpblkaDOhleiX6CjMhMcJyz2TEs=)
                          5: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: 8zPF5w1Gc3OJJTkDFBBjT3EexRvNX9MXNMgU7AgM/4U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: Apr 26 20:35:28 2025 GMT
            Not After : May  3 20:35:28 2025 GMT
        Subject: CN=680d4391-ff0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:dc:71:c5:d8:16:24:42:8c:ca:5e:b6:00:
                    57:21:6f:c8:b5:52:be:e5:ca:66:a7:38:4c:bf:f0:
                    91:d4:22:80:f0:07:09:30:16:b7:2b:59:9f:29:8c:
                    bb:d3:e2:60:7b:ca:f7:f9:22:ce:6a:6c:4a:0a:6b:
                    9d:bc:52:f6:2e:d6:eb:30:2a:be:bb:2c:ee:6c:7c:
                    b8:97:6c:d7:ad:3b:dc:93:99:45:8c:1f:f2:83:04:
                    e8:32:81:25:51:d9:7a:22:c5:b8:2e:24:b4:e3:3a:
                    7c:1d:29:d5:6f:fb:89:cd:13:56:73:38:80:93:00:
                    12:31:c2:3b:86:21:18:69:49:a5:c1:7a:15:32:18:
                    fc:73:7b:9b:fd:8e:d8:9a:1d:1d:8f:54:eb:02:60:
                    50:f1:c6:55:19:62:9f:fe:b6:ba:a7:02:50:8e:6d:
                    04:a9:a9:0e:4a:e0:29:c5:7d:7c:81:f1:10:b7:71:
                    97:48:52:8a:95:f9:98:51:68:83:bc:48:5c:1d:22:
                    c4:59:28:47:b0:12:c1:99:5c:b2:2d:e7:04:71:4b:
                    b3:13:2b:47:5b:29:cf:5b:01:d1:50:dd:ae:4d:5d:
                    41:7c:43:d0:7d:ed:15:e2:b1:03:51:f8:9a:54:0e:
                    0b:cb:dc:92:6a:6c:5e:51:e2:ce:b2:0c:16:70:1b:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AF:35:F2:ED:73:C8:99:8F:77:1D:6B:EC:FB:45:95:21:72:35:EE
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:12:c4:62:02:b3:eb:4c:d6:0e:03:e1:1d:41:6c:63:23:3b:
         db:a2:46:33:99:3a:ac:68:4e:8d:49:90:61:7e:bd:17:fd:3f:
         dc:9d:3a:28:c7:5f:f8:54:f4:75:49:9c:d9:c7:5d:d1:09:ef:
         78:81:0d:bb:b4:fc:75:cf:80:f2:e3:8b:f0:00:03:38:88:ca:
         57:be:34:cf:aa:35:60:e5:67:cf:da:8c:84:c7:89:ea:bf:f1:
         f6:b6:3a:0d:59:a6:d0:7c:79:f9:75:84:af:9d:7b:5a:9e:f8:
         f2:cc:5f:7e:cf:f3:50:85:24:fb:ba:9e:24:04:06:b9:cd:da:
         ba:70:e9:07:93:1e:95:8d:ac:10:0e:c1:a0:ed:0a:40:65:5b:
         c3:7c:00:4d:53:6d:0f:4c:53:3f:ff:b9:56:b9:99:cb:c7:83:
         ac:95:1b:89:a0:1e:d2:a1:7d:80:2c:f6:e9:fb:3d:1a:c4:98:
         62:7c:5a:f6:1d:8b:7b:6b:16:d4:6a:1e:a8:70:51:26:cf:04:
         be:53:8a:fa:80:d6:33:f7:af:73:6c:5d:7c:de:bb:b7:fa:2b:
         1d:a8:13:da:ff:24:d1:9d:a2:1c:0b:17:13:86:c4:76:5e:f8:
         18:eb:fb:78:01:77:21:0d:e9:89:b1:97:78:19:bd:ff:ae:3a:
         38:6b:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:01 2025 by rpki-client on console.sobornost.net