Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          l7PvlzBDVK78rpcg+m0/fqdYOCs6Huoxl7QgiP1fjos=
Subject key identifier:   42:40:F1:73:D5:53:02:10:06:C3:92:7C:17:60:E4:AF:55:1C:E4:08
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          1D
Signing time:             Sun 27 Apr 2025 06:50:05 +0000
Manifest this update:     Sun 27 Apr 2025 06:50:05 +0000
Manifest next update:     Sun 04 May 2025 06:50:05 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: gGilFNeEt2V7QemSiDhsCtX7uM/hSkZZEFIUOI2RaLo=)
                          2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=)
                          3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: Apr 27 06:50:05 2025 GMT
            Not After : May  4 06:50:05 2025 GMT
        Subject: CN=680dd39d-cfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:49:34:8e:f6:31:e0:83:bb:1b:d9:f6:00:
                    94:0a:90:ef:4c:83:ea:5f:21:88:cd:92:6d:e8:de:
                    d8:8a:20:50:70:dd:3d:59:1b:a8:1d:86:75:d1:e2:
                    00:25:0a:4a:91:cf:a7:fd:13:8b:b7:90:2d:72:13:
                    10:de:e3:f1:f7:16:7e:23:0c:c2:ff:71:f8:83:04:
                    25:f3:b3:f1:cf:1a:fc:f9:86:f4:81:f9:09:cc:a8:
                    54:ee:f6:08:f7:da:58:eb:a2:7c:17:88:e7:ae:b5:
                    ca:4d:ef:82:ae:e5:70:a5:01:93:4f:0b:55:10:f0:
                    9a:ab:26:33:89:32:3b:1d:2f:5a:95:41:a4:bc:46:
                    cf:75:66:bc:ae:b8:9b:09:e9:e5:0e:00:ad:92:56:
                    40:7c:0d:9e:b9:c0:ee:31:87:2a:bc:5f:d9:af:4f:
                    3c:14:10:f8:a9:dc:7f:52:30:1a:ef:d1:61:05:4d:
                    d3:8d:38:d3:0d:bd:ab:22:39:9b:14:73:73:e8:0b:
                    95:6b:93:fe:0b:2c:02:23:c0:2f:f4:f9:b5:32:68:
                    85:61:e8:c0:2d:14:97:58:02:d9:2b:18:97:1b:0b:
                    31:bc:80:49:7d:2f:b4:15:83:eb:cb:56:66:ce:ca:
                    34:3a:70:31:8e:7b:a5:07:8b:bc:32:4f:98:06:a2:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:40:F1:73:D5:53:02:10:06:C3:92:7C:17:60:E4:AF:55:1C:E4:08
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:91:42:98:59:cb:15:3d:01:6c:24:ee:4f:88:17:f8:85:b9:
         1e:57:62:03:98:f7:7f:ed:3c:cb:bc:24:2c:cc:8c:46:aa:2f:
         8c:bd:29:9a:cc:b1:95:64:94:d6:de:56:27:fb:29:0e:92:3d:
         0a:19:3f:5c:cd:d2:a5:42:9d:c4:bc:6e:4e:76:1f:7c:90:35:
         1b:c3:df:02:2e:bc:e5:af:63:f9:30:12:06:e6:7e:4f:7b:65:
         ac:f4:59:69:d4:90:fc:09:77:71:82:2f:0f:91:0e:75:51:27:
         22:03:f0:a8:f6:af:87:a6:ce:2c:1a:b7:78:fa:59:7b:16:8f:
         9a:1e:41:c1:c7:8a:b7:48:3d:58:91:39:09:95:39:f2:73:a7:
         00:16:e6:ed:a1:3a:c4:c8:d1:31:57:64:e5:97:53:86:3f:b8:
         8b:07:b9:21:60:04:b3:15:96:77:79:1b:0b:31:dc:af:4a:52:
         2e:79:11:9a:87:61:2e:7f:bc:92:d2:61:45:c6:56:45:d5:f8:
         8f:9b:b8:d5:d3:02:30:55:c4:51:53:0b:44:1c:26:a2:4a:1c:
         58:26:c2:ff:5d:43:c6:e1:05:c0:88:a1:a2:76:47:d9:d4:6a:
         03:0d:a8:94:5e:38:a3:d0:9d:16:37:c8:c3:12:1b:5c:87:dd:
         04:2a:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net