Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File:                     dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier:          ld3rk0H76HG/2+yvkmaAawSczbKvP+vQULH98AKyxIY=
Subject key identifier:   52:B3:8E:4B:FE:9F:00:F6:A4:E5:9F:20:19:C0:62:87:ED:D5:01:FC
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer:       /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number:          9C
Signing time:             Fri 25 Apr 2025 05:18:38 +0000
Manifest this update:     Fri 25 Apr 2025 05:18:37 +0000
Manifest next update:     Fri 02 May 2025 05:18:37 +0000
Files and hashes:         1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: utoj/tdrzJ/T6w/bAmXjlXOVG2Sy5jL4C9K9h3TFNsQ=)
                          2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
        Validity
            Not Before: Apr 25 05:18:37 2025 GMT
            Not After : May  2 05:18:37 2025 GMT
        Subject: CN=680b1b2d-9390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:61:89:1f:c2:d3:a4:d2:65:a5:01:f5:97:
                    81:04:c1:80:54:bf:96:59:d6:38:53:7e:5e:8f:65:
                    c2:cf:07:e6:92:a4:c6:ce:dd:32:ac:06:ad:a6:f8:
                    8e:31:88:15:00:21:18:f0:17:dd:e0:f0:ef:bb:ea:
                    d6:0c:5b:25:09:3f:3b:38:07:1e:53:7d:9c:3e:a3:
                    88:46:68:89:33:16:d0:92:74:e2:81:6d:21:be:5f:
                    d0:63:83:e6:4f:c7:9c:53:bb:3f:cf:8b:b9:57:db:
                    29:54:64:5d:36:9e:96:bc:f5:c3:0b:5a:d6:d6:65:
                    a7:37:31:98:6a:2d:7c:e0:94:df:74:ca:e2:b2:a4:
                    8b:98:82:ee:a0:e0:ad:2b:c4:bb:37:63:23:b5:4e:
                    2c:57:44:bc:34:82:25:f7:af:2d:bc:d6:1d:a9:2d:
                    ca:88:15:1b:79:ad:8a:2b:14:c6:3c:85:5d:62:e9:
                    12:d0:94:b2:b1:9a:1b:2e:5d:cd:01:18:1f:16:c4:
                    2f:08:39:57:3e:1e:bf:17:fe:b6:a5:f5:c6:0d:b5:
                    4b:5b:51:0c:ca:18:8e:3e:58:41:8e:fb:2c:fb:6b:
                    b5:e6:5b:60:24:6b:4b:f8:15:82:5b:83:b4:6a:83:
                    12:b5:bb:23:55:96:4a:4b:ba:da:b1:81:e3:26:01:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:8E:4B:FE:9F:00:F6:A4:E5:9F:20:19:C0:62:87:ED:D5:01:FC
            X509v3 Authority Key Identifier:
                keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:6d:89:12:3f:2b:38:66:41:c5:79:40:63:22:ab:06:78:
         d7:e3:0f:e8:7f:e2:9c:ac:f6:7c:9a:5f:31:9b:bb:14:4b:ab:
         26:80:f6:72:17:0c:f9:c3:3a:c2:a8:ea:1f:2a:9b:2b:51:09:
         75:9e:ec:25:ea:af:83:c7:a3:73:50:e4:d9:19:ca:13:9d:75:
         54:43:60:94:fc:4e:f2:07:e5:46:fc:5e:22:7a:a7:d0:b1:f0:
         d3:fe:ee:30:9c:ed:d8:89:67:40:01:b6:0d:41:b4:22:97:a1:
         f8:73:80:76:34:14:e1:02:94:61:d6:22:76:6e:37:7b:e9:d9:
         37:e5:73:84:bf:d5:c0:51:70:03:14:e9:90:b3:a9:53:c2:15:
         33:2a:3a:d0:8c:3a:b6:25:2a:39:c5:ea:3e:e5:23:96:c4:19:
         95:a2:87:56:5f:f3:6b:cd:cf:57:21:9e:e2:1f:ab:1d:e9:41:
         a7:fc:1b:27:09:75:75:30:ad:75:18:60:c6:10:4e:ee:82:d1:
         6e:2f:fc:e6:37:eb:8d:17:6a:4c:65:29:2b:2b:d4:fe:68:3f:
         cf:f0:9d:8c:27:de:74:c2:24:8a:68:f3:c0:42:96:fe:dd:49:
         a5:72:4c:71:b1:2d:d0:9c:32:e0:d6:93:34:5a:a6:c1:c9:dd:
         7d:3a:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:24:00 2025 by rpki-client on console.sobornost.net