Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File:                     kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier:          mNaAroKPtmbdhOIFxhyFFYBDYMerbqtkU6vFTKhWN7Y=
Subject key identifier:   EC:7A:DF:12:C3:06:F0:34:45:AE:B9:0F:2A:03:D7:50:9F:85:42:DF
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number:          93
Signing time:             Sun 27 Apr 2025 05:27:56 +0000
Manifest this update:     Sun 27 Apr 2025 05:27:55 +0000
Manifest next update:     Sun 04 May 2025 05:27:55 +0000
Files and hashes:         1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: M2FCfs3ok/0ob9tG2horBbwC4YOUnhuJKR8YmukmBjo=)
                          2: AC7759D2135511F092D0090CC4F9AE02.roa (hash: onYsR/Z0zfQbFj+mcD8abagulwJaECFH59WKOVFKUeE=)
                          3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=)
                          4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Apr 27 05:27:55 2025 GMT
            Not After : May  4 05:27:55 2025 GMT
        Subject: CN=680dc05b-c3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:0d:75:d8:92:0a:16:40:98:9e:2f:9e:43:
                    cd:3a:b7:59:50:6f:cb:2c:5f:69:0f:78:97:30:83:
                    16:e7:4f:4b:93:d1:07:92:62:01:5c:37:5c:1a:b6:
                    16:cb:ff:67:f0:2c:eb:b1:8c:64:68:10:0b:63:e5:
                    0a:7b:53:b9:75:02:0d:51:11:a6:88:30:ac:bb:e5:
                    a0:d5:41:ba:29:6d:5d:20:15:09:0a:25:3a:67:84:
                    b0:d8:82:df:2a:16:9a:57:39:fb:1a:11:8d:da:f2:
                    8a:dd:e0:4f:0c:32:c0:c8:30:26:5b:1d:a1:45:09:
                    35:88:dc:8e:d6:bb:1e:53:5a:ab:1d:d3:b3:da:8e:
                    e7:6c:13:90:67:75:c1:d1:27:20:06:43:4c:e2:9e:
                    d9:8c:d7:4b:67:24:1a:b8:3f:b8:f8:23:58:b6:6e:
                    0c:0a:d3:3d:74:8e:ef:47:51:38:5e:cb:2c:a0:b5:
                    04:da:5f:86:75:55:57:d1:5d:37:7b:9f:ad:f6:49:
                    79:d7:70:21:fa:61:0c:4f:c5:a9:e8:5b:59:b4:25:
                    c9:ad:14:b2:94:2d:07:c1:1b:4a:f7:9b:fb:52:1f:
                    6a:0c:9c:f7:8e:62:d8:24:69:68:e5:da:c8:64:a1:
                    a9:59:f7:0d:e4:71:bc:ea:45:60:8f:9d:dd:fc:2c:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:DF:12:C3:06:F0:34:45:AE:B9:0F:2A:03:D7:50:9F:85:42:DF
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e3:28:2d:9c:3d:aa:71:47:c0:f9:77:25:7d:e9:0e:ec:a9:
         47:f5:1e:60:9a:ac:71:3c:20:2b:2d:54:a3:fc:36:c6:94:67:
         b1:0f:93:70:ff:be:ff:a0:96:b7:5f:87:a3:f3:2c:b1:75:0d:
         30:2b:f3:f8:5a:9f:c3:fe:f8:54:e1:7a:2b:02:cd:28:4e:01:
         d9:51:fa:5e:1f:7e:d2:1e:85:dc:f8:01:02:57:91:68:62:57:
         87:e0:0b:34:a9:8e:21:db:18:a8:6e:f0:76:b6:e8:25:74:5a:
         7e:b7:da:c6:aa:05:66:c5:9e:67:78:b8:ea:5c:21:a5:1b:0c:
         3e:3e:37:69:5e:34:2d:55:33:88:8d:cc:83:f7:e0:be:69:5e:
         90:12:22:8b:33:3e:e6:f7:39:c8:9a:62:28:e1:b3:40:79:ff:
         74:7a:ee:e6:05:3d:ba:91:e4:be:b6:b9:af:60:80:a8:5c:fe:
         73:77:31:82:4b:31:4d:f7:cf:59:67:70:3a:b1:b8:d7:07:af:
         0c:8c:fd:37:8b:fe:dd:75:56:40:4b:5d:27:53:17:31:3d:8e:
         a6:55:03:01:32:5d:d6:8d:98:4e:33:47:f5:d1:da:e7:a7:a8:
         eb:2d:bf:ed:0d:72:41:16:93:13:c9:19:3f:9d:c7:dd:49:87:
         b1:88:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net