Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File:                     _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier:          A2AS6XuCg4RL5nE0SbuKNuVWFQRKkFBJLKnFZKQPfpM=
Subject key identifier:   F2:37:DC:6F:1B:82:61:A5:6D:3E:47:CC:C3:18:CA:E3:99:4B:EF:D3
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer:       /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number:          0111
Signing time:             Sun 27 Apr 2025 03:54:11 +0000
Manifest this update:     Sun 27 Apr 2025 03:54:10 +0000
Manifest next update:     Sun 04 May 2025 03:54:10 +0000
Files and hashes:         1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: GQ4ki2p7+ux8+qWibx6t5fgh6BxJQAERt/Tr4X96Ke4=)
                          2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w=)
                          3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: mRLPSGz3fDg54l8MXzyosEq3sw4/imNOjGKPzEwZfwU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
        Validity
            Not Before: Apr 27 03:54:10 2025 GMT
            Not After : May  4 03:54:10 2025 GMT
        Subject: CN=680daa63-61cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:1a:75:fd:b5:24:a6:cf:fa:2f:1d:21:e9:
                    4f:cd:38:6c:bf:b0:03:07:b0:b2:ac:d9:b2:f8:38:
                    b9:2f:17:af:a9:ea:e8:d2:f2:67:fc:10:51:66:6c:
                    af:ff:09:69:5c:db:73:de:b7:12:ed:46:ac:6c:18:
                    b0:7f:e0:df:f7:6c:9e:5d:93:62:92:66:da:48:0e:
                    e1:21:d2:04:b3:9b:dd:7d:3b:c2:3e:69:de:9a:e6:
                    e9:05:71:42:1d:67:73:8a:87:0d:94:09:71:f3:c4:
                    0a:08:f6:f0:ca:c6:de:52:cc:ae:f9:f0:db:96:f2:
                    b2:4e:eb:ec:55:cb:12:56:cb:b6:3b:66:70:88:d8:
                    55:3c:86:e8:15:cc:5d:20:9d:73:6f:c6:c9:b7:3d:
                    85:96:5b:64:e8:84:f4:a5:34:2b:4f:d8:c1:7f:c8:
                    8c:f4:8e:9c:40:3e:8a:3b:2c:a8:ab:07:ac:0f:be:
                    52:8c:20:a7:b6:d3:ba:e2:8c:64:31:c2:60:16:29:
                    ab:90:19:7a:9e:3b:2b:cc:41:35:82:1d:e1:25:50:
                    04:c8:71:ae:81:db:03:32:4a:d8:f1:f3:02:af:4b:
                    ed:01:f4:ab:05:4c:35:79:0f:54:1d:be:73:99:89:
                    5a:ec:1f:ad:d8:0e:12:97:6f:c9:27:da:83:9a:8a:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:37:DC:6F:1B:82:61:A5:6D:3E:47:CC:C3:18:CA:E3:99:4B:EF:D3
            X509v3 Authority Key Identifier:
                keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:53:59:60:cd:7b:fd:ea:de:9f:76:16:61:dc:ec:ff:d7:
         f0:a9:8a:4b:7b:88:c3:fd:31:4c:b4:a7:9a:6b:a2:6e:50:cd:
         50:f8:a8:f2:1e:e9:41:f4:dc:00:9c:83:88:6b:1f:ab:bf:7e:
         69:8e:41:ea:3d:c9:b8:af:2d:ca:89:55:56:41:be:6f:6b:e7:
         4c:80:c7:b8:4e:a5:26:0d:57:e3:74:28:2e:60:a6:4d:6c:2b:
         9e:ca:44:ab:c3:1b:d3:c8:e2:8b:75:0d:d6:aa:a5:c0:2a:e2:
         9b:75:56:2b:b0:6e:8a:dc:da:ad:83:43:12:07:b2:ef:09:95:
         a5:06:13:d3:fb:a0:89:e9:14:50:82:17:55:b6:7e:a5:51:d8:
         82:0c:da:b0:a2:93:5e:76:95:31:42:03:4e:76:a7:bc:07:c8:
         dd:e6:ba:e3:58:f7:fe:fa:fc:9b:84:10:3f:7d:01:77:74:cc:
         24:81:82:57:af:6a:a8:e7:9c:00:29:bf:51:09:d8:39:85:6a:
         fe:5e:74:f3:95:8f:79:86:12:01:92:2e:a4:19:e5:17:8e:ea:
         1f:7b:81:d9:0b:8d:f6:e0:76:ba:1d:6b:c7:a6:53:ee:07:ae:
         84:37:2d:c2:58:b9:2d:ef:6b:71:a3:24:fb:a3:32:df:55:cc:
         bc:be:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:09 2025 by rpki-client on console.sobornost.net