Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
File:                     PfacqYyxMelltbxKM_znG50156g.mft (raw, json)
Hash identifier:          W0NuqOhSFcDET5TpqDyZVDZy3AEQCk6U1KdGERmSuIs=
Subject key identifier:   38:04:FB:87:25:B6:A1:FE:0E:1D:FD:92:1A:54:9B:FD:7E:BE:2D:8E
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
Certificate issuer:       /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Certificate serial:       074A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
Manifest number:          073C
Signing time:             Sat 26 Apr 2025 21:25:35 +0000
Manifest this update:     Sat 26 Apr 2025 21:25:35 +0000
Manifest next update:     Sat 03 May 2025 21:25:35 +0000
Files and hashes:         1: PfacqYyxMelltbxKM_znG50156g.crl (hash: veqi8ysdu8hal354J+OW0OtBMb4blPgNjrxtJRxwHek=)
                          2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl
                          rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
        Validity
            Not Before: Apr 26 21:25:35 2025 GMT
            Not After : May  3 21:25:35 2025 GMT
        Subject: CN=680d4f4f-ad3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:84:cb:03:1d:4f:b4:f3:1d:31:43:81:ae:
                    f1:6d:ca:e1:19:1c:b6:7f:8f:0f:2e:a8:04:17:1b:
                    e5:59:3d:27:43:3a:57:a0:56:0c:ef:2d:5c:e1:0c:
                    7b:29:92:fe:33:e5:74:45:75:3a:00:c4:85:6e:07:
                    29:a4:28:14:82:77:f2:1a:52:7f:dc:87:07:a6:17:
                    16:1e:a2:32:e3:03:f6:80:7d:76:9f:cc:c6:2f:3b:
                    b5:a8:a6:97:bc:28:6e:85:dd:91:a2:33:bc:5e:13:
                    7e:22:b0:ad:b7:53:0b:42:72:46:68:1e:8b:c0:e0:
                    29:7c:0b:d3:84:0c:cf:62:a2:a8:44:6d:f6:d3:6e:
                    4b:b4:07:fd:b5:bc:98:3e:d2:ae:c8:69:e5:62:fb:
                    68:84:e9:71:d1:7e:5d:54:3c:37:bf:0b:01:cc:e4:
                    7e:a5:95:2a:65:43:17:85:62:40:fb:bf:b1:7b:b4:
                    17:b4:c0:5f:fc:ae:ab:4f:9e:70:b9:8f:65:d8:ee:
                    82:85:d5:c5:a3:fe:29:7b:03:04:71:8f:3b:cd:a7:
                    60:ba:9a:d1:58:30:12:b0:f2:c5:10:37:4a:f6:3c:
                    0a:93:40:c7:f2:ee:c3:5e:33:86:34:1b:aa:a7:e1:
                    a4:9a:4a:a9:10:62:12:df:19:40:c4:74:99:5b:7a:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:04:FB:87:25:B6:A1:FE:0E:1D:FD:92:1A:54:9B:FD:7E:BE:2D:8E
            X509v3 Authority Key Identifier:
                keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:0d:6c:c3:41:66:57:32:dd:2a:f7:35:d5:5e:c5:c8:e6:30:
         00:47:fa:75:b3:17:eb:c9:8d:88:10:c9:a8:34:d2:74:ab:96:
         c4:0d:98:ed:57:69:46:88:ce:58:76:f2:d7:31:6f:e2:a7:cf:
         71:0f:c1:75:8e:20:84:ed:96:8b:d6:23:76:66:5f:b7:1e:0a:
         89:a7:f0:3d:5f:28:41:86:c6:a0:a0:5c:c7:3c:d7:2f:4b:91:
         12:1a:79:30:b7:90:81:7b:fe:51:b6:27:dd:b7:12:11:be:9e:
         55:0e:db:ed:f2:c4:ff:ff:93:4e:9a:0f:67:36:8c:d7:40:9f:
         4d:fc:9f:52:0d:84:96:00:10:51:2e:3f:13:ad:15:df:5d:7c:
         47:bb:5a:51:ed:e2:d1:a8:64:ba:22:0f:2d:5b:d8:63:b1:55:
         3e:d1:78:d4:ab:15:e2:63:c5:a1:91:3b:f7:91:b3:4f:b6:7f:
         6b:67:31:f8:d4:b2:e8:c2:29:b0:c6:5f:3a:0e:66:90:42:67:
         23:e1:ca:18:60:d1:de:f6:eb:7c:9b:e8:ff:78:d3:dc:91:23:
         84:7c:fa:87:0a:48:bc:89:59:e9:cb:ce:05:eb:55:f8:d9:75:
         0e:b5:04:26:8e:75:d1:5d:58:43:9a:5b:8d:52:38:c4:d6:e8:
         e3:35:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:01 2025 by rpki-client on console.sobornost.net