Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
File:                     ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json)
Hash identifier:          6jFXtD1BBuHcBj6asdf3RA1+Ybt4qVsmSG6Xw4Vy82I=
Subject key identifier:   F4:09:15:F3:A3:FB:EE:C3:CF:5F:4C:2F:7C:4D:05:F4:A9:44:E5:5B
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Certificate issuer:       /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
Manifest number:          6F
Signing time:             Sun 27 Apr 2025 05:44:18 +0000
Manifest this update:     Sun 27 Apr 2025 05:44:18 +0000
Manifest next update:     Sun 04 May 2025 05:44:18 +0000
Files and hashes:         1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: /8R5vaQ9so9WWefPzmyyB7iYpYutPIFLhK1QH0vh2mA=)
                          2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: Y1QGQN0nXso2hopLjYxap7U6L3vOEJ5sbYbcbURZoVc=)
                          3: EBC0BF3A843411EFA205900AC4F9AE02.roa (hash: 1lTg3C6avyOXyGgdRKyCJEw/4DfSTwcprqQ9ajZX1oM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
                          rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
        Validity
            Not Before: Apr 27 05:44:18 2025 GMT
            Not After : May  4 05:44:18 2025 GMT
        Subject: CN=680dc432-84e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:07:27:39:62:5e:22:78:2f:21:33:8e:85:
                    dd:c7:5f:bc:74:1f:16:87:68:37:1e:60:c0:56:d9:
                    dd:94:40:d2:bc:cb:c0:10:4d:76:a9:23:04:25:84:
                    6d:43:9d:c8:e3:04:28:ac:18:b7:25:3e:e0:a8:1b:
                    14:77:c6:e7:f5:66:df:fe:4b:8a:2e:c3:c2:fd:61:
                    de:ee:02:5e:e8:7b:27:3d:a5:5f:4d:f5:29:bc:24:
                    6c:9c:29:2d:aa:db:a1:03:09:c4:0a:c2:b8:64:f8:
                    e9:1c:dc:27:1a:08:5c:c0:59:0c:9c:d5:94:ac:94:
                    37:04:a3:70:6e:3e:46:f4:ff:6a:39:01:67:8f:a7:
                    81:c5:72:21:87:7b:37:61:9c:6e:7d:28:04:46:e9:
                    b6:25:26:45:2a:1e:f6:ef:94:38:8f:20:36:30:2e:
                    03:03:3b:0e:8f:70:71:aa:78:5f:5b:7c:06:7a:28:
                    b6:f0:8e:32:b7:c7:4b:89:b8:63:a8:bf:98:7f:c3:
                    ca:47:2e:cc:2c:f2:2e:a8:c0:cd:0b:62:aa:e7:0e:
                    19:1d:ff:80:ea:f2:62:71:35:e3:71:88:70:42:d3:
                    65:eb:d4:cc:78:3d:82:12:56:5b:71:70:01:d4:4e:
                    47:90:b5:3e:94:1c:0e:7c:74:80:17:28:a9:18:2b:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:09:15:F3:A3:FB:EE:C3:CF:5F:4C:2F:7C:4D:05:F4:A9:44:E5:5B
            X509v3 Authority Key Identifier:
                keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:3d:0c:12:96:16:51:61:9c:77:ed:97:40:b5:42:25:3b:
         8b:51:54:bd:53:6f:81:ee:2a:74:a6:d7:c6:e1:18:39:e0:35:
         ec:9c:54:ba:82:b8:4e:35:a3:13:b0:a0:3e:76:6c:7f:d2:4b:
         e3:e9:e4:da:47:38:57:92:b5:79:b7:03:c0:f8:d7:6f:4e:f3:
         1a:4a:b4:d8:0c:77:96:65:88:97:74:3e:e6:de:ce:07:0d:5c:
         3b:ff:00:8e:57:7a:48:99:03:80:59:c6:e6:b3:d0:9e:4d:5f:
         1c:04:cb:cd:17:f8:e5:0b:12:d6:fc:7c:ad:c4:a7:4b:90:ea:
         89:b8:d9:d9:99:93:50:fd:97:f0:06:4d:57:cf:df:d1:96:7f:
         3b:68:59:db:3b:0e:f4:42:88:66:7f:18:fc:35:60:79:4a:c0:
         fa:71:54:a7:6a:a5:9f:8f:81:fa:71:c1:2d:aa:69:9c:29:3b:
         6a:1d:c8:13:a0:52:4d:ec:d2:03:8e:17:db:b7:e9:d6:75:eb:
         1d:38:ba:96:90:24:45:8b:d2:98:94:8a:b0:a1:0b:89:86:eb:
         73:da:02:b0:8a:0a:90:09:55:6f:25:fe:d6:9f:ca:69:e3:da:
         aa:6a:a1:5c:b6:f5:6e:74:f0:3d:0b:91:48:f2:2f:37:14:03:
         5b:2d:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net