Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
File:                     C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json)
Hash identifier:          GVWKPGwJQiHhp+4QhzB2mvgE52sIKBfCIjyOMtJI6yM=
Subject key identifier:   09:52:EB:DD:9D:5C:94:4F:91:7A:16:2C:98:FC:2C:9F:A4:87:40:06
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Certificate issuer:       /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
Manifest number:          0175
Signing time:             Sun 27 Apr 2025 03:00:35 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:34 +0000
Manifest next update:     Sun 04 May 2025 03:00:34 +0000
Files and hashes:         1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: MDvtigLw6mqWGj+roTqC8wJ9E6/UEwcVRoehTjk1SqY=)
                          2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: yQGHba0iCVzmQ+TLDipv2BWri6rwZPqD4eW8ATIlvo4=)
                          3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=)
                          4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=)
                          5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 6poyajPR3BIFUtAmbqebq4DXNDPl9+dp2rS2zBsWMPs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
        Validity
            Not Before: Apr 27 03:00:34 2025 GMT
            Not After : May  4 03:00:34 2025 GMT
        Subject: CN=680d9dd3-f1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:aa:f9:6e:ec:24:e6:dc:a9:4e:a5:cf:20:
                    23:66:f0:66:96:be:78:14:61:30:2b:8d:8c:7b:da:
                    40:e3:e7:d3:93:5d:69:83:7c:20:f7:f5:49:50:9d:
                    d3:0a:1f:61:83:f0:6d:14:3e:96:04:de:b6:e4:83:
                    78:11:16:25:50:1b:15:f8:a4:c4:80:47:58:55:7b:
                    1c:16:69:fe:b3:cb:66:0f:eb:2c:a8:1e:f2:a8:15:
                    95:bc:3e:fc:94:0d:3a:47:99:be:01:bc:05:98:99:
                    85:39:d2:b5:11:bb:bd:0c:51:dc:75:4c:1c:fd:4a:
                    33:d6:32:e2:63:c8:85:7d:73:5f:3c:08:2b:c1:1e:
                    9f:83:36:88:51:b3:5b:7a:ee:f9:3a:2e:b6:85:f3:
                    e1:ba:7e:bc:8b:61:bb:f4:b6:fd:4e:6d:04:7a:0e:
                    2e:e5:15:72:1b:7f:b4:82:94:86:97:d9:ed:45:a7:
                    28:9f:19:f0:fc:d7:17:42:a9:90:21:44:9b:5e:14:
                    12:26:a1:de:88:85:0d:cd:1b:ce:e0:f4:78:df:d8:
                    1d:70:3f:a7:68:58:8c:2c:b1:ed:f5:1a:99:bc:b6:
                    b1:59:84:69:63:24:41:44:4d:4b:6f:00:82:f5:ab:
                    ab:7a:58:9f:c0:e1:21:1a:0f:4a:98:0a:1c:5e:86:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:EB:DD:9D:5C:94:4F:91:7A:16:2C:98:FC:2C:9F:A4:87:40:06
            X509v3 Authority Key Identifier:
                keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:67:2a:af:3c:ad:42:9b:e6:10:8d:83:f8:ab:8f:8e:c1:76:
         8b:ac:cd:15:ff:e9:41:75:1b:f2:6a:99:c4:49:d6:c4:0f:81:
         28:fd:7c:9f:34:ad:79:e6:4b:20:8e:b9:63:e3:e3:d6:a7:98:
         5f:67:b0:6a:1d:1f:d0:c3:3b:75:69:52:b6:2a:88:65:78:0d:
         07:16:fe:9f:b9:29:cd:03:c4:f7:07:f2:21:e9:f9:5a:a0:18:
         44:b2:c9:f4:4b:15:db:9d:b4:a1:46:5d:28:32:03:4c:af:d9:
         d9:18:9e:df:f3:b4:b3:bd:4f:5e:2b:5f:80:f1:09:3c:ad:e0:
         c0:72:b0:5c:e3:1f:21:12:21:d6:58:d0:a8:70:32:0f:09:10:
         3f:5e:2a:e0:fe:ef:a9:fe:1d:96:ae:d6:c7:7e:73:46:5d:5f:
         18:53:74:17:00:af:ed:0c:ca:92:c8:93:5d:84:f7:cd:17:bf:
         c9:49:85:32:e7:4e:ad:b8:d4:e2:13:b8:3b:28:0f:a2:2e:37:
         82:4b:bf:1b:f1:38:23:f7:41:1a:3a:4c:6e:33:6d:ac:e1:10:
         ce:ac:b5:53:80:a0:94:21:bf:ec:37:a5:ac:89:35:eb:88:53:
         1e:e0:a1:f6:68:fd:97:d0:e9:a4:4c:52:ce:da:3c:28:95:bc:
         bd:b6:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net