Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File:                     2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier:          vxyUQ4XQH6xlPIBAw0hHmxm7FtIO0Nf8u6H+dmPwq0E=
Subject key identifier:   E5:EA:99:EE:93:89:9D:1A:D6:F2:AE:4F:E1:EC:11:4D:6E:15:48:BC
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer:       /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number:          013D
Signing time:             Sun 27 Apr 2025 03:25:36 +0000
Manifest this update:     Sun 27 Apr 2025 03:25:35 +0000
Manifest next update:     Sun 04 May 2025 03:25:35 +0000
Files and hashes:         1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: cNQW8Ym9MM2NKub900OXf5wvODta3db6TMlj9Lwjl2c=)
                          2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: 0VizvwlSvt2Typg26qLoIMnU5PdKIxjIiPdXQB++0ps=)
                          3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=)
                          4: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: HsYr8OmdjYIdRArCv8NBd7tL5J9ojAyKHb00KhjW28U=)
                          5: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
                          rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
        Validity
            Not Before: Apr 27 03:25:35 2025 GMT
            Not After : May  4 03:25:35 2025 GMT
        Subject: CN=680da3b0-fd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:cb:d8:d6:08:c2:9d:2b:7d:ec:53:5e:13:
                    79:74:08:9e:d0:e9:6c:17:f8:3d:5c:07:04:9a:f5:
                    3e:f8:79:53:aa:79:5e:06:0f:d2:e3:a3:11:2a:73:
                    b3:5a:0e:dc:40:44:8c:b7:ad:0a:06:00:f3:85:e2:
                    f6:53:2a:a9:cb:34:b7:12:6c:52:d3:38:6b:ad:54:
                    5b:01:fa:25:89:b1:51:07:ea:b8:2f:28:75:8b:7c:
                    fd:d7:dd:9d:94:bd:e8:65:10:ef:ca:f7:de:b9:4f:
                    03:4e:26:fa:4a:15:80:5f:a3:f3:a3:70:20:40:93:
                    24:0b:02:96:c0:e3:66:87:06:88:bf:61:46:3f:0b:
                    58:ee:11:2f:f5:14:3d:39:ae:ed:30:db:20:3b:a1:
                    1d:7f:12:10:70:b4:bb:5c:40:b9:48:c9:8d:15:ec:
                    ec:bc:dc:57:24:c8:a8:42:c6:e5:b3:0e:d1:a7:b3:
                    ce:73:f3:f6:f8:3d:3b:0f:90:1b:6c:91:51:45:03:
                    2b:0b:14:5e:8d:3e:9b:ed:4b:26:6e:c0:a4:46:d2:
                    cc:b3:41:96:e6:66:a9:c4:93:3a:32:d4:ff:b9:cd:
                    39:76:b9:35:88:95:ed:9b:94:73:00:e8:78:0e:e0:
                    8d:77:22:4b:59:cd:b8:24:ed:07:91:b9:bc:bc:88:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:99:EE:93:89:9D:1A:D6:F2:AE:4F:E1:EC:11:4D:6E:15:48:BC
            X509v3 Authority Key Identifier:
                keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:79:00:c0:be:eb:93:a3:15:49:3a:15:cc:dc:99:2f:88:15:
         12:73:55:72:c7:64:60:e3:a8:1b:ef:bc:69:f6:51:7a:2d:a9:
         cf:2b:d3:92:ba:67:1c:65:83:58:dd:c2:21:2b:c4:de:98:29:
         0b:c2:48:be:5e:f1:8f:0c:3e:32:a3:c1:26:6b:1d:73:1a:73:
         31:30:07:7e:52:9c:a0:a4:81:4b:e2:7b:3d:80:dc:f5:26:3e:
         14:a2:1b:76:52:22:41:eb:27:12:4e:ec:5d:dd:f5:b5:4c:bd:
         27:11:35:d0:e6:0b:db:24:94:5f:71:f1:bd:5a:f3:cb:31:b8:
         b1:92:a1:92:b6:b5:7f:1c:a1:79:e1:9e:de:5b:7d:7a:b1:c4:
         93:6e:7b:73:f1:1b:f0:68:be:02:a4:2d:41:88:1b:ca:1b:ce:
         f4:6f:21:0c:5c:a4:13:1a:87:07:ee:5f:04:11:de:e3:a2:69:
         e4:7a:e4:cc:d8:05:8b:c2:6c:29:a6:89:87:29:c4:b6:dc:67:
         75:bd:32:7d:33:fe:f9:ef:ab:64:c2:a2:28:94:ff:ed:6f:03:
         43:66:f8:ac:cd:96:39:81:d4:4d:25:66:bd:49:02:1a:b7:e4:
         02:90:c3:a5:c2:ef:26:9a:41:93:c7:93:26:cf:dc:c4:4b:19:
         32:b5:52:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC
REJCMzVGM0QwHhcNMjUwNDI3MDMyNTM1WhcNMjUwNTA0MDMyNTM1WjAYMRYwFAYD
VQQDEw02ODBkYTNiMC1mZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNLL2NYIwp0rfexTXhN5dAie0OlsF/g9XAcEmvU++HlTqnleBg/S46MRKnOz
Wg7cQESMt60KBgDzheL2UyqpyzS3EmxS0zhrrVRbAfolibFRB+q4Lyh1i3z9192d
lL3oZRDvyvfeuU8DTib6ShWAX6Pzo3AgQJMkCwKWwONmhwaIv2FGPwtY7hEv9RQ9
Oa7tMNsgO6EdfxIQcLS7XEC5SMmNFezsvNxXJMioQsblsw7Rp7POc/P2+D07D5Ab
bJFRRQMrCxRejT6b7UsmbsCkRtLMs0GW5mapxJM6MtT/uc05drk1iJXtm5RzAOh4
DuCNdyJLWc24JO0Hkbm8vIgEpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXqme6T
iZ0a1vKuT+HsEU1uFUi8MB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw
NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo
T2JlMkR6bklpMG05dXpYejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDJeQDAvuuToxVJOhXM3JkviBUSc1Vyx2Rg46gb77xp9lF6LanPK9OS
umccZYNY3cIhK8TemCkLwki+XvGPDD4yo8Emax1zGnMxMAd+UpygpIFL4ns9gNz1
Jj4Uoht2UiJB6ycSTuxd3fW1TL0nETXQ5gvbJJRfcfG9WvPLMbixkqGStrV/HKF5
4Z7eW316scSTbntz8RvwaL4CpC1BiBvKG870byEMXKQTGocH7l8EEd7jomnkeuTM
2AWLwmwppomHKcS23Gd1vTJ9M/7576tkwqIolP/tbwNDZviszZY5gdRNJWa9SQIa
t+QCkMOlwu8mmkGTx5Mmz9zESxkytVI3
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net