Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          N9yvdxwP0AnNltWGto/QeuXVrqiaXuFcIJvQtgr+H5s=
Subject key identifier:   40:45:B5:20:BA:72:24:E4:1E:7B:36:33:C6:DB:86:88:F0:DF:1F:9F
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1829
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          16BD
Signing time:             Mon 28 Apr 2025 17:08:14 +0000
Manifest this update:     Mon 28 Apr 2025 17:08:14 +0000
Manifest next update:     Mon 05 May 2025 17:08:14 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: eAJsBoPOOD6J/CZ0UQWMx4GpzcqyLLRwExIcvq3D11w=)
                          2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=)
                          3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: G9R6UKF81vPpeZEj71HVNBUREkX7yk3WJ1Q6tTRHYYM=)
                          4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: kIvT/50E2laNc1gLfjO5rKE/sWwcpe4nrifpeBT23BI=)
                          5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: j6prxSOt5QlgU/NV/soMWbDX95ZjTIwaOn33GpJLHDk=)
                          6: 6D8B68F2ED9A11EF9E539B3FC4F9AE02.roa (hash: mkbjnF0MlJECJTroe720hHu0AWWY+ui5tETyKzN4QXs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6185 (0x1829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Apr 28 17:08:14 2025 GMT
            Not After : May  5 17:08:14 2025 GMT
        Subject: CN=680fb5fe-4bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:0c:8a:3c:79:a8:8b:44:c7:d1:48:78:46:
                    41:be:69:23:c1:b3:88:f7:3a:71:25:e3:43:f4:44:
                    e6:39:9c:28:7a:45:40:33:5e:a4:a2:8d:1e:8f:ba:
                    b1:66:da:4b:c6:a8:bb:29:ff:03:f3:09:9b:68:4b:
                    71:a3:5b:ce:04:b2:72:d2:72:16:c2:8e:69:6a:b0:
                    f9:cd:5c:64:e2:bb:cc:ce:5f:bd:77:20:42:4e:e7:
                    de:65:cf:dd:f3:b6:35:f5:95:2f:ca:67:73:6d:35:
                    30:47:7b:a1:75:15:fc:02:11:71:4f:f3:9c:76:5d:
                    1c:55:63:bc:40:66:c1:55:30:dd:50:da:e8:93:10:
                    4c:51:a5:f6:17:9b:f1:b0:69:54:34:82:63:68:48:
                    a6:61:77:85:a4:28:a7:7c:be:c7:dc:5e:8c:a2:3c:
                    90:66:e4:15:5c:3f:7a:50:e1:89:bb:60:25:a0:0a:
                    c3:e4:43:b8:c7:ac:ee:5e:65:8b:ee:8b:44:5a:92:
                    97:19:f2:2d:f3:7d:9a:c1:58:74:6d:11:0f:fd:7e:
                    6d:d2:75:15:28:80:9a:c7:38:f6:dd:c4:29:43:f3:
                    88:3b:db:61:cf:a2:4b:97:e5:ee:53:51:76:41:c6:
                    b9:d6:36:99:d4:96:eb:b9:8c:a0:3a:e0:af:e3:4b:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:B5:20:BA:72:24:E4:1E:7B:36:33:C6:DB:86:88:F0:DF:1F:9F
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:e1:70:9c:7d:6e:a5:7b:59:28:23:b3:f5:51:20:71:07:
         f4:f5:6d:99:91:31:eb:76:9e:70:db:e7:9a:49:7b:e8:0e:22:
         99:a3:dd:10:ab:ba:4d:b9:85:75:6d:00:c5:74:8a:a2:8b:62:
         68:23:a1:f5:13:e2:12:85:c8:98:f1:14:dc:2d:f5:5a:0b:e3:
         b2:d5:05:2e:55:ba:c6:59:b6:30:48:3b:d5:eb:4b:2d:cf:68:
         a6:1e:be:0d:0a:6e:36:52:bd:2c:52:e5:25:12:a4:3f:e1:99:
         a7:ca:d7:fa:5d:0a:fb:19:03:18:78:6a:6f:47:60:3c:98:d2:
         b8:6c:86:94:f0:99:86:da:d1:4a:2b:b4:bb:a1:b9:33:82:40:
         3d:06:23:b7:46:43:fd:ef:8c:b4:85:2c:65:e2:c3:b2:0a:58:
         d7:75:a6:cc:fb:ea:e8:84:aa:da:27:8f:50:44:87:ff:f4:7b:
         25:bc:72:06:a1:db:ef:23:ed:d9:bf:78:27:1a:b6:23:b8:d3:
         dd:fc:ba:22:ab:4c:72:ec:d7:1d:f8:4f:92:88:97:97:1e:78:
         df:cc:7f:dc:49:3a:52:45:66:00:26:76:bd:85:43:b0:51:8e:
         76:2c:18:b0:14:a9:9e:d9:17:53:14:63:9a:bf:74:67:18:5d:
         77:76:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:44 2025 by rpki-client on console.sobornost.net