Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File:                     _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier:          EVR1LNvl2iqsBzE2UP3KenQ1hGvXMgH0x2+CG5W2GB8=
Subject key identifier:   50:62:60:80:EC:84:E9:FB:C1:7C:E2:75:22:D4:52:48:EE:A9:44:AA
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer:       /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial:       0CCB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number:          0C69
Signing time:             Mon 28 Apr 2025 17:08:16 +0000
Manifest this update:     Mon 28 Apr 2025 17:08:16 +0000
Manifest next update:     Mon 05 May 2025 17:08:16 +0000
Files and hashes:         1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: SD1Uj8zJvqyOwbi9zII6HPAd0XnpqGI0eSVMpIRUWis=)
                          2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: NGxmbMIv3Jo6GohNdhpTu9H0Oo/Rl07KFseAe1bybGk=)
                          3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 3CFdx6XR3J9PdhVao7c8tK7DvtGCWPlPo7fHfVEStVA=)
                          4: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: 9E3zEyPH14WYX2LH4CFka5CZd9eY4rx2avv/aw6ae4Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
        Validity
            Not Before: Apr 28 17:08:16 2025 GMT
            Not After : May  5 17:08:16 2025 GMT
        Subject: CN=680fb600-eb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:b9:9a:f2:23:61:a1:3a:66:c0:21:08:5d:
                    d4:65:95:2a:a8:0f:1d:1f:5b:8b:2c:8f:c1:29:35:
                    00:a2:d2:5d:8d:30:60:19:81:6d:6a:78:1e:79:39:
                    a8:b9:f3:5f:15:99:29:51:c9:8a:d4:bc:99:51:e9:
                    af:db:83:8e:0f:96:16:a2:21:ad:01:05:95:a6:d2:
                    b8:f2:31:84:cb:1f:d0:c0:db:69:52:ba:86:d5:6d:
                    8f:18:4c:3e:a9:ea:08:d8:d9:f0:70:63:dc:10:45:
                    77:9f:92:c4:bc:37:55:f4:6e:aa:cc:47:7a:f2:ec:
                    a7:62:e3:e0:d3:2c:3f:48:c5:0a:58:0c:f3:30:13:
                    68:01:99:ca:8c:9c:bb:f3:64:58:60:5c:05:82:89:
                    a6:e1:56:04:ab:22:87:23:e2:f0:0e:36:8f:20:80:
                    98:9c:c1:23:07:8c:e4:6e:78:68:dd:e8:87:04:50:
                    d3:7e:0f:de:a2:b1:61:9a:4b:41:ee:6c:db:af:42:
                    dc:21:15:27:7c:3d:79:2c:58:5e:6a:65:60:dc:63:
                    e2:8f:8f:b5:8d:bd:9e:ad:fb:5e:0f:20:c7:e3:ae:
                    8d:c7:bb:9b:35:82:47:d4:77:65:84:7a:69:01:44:
                    0b:fd:6c:e8:97:e0:9c:ca:71:cd:e0:38:b5:0a:05:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:62:60:80:EC:84:E9:FB:C1:7C:E2:75:22:D4:52:48:EE:A9:44:AA
            X509v3 Authority Key Identifier:
                keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:d9:83:95:1c:07:b3:58:9b:48:8b:28:1d:c7:91:2a:9b:a6:
         fa:b0:6e:1a:e5:b1:9c:ff:59:a9:f0:8f:d8:a4:be:b5:58:39:
         e5:e5:e1:7b:0c:7c:21:2f:79:5f:60:45:82:81:64:d8:cb:ca:
         d5:eb:59:ef:3b:1a:74:be:af:2e:fc:d6:d0:0d:3f:89:c4:46:
         36:83:82:ab:0b:d7:58:89:91:c2:e2:db:bc:ec:c5:c7:99:08:
         5b:13:08:f6:35:12:b1:65:55:68:99:c9:f6:78:ae:bd:f9:9e:
         0d:a2:f2:3e:1b:e9:24:ef:c6:a4:2e:81:4b:58:45:1b:19:51:
         b9:8e:b6:d8:ee:f2:64:06:c6:06:33:18:0d:45:77:6f:68:5f:
         6f:00:af:f2:a9:89:6a:fb:77:f3:74:24:a3:25:ac:34:ed:d7:
         21:48:6f:4f:d7:7b:05:fb:76:61:ba:5a:74:f3:ec:64:2f:52:
         5a:18:2c:94:91:ee:03:ff:ce:50:b9:7e:30:26:b5:57:74:85:
         af:c6:b4:da:e7:9c:8f:e8:22:b0:92:4f:55:83:09:a9:f0:85:
         40:25:8f:54:e6:c0:62:20:ee:d1:e9:dd:cf:e6:74:73:75:74:
         0b:4f:c6:67:83:f8:49:e4:f6:db:6f:d6:56:f6:56:c8:4a:b1:
         bd:7a:ce:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:44 2025 by rpki-client on console.sobornost.net