Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
File:                     10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json)
Hash identifier:          VTv1cXLlYKhV9iJcHXyx4Lx1BcTwNb5WhmMmWcjJLoE=
Subject key identifier:   47:6A:49:DB:7E:43:C7:D2:75:0C:B6:F0:F3:9D:45:74:49:AF:01:C6
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Certificate issuer:       /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial:       0AC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
Manifest number:          0AB2
Signing time:             Mon 28 Apr 2025 19:53:49 +0000
Manifest this update:     Mon 28 Apr 2025 19:53:48 +0000
Manifest next update:     Mon 05 May 2025 19:53:48 +0000
Files and hashes:         1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: ax9DjcG587fX/TLL6pQmPfQ4NEce/Z1hRUnn9l1CP4o=)
                          2: 98DBD8B660D311EEA9C80344C4F9AE02.roa (hash: Iq6DjDAWYaikvNVka5L51lFXKJ+7UZRQJoPc5OKJvsI=)
                          3: AF3CEA305ADB11EEA96AE979C4F9AE02.roa (hash: O+Syjtqn23Qr9c/D9JPic1jy/KjI63RsKq7ObP7Z1Pk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
                          rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2757 (0xac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
        Validity
            Not Before: Apr 28 19:53:48 2025 GMT
            Not After : May  5 19:53:48 2025 GMT
        Subject: CN=680fdccd-3271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:f8:1c:88:1b:a8:44:6b:fb:81:da:1d:78:
                    1c:a3:b1:e2:4b:db:fb:5a:d5:09:7b:c2:87:3e:2e:
                    f4:78:0f:bc:73:58:1d:90:6e:9d:b8:ce:af:e9:3e:
                    4e:ea:90:ef:90:2f:ed:99:5c:b9:ca:43:7e:61:a6:
                    7c:91:52:ba:16:ff:a8:90:dc:0d:65:dc:d5:d7:7d:
                    60:32:a8:bb:f7:c4:c7:10:e9:39:bb:cb:87:19:a1:
                    30:1b:a0:ab:5e:0d:19:84:0e:c0:af:cc:3f:05:2a:
                    44:42:e1:30:4e:1e:dd:81:ee:7f:5a:3a:13:4f:52:
                    a2:6a:ab:c7:a7:9f:db:8f:97:fc:23:02:43:50:9e:
                    fd:42:84:52:e0:00:72:df:81:94:4c:0a:8c:59:72:
                    9c:05:58:e1:b4:f9:ff:2d:c2:82:e1:65:f0:b4:08:
                    80:d7:8e:40:aa:33:65:5c:46:d9:5f:83:a5:79:cc:
                    fe:1d:42:81:4e:b4:95:f1:22:b3:09:f0:87:05:26:
                    98:69:ad:ff:8b:61:93:32:76:8f:ea:cb:a9:24:80:
                    1f:65:25:32:58:b4:c0:10:fc:c9:46:94:4b:20:74:
                    cc:97:48:8a:41:3c:88:c8:8c:a9:e1:cc:32:9b:26:
                    9d:d5:cc:f0:f1:b2:60:06:df:7a:9d:a7:18:fe:a3:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:49:DB:7E:43:C7:D2:75:0C:B6:F0:F3:9D:45:74:49:AF:01:C6
            X509v3 Authority Key Identifier:
                keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:02:fb:2c:bd:30:65:e4:ae:c7:88:ec:d3:13:1b:1d:fa:18:
         b5:b1:6c:02:12:da:bf:9c:d1:b8:ba:bc:ad:11:ea:50:7a:85:
         bb:85:27:ad:3c:ce:a7:c6:7a:a6:a1:ca:21:d3:ed:30:35:76:
         ce:f7:c0:2c:4f:3a:b6:25:76:36:35:8f:49:e8:39:04:aa:37:
         fd:e5:6a:86:bf:0e:22:31:a4:87:65:b6:f3:62:4c:ed:d1:8c:
         42:74:e5:f2:14:83:f3:82:16:ce:10:92:23:3d:61:65:96:47:
         b8:f0:33:c5:a6:8f:86:7c:8d:14:39:a6:a7:b0:88:9c:39:3e:
         47:ef:88:be:da:f8:61:41:d9:be:1a:47:df:6f:d1:1d:93:84:
         4d:2c:c1:1c:64:f4:9c:fb:57:ec:5f:80:23:b5:22:4c:7f:b2:
         e3:14:07:25:85:53:4a:98:fe:00:53:1f:50:c2:fa:4b:ad:77:
         78:9f:d4:97:f3:89:4f:17:5c:bc:71:77:7b:5f:d9:7c:89:90:
         50:1b:c5:54:85:6f:ce:e0:db:84:83:db:e1:15:65:ed:ed:c1:
         d4:94:cc:77:72:5a:de:c7:2e:e4:41:92:0d:40:eb:8e:42:03:
         39:6e:1b:ab:52:eb:07:77:8f:86:9a:bf:50:d7:1c:2c:c0:8f:
         5c:a5:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:32 2025 by rpki-client on console.sobornost.net