Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File:                     UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier:          WFC2vz4jLSjp5D0HYaVGADQndJnFkfv3QiJHFABG3p4=
Subject key identifier:   34:A4:D3:2B:89:23:11:0A:CF:6D:13:81:92:CD:C0:D0:65:A8:79:5A
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer:       /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial:       0BD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number:          0BBA
Signing time:             Mon 28 Apr 2025 19:20:52 +0000
Manifest this update:     Mon 28 Apr 2025 19:20:51 +0000
Manifest next update:     Mon 05 May 2025 19:20:51 +0000
Files and hashes:         1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: Kn09aJw4PZpi4k7254A4KJbjymwgz+PSomJkZSGDVJM=)
                          2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 8xiW94BgUeQq9ZYVRmXYA3GrrXRDCnXkWRMC2enXdlY=)
                          3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZnbBQLWijX811JvZiE0GpFPKxpLE1gcXnN9dflC4yH4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
                          rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3033 (0xbd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
        Validity
            Not Before: Apr 28 19:20:51 2025 GMT
            Not After : May  5 19:20:51 2025 GMT
        Subject: CN=680fd513-8a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:da:a6:6e:ac:e9:61:b6:b6:c8:df:09:f2:
                    67:69:a6:61:ce:ec:31:0a:cd:86:1e:01:2a:a4:f6:
                    d5:af:45:9d:95:f8:89:4a:d6:bf:db:73:88:cd:b9:
                    5e:81:2d:d8:76:c8:79:f5:19:95:58:63:65:f5:56:
                    64:79:7e:7f:95:28:f7:aa:5e:1a:64:a1:bc:65:37:
                    f9:bc:af:96:12:4c:0c:83:8b:4b:85:fe:88:af:f0:
                    12:e9:32:63:f4:68:9d:4e:71:ce:57:2a:7b:d5:49:
                    94:7b:43:9e:24:ca:ff:91:09:4e:3b:e8:ee:18:0e:
                    75:e2:22:ac:60:50:44:f1:56:3f:9f:77:cd:3f:3f:
                    cb:d1:eb:38:d3:36:35:a2:24:f3:95:57:51:2b:b7:
                    0f:f1:e0:66:35:a6:9a:30:5d:e4:92:15:64:1e:93:
                    3f:d7:c4:8e:4a:cd:10:14:20:d5:43:e1:73:4b:7a:
                    4b:d5:81:49:1d:18:0a:ae:69:2b:25:0d:32:0c:5d:
                    87:1d:43:5c:d0:72:64:ef:a0:1e:22:f1:42:fe:18:
                    95:81:5a:d6:2d:fe:1f:91:a0:09:db:4b:d2:aa:56:
                    00:5e:69:98:5f:7f:0a:3c:48:7b:f0:e5:f0:be:c7:
                    4d:d1:58:27:e6:3b:db:0f:92:f0:1a:7d:4e:6b:80:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A4:D3:2B:89:23:11:0A:CF:6D:13:81:92:CD:C0:D0:65:A8:79:5A
            X509v3 Authority Key Identifier:
                keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8e:71:6a:8c:d2:05:9f:b8:c4:74:66:2c:19:4c:df:d8:5f:
         c7:a8:1a:b3:44:d7:e9:4d:69:c7:fa:18:fe:af:fd:13:7a:d2:
         2f:c6:b9:67:01:26:69:fc:08:49:13:56:a4:84:24:79:d5:df:
         41:8f:ea:fe:62:d1:7a:3d:62:51:4f:b9:04:17:90:7c:8f:f1:
         66:61:dd:a8:bf:20:5f:63:78:47:77:ec:ee:a2:95:dc:73:43:
         c6:39:21:07:a5:61:f1:cc:5c:5e:89:f2:57:3f:25:07:23:61:
         98:ea:77:18:f3:82:45:36:d1:23:38:87:e7:8c:70:8c:c8:dc:
         ca:4f:c9:7c:9d:31:82:f9:39:42:4f:99:be:f8:90:a5:f7:82:
         1e:4c:4e:64:25:ea:56:86:7f:e6:77:d3:49:4f:b7:50:07:19:
         5f:1b:13:b4:a7:bb:fc:e5:f2:c8:9d:3e:a3:ef:eb:e1:ab:16:
         3f:1c:b7:ff:56:47:8d:75:f2:9c:77:30:45:df:f7:31:c3:3b:
         14:9a:90:89:d4:b7:95:20:e7:0b:d0:8c:41:b9:12:4f:e5:15:
         b6:36:1d:2d:c2:43:51:bc:10:44:c5:24:b0:3b:56:74:04:9c:
         7b:5d:41:a6:6f:29:60:da:8b:9b:78:43:30:58:41:8e:32:5d:
         bf:c4:de:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz
RDcyRTk1MDcwHhcNMjUwNDI4MTkyMDUxWhcNMjUwNTA1MTkyMDUxWjAYMRYwFAYD
VQQDEw02ODBmZDUxMy04YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAto/apm6s6WG2tsjfCfJnaaZhzuwxCs2GHgEqpPbVr0WdlfiJSta/23OIzble
gS3Ydsh59RmVWGNl9VZkeX5/lSj3ql4aZKG8ZTf5vK+WEkwMg4tLhf6Ir/AS6TJj
9GidTnHOVyp71UmUe0OeJMr/kQlOO+juGA514iKsYFBE8VY/n3fNPz/L0es40zY1
oiTzlVdRK7cP8eBmNaaaMF3kkhVkHpM/18SOSs0QFCDVQ+FzS3pL1YFJHRgKrmkr
JQ0yDF2HHUNc0HJk76AeIvFC/hiVgVrWLf4fkaAJ20vSqlYAXmmYX38KPEh78OXw
vsdN0Vgn5jvbD5LwGn1Oa4AiHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSk0yuJ
IxEKz20TgZLNwNBlqHlaMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy
MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ
RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALjnFqjNIFn7jEdGYsGUzf2F/HqBqzRNfpTWnH+hj+r/0TetIvxrln
ASZp/AhJE1akhCR51d9Bj+r+YtF6PWJRT7kEF5B8j/FmYd2ovyBfY3hHd+zuopXc
c0PGOSEHpWHxzFxeifJXPyUHI2GY6ncY84JFNtEjOIfnjHCMyNzKT8l8nTGC+TlC
T5m++JCl94IeTE5kJepWhn/md9NJT7dQBxlfGxO0p7v85fLInT6j7+vhqxY/HLf/
VkeNdfKcdzBF3/cxwzsUmpCJ1LeVIOcL0IxBuRJP5RW2Nh0twkNRvBBExSSwO1Z0
BJx7XUGmbylg2oubeEMwWEGOMl2/xN5G
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:33 2025 by rpki-client on console.sobornost.net