Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
File:                     L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json)
Hash identifier:          14mkIg8udB3xnzBFdIUaAb7Pcg//UUFvAnMS1HNLKvM=
Subject key identifier:   5D:F7:8B:60:78:68:8C:A8:6E:1C:6E:C2:9A:C6:B9:56:BA:8D:A9:80
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Certificate issuer:       /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
Manifest number:          033E
Signing time:             Sun 27 Apr 2025 00:41:56 +0000
Manifest this update:     Sun 27 Apr 2025 00:41:55 +0000
Manifest next update:     Sun 04 May 2025 00:41:55 +0000
Files and hashes:         1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: pwlylfBLjk04bZNpOWViyDO1WmSZSG5XI8EbSdycFbM=)
                          2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: +dFNC6bX5H+V6njzLbV2Ca6KkTrT3TtAm0EkKfPs5f0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
                          rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
        Validity
            Not Before: Apr 27 00:41:55 2025 GMT
            Not After : May  4 00:41:55 2025 GMT
        Subject: CN=680d7d54-4bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:46:58:6c:d3:44:97:82:a1:62:af:ca:b2:
                    15:33:04:95:38:cb:19:b3:5c:be:25:44:ce:35:b8:
                    aa:52:3b:19:f9:4e:dc:74:2f:1c:f1:28:7d:49:0b:
                    19:3f:9b:dd:1b:e0:0d:54:fe:ef:3b:01:17:ee:b6:
                    a8:62:75:43:26:da:d8:ec:09:fd:36:06:cb:72:5d:
                    b3:9e:bf:d7:c4:4d:e1:a7:48:97:21:8c:ed:1b:4e:
                    25:cf:68:fe:52:7b:b5:6d:fc:5d:d2:16:a3:fe:e7:
                    82:87:70:ef:3b:de:1d:2b:a5:98:3a:c6:61:81:b2:
                    6e:d2:eb:bc:0f:01:c8:4d:92:44:70:bd:e1:13:7a:
                    19:29:45:1c:e4:55:af:e7:f2:5b:16:de:25:0f:56:
                    ac:2b:6a:a4:26:42:67:0a:fd:2a:72:c7:47:31:b9:
                    44:f5:c1:6a:43:ec:26:43:dd:ff:40:9e:55:a9:11:
                    27:fc:1f:c3:b5:00:5d:b1:3d:ee:8b:1c:ea:37:b7:
                    23:c9:14:55:d2:fe:3a:bd:02:77:23:1d:54:e6:d9:
                    18:ba:a0:a5:4e:5b:37:f7:53:11:c8:8e:be:54:6f:
                    65:58:1a:99:ce:a7:c5:05:5e:e6:42:a1:78:5a:93:
                    e9:75:ad:cd:5d:a7:60:fa:e3:6f:93:3b:4d:63:8b:
                    5b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F7:8B:60:78:68:8C:A8:6E:1C:6E:C2:9A:C6:B9:56:BA:8D:A9:80
            X509v3 Authority Key Identifier:
                keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:69:0f:37:5d:c1:53:5f:c4:e5:33:22:75:47:53:72:b7:
         71:ef:1a:83:7c:01:ee:35:58:c4:01:5b:a1:d0:5b:d0:e5:7a:
         47:de:1d:d5:9e:3d:4b:db:72:f9:06:4c:b9:92:3d:b0:6e:a1:
         3e:7d:58:61:37:51:08:a1:ec:78:93:df:2b:26:dd:c8:31:6d:
         b4:4b:85:2c:2e:e6:49:4b:df:a7:92:f6:f9:04:fe:13:e1:3d:
         ed:9a:ca:22:c2:ad:4c:af:7d:7b:90:fb:42:9a:ad:34:fa:e8:
         0b:41:b7:54:bc:87:08:91:7f:9a:35:20:ee:0e:f5:f2:27:f7:
         48:ad:e5:a1:2c:6e:0a:27:b4:79:30:a9:df:81:07:5b:cd:5d:
         76:ce:41:e5:9d:11:a5:54:bb:8f:7f:1f:cb:09:3a:31:c8:c4:
         3a:b3:91:57:01:53:55:31:56:38:7d:45:47:96:c1:4a:e2:01:
         4e:d9:4a:56:ad:a7:dd:b3:5b:c0:97:63:70:be:9f:44:fb:8a:
         d1:76:1d:74:7e:26:40:bb:6e:02:af:17:b8:55:90:c5:59:88:
         42:02:ab:7b:d5:8a:b2:f8:3f:4d:64:8b:bd:28:f0:a2:3d:11:
         23:0d:3f:de:02:d5:f7:f6:0d:bc:fc:36:9e:23:ad:77:a5:a2:
         66:be:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net