Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
File:                     uD4K6Pgr-gYejEvHvnPpuANUDWM.mft (raw, json)
Hash identifier:          gSM8zwpqtnSVVcVjHb2lRdpDGav3mMu4XqUnJEzU52g=
Subject key identifier:   B5:9B:0E:C5:5B:3A:BC:A7:09:FB:EE:A6:4A:2E:51:97:81:54:4C:8A
Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
Certificate issuer:       /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
Certificate serial:       0319
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
Manifest number:          0310
Signing time:             Sun 27 Apr 2025 00:51:11 +0000
Manifest this update:     Sun 27 Apr 2025 00:51:10 +0000
Manifest next update:     Sun 04 May 2025 00:51:10 +0000
Files and hashes:         1: uD4K6Pgr-gYejEvHvnPpuANUDWM.crl (hash: G4iVqksIY4ucD3RSVvTc5wufX6HzFvgRWE2Q7RfGDaw=)
                          2: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (hash: erIavO1BEA6yuxW1Ddxiq0YuolkG7uHYxff0nzGvNyU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl
                          rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180386, serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
        Validity
            Not Before: Apr 27 00:51:10 2025 GMT
            Not After : May  4 00:51:10 2025 GMT
        Subject: CN=680d7f7f-0e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:53:e1:e3:ca:06:e1:b2:fe:7e:cf:44:a2:
                    a0:39:c3:5c:29:12:6d:19:58:2d:78:7a:bd:e2:89:
                    f8:b4:af:a9:8f:07:ba:ee:c1:8b:15:8d:c0:6f:63:
                    27:05:88:e9:6f:00:0f:8c:69:3d:39:26:a5:b3:a5:
                    86:21:71:15:87:10:11:a5:3c:0d:61:d2:bd:b1:fa:
                    6a:b2:90:55:b6:b9:b4:40:35:a3:a0:ae:02:5e:4d:
                    ab:83:52:81:0d:32:c4:13:65:aa:85:21:d8:0b:46:
                    5b:a0:cd:1e:d7:bb:84:60:5f:5b:1f:d5:79:be:8e:
                    2d:a0:4d:ef:68:88:10:89:4c:3b:51:16:c6:bc:2e:
                    03:2b:06:6f:5b:65:02:3a:2f:64:0c:6b:7e:a9:47:
                    22:16:08:33:30:69:90:ce:04:4a:53:c9:f0:f9:26:
                    fa:bc:1e:97:3a:31:d0:83:65:4e:4f:dd:25:06:9c:
                    87:98:f5:a9:b5:43:eb:5c:b5:79:4e:b5:e9:f1:d4:
                    19:e6:78:db:07:46:0b:6f:13:40:67:f4:e7:e6:90:
                    25:e0:a2:45:44:92:f6:ac:e7:19:1c:38:f7:fc:d2:
                    1d:94:cc:3d:e8:76:93:83:0d:90:68:eb:95:f3:c0:
                    36:d5:d2:75:be:29:ca:f9:89:aa:fd:a5:cd:ca:55:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:0E:C5:5B:3A:BC:A7:09:FB:EE:A6:4A:2E:51:97:81:54:4C:8A
            X509v3 Authority Key Identifier:
                keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f2:47:6b:1d:06:1d:3f:5c:7c:e5:bf:bf:c9:d1:b3:01:cd:
         2c:99:9e:a3:62:03:70:bf:e4:e7:01:e0:26:52:b8:1e:4b:9a:
         6b:1a:e0:83:9e:c3:5e:1b:3e:28:92:0f:14:1d:a8:ae:80:2f:
         14:bb:e9:5b:9f:a5:7e:37:ba:15:a6:37:57:a5:ed:b4:20:ce:
         64:de:14:68:d0:41:38:e6:d6:d0:e3:be:7d:4b:99:3d:d1:3f:
         47:2f:4b:e6:a5:73:31:35:95:ba:7c:c4:91:48:71:58:52:82:
         01:d3:93:2e:8b:ac:78:6d:22:6c:3d:86:c2:38:1d:60:04:67:
         c5:8a:00:da:7f:6a:b0:aa:19:08:f6:fc:6c:71:cc:2f:f2:4f:
         11:a8:13:ec:b3:42:d7:10:e2:db:e3:a9:f5:a4:14:88:56:df:
         e7:af:3e:12:6b:eb:0d:4c:3c:45:d1:10:3a:d5:0b:0f:2e:1a:
         a9:21:ac:62:22:57:bb:26:48:e8:e1:48:a5:bf:7a:ec:1d:0c:
         67:54:3b:52:78:e2:2f:1c:d9:c3:93:a2:84:bd:15:3c:29:99:
         68:07:c6:e8:5e:71:0e:91:e0:8e:77:57:a1:58:e7:67:1f:61:
         2b:a4:4b:0f:6d:f7:93:bc:1e:c6:55:93:f8:61:2c:30:4a:83:
         1c:f2:d1:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4
MDM1NDBENjMwHhcNMjUwNDI3MDA1MTEwWhcNMjUwNTA0MDA1MTEwWjAYMRYwFAYD
VQQDEw02ODBkN2Y3Zi0wZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8dT4ePKBuGy/n7PRKKgOcNcKRJtGVgteHq94on4tK+pjwe67sGLFY3Ab2Mn
BYjpbwAPjGk9OSals6WGIXEVhxARpTwNYdK9sfpqspBVtrm0QDWjoK4CXk2rg1KB
DTLEE2WqhSHYC0ZboM0e17uEYF9bH9V5vo4toE3vaIgQiUw7URbGvC4DKwZvW2UC
Oi9kDGt+qUciFggzMGmQzgRKU8nw+Sb6vB6XOjHQg2VOT90lBpyHmPWptUPrXLV5
TrXp8dQZ5njbB0YLbxNAZ/Tn5pAl4KJFRJL2rOcZHDj3/NIdlMw96HaTgw2QaOuV
88A21dJ1vinK+Ymq/aXNylXKGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWbDsVb
OrynCfvupkouUZeBVEyKMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND
RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDM4Ni8wNkY4NDA4Q0NDRjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1n
WWVqRXZIdm5QcHVBTlVEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS8kdrHQYdP1x85b+/ydGzAc0smZ6jYgNwv+TnAeAmUrgeS5prGuCD
nsNeGz4okg8UHaiugC8Uu+lbn6V+N7oVpjdXpe20IM5k3hRo0EE45tbQ4759S5k9
0T9HL0vmpXMxNZW6fMSRSHFYUoIB05Mui6x4bSJsPYbCOB1gBGfFigDaf2qwqhkI
9vxsccwv8k8RqBPss0LXEOLb46n1pBSIVt/nrz4Sa+sNTDxF0RA61QsPLhqpIaxi
Ile7Jkjo4Uilv3rsHQxnVDtSeOIvHNnDk6KEvRU8KZloB8boXnEOkeCOd1ehWOdn
H2ErpEsPbfeTvB7GVZP4YSwwSoMc8tEK
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net