Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
File:                     jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft (raw, json)
Hash identifier:          TKkFDWaQrnsTEanyqsTeBTyNayfW1npi02p/D4HuKIk=
Subject key identifier:   2D:D6:0D:D0:13:06:C1:00:DF:A8:D9:24:D7:F3:62:FC:E9:1C:59:ED
Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F
Certificate issuer:       /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F
Certificate serial:       0314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
Manifest number:          030E
Signing time:             Sun 27 Apr 2025 00:51:24 +0000
Manifest this update:     Sun 27 Apr 2025 00:51:24 +0000
Manifest next update:     Sun 04 May 2025 00:51:24 +0000
Files and hashes:         1: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl (hash: r1aBk5n6Kf7OvRiY5fNxwoHg2FFd8zlY4DggkReVdaQ=)
                          2: 9157BBDACD0611EC9D520C1DC4F9AE02.roa (hash: YtkawvfO7yeuU6y5W4AKOD+xrJidxM5yq8UxdQskunc=)
                          3: 0E3C1B3E7F9B11EFB3A18650C4F9AE02.roa (hash: NTWtz3XRI466vgMgJNYPHPV7KaEaKes8YjQ4ENseuEE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl
                          rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918223E, serialNumber=8E7E4A03582039E461ECED910008C9827362359F
        Validity
            Not Before: Apr 27 00:51:24 2025 GMT
            Not After : May  4 00:51:24 2025 GMT
        Subject: CN=680d7f8c-6a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:54:48:2a:78:bc:0d:d1:f2:8c:64:03:82:
                    fa:e2:4e:db:20:49:ea:a9:de:0f:31:53:15:b6:e8:
                    3c:45:93:a2:ad:cd:9a:da:ff:30:f6:d0:f1:ca:08:
                    d5:e7:01:2e:3d:0d:a0:dd:16:02:b0:52:9d:c1:59:
                    d9:3d:bd:41:5e:13:1d:85:82:8f:13:94:4b:3c:67:
                    65:97:de:73:40:19:a9:ab:bd:61:c1:4d:ec:d2:d0:
                    80:f4:06:a3:e6:8e:f9:e3:d9:d3:20:74:55:73:53:
                    43:01:4e:85:48:43:d7:b3:98:68:74:e8:fd:03:29:
                    52:87:b1:cb:0e:a5:56:05:3e:20:54:4a:f4:e2:f4:
                    bf:ef:94:57:3b:a1:7a:f4:a6:87:a3:ed:d8:e1:69:
                    99:c6:2e:4e:e3:75:da:38:f8:2e:99:84:b6:ac:e2:
                    1c:99:97:62:00:ee:02:ba:bc:be:7c:07:ae:fa:8b:
                    40:1d:33:7f:d9:06:79:a3:cd:b8:65:03:6a:28:93:
                    c7:f6:6f:e4:18:81:2b:19:ee:a2:45:f6:26:ed:d8:
                    92:70:10:44:f6:41:42:c0:cf:05:c3:c7:f0:32:3e:
                    6d:73:ea:3b:01:9a:80:23:54:a0:47:cb:c1:cf:54:
                    4d:0a:cf:81:79:e3:a8:2c:88:59:ed:d0:82:44:ab:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D6:0D:D0:13:06:C1:00:DF:A8:D9:24:D7:F3:62:FC:E9:1C:59:ED
            X509v3 Authority Key Identifier:
                keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:1c:f0:0f:24:15:c0:6b:5e:d2:0b:a0:68:b6:09:54:9e:
         32:e1:0c:7a:de:86:d8:c7:8b:49:53:97:cc:f8:8e:25:26:c0:
         8e:4e:1b:fd:9d:7f:a4:9e:3b:51:a7:b4:df:e6:d9:ab:d3:14:
         31:88:a7:8a:c3:91:6b:d6:6f:87:2c:16:2f:10:99:9f:82:be:
         ba:0d:85:42:4a:00:db:71:0b:0e:c3:31:10:83:48:7c:2c:7d:
         4e:2d:5a:a7:69:e9:48:f2:6f:43:05:58:c3:72:5f:0e:9b:12:
         1b:83:24:91:66:8c:27:f0:22:ac:60:c2:a9:90:d7:2b:41:89:
         35:8a:2c:a8:4d:46:ab:4a:90:61:3a:33:75:a6:59:b2:80:ae:
         e5:78:54:ed:0c:5f:22:7f:14:25:46:f1:1f:83:2c:4f:c4:82:
         b6:1d:90:b4:db:7a:b9:a3:ae:1d:3b:ba:f7:2c:75:80:0f:1b:
         a1:f5:26:08:61:d6:88:11:59:79:b6:01:05:e1:e3:cd:b5:b2:
         a8:14:b8:a6:88:d7:71:5b:fe:c5:79:6e:0f:09:17:46:82:48:
         b9:44:4a:c9:41:c9:3b:a7:61:c8:f7:e7:fc:d7:c6:79:1d:2d:
         7b:e1:b1:c5:0f:e4:2c:34:06:3c:4b:7c:ff:e7:21:ea:28:ff:
         5e:fb:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:11 2025 by rpki-client on console.sobornost.net