Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
File:                     c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json)
Hash identifier:          zIadaWtOXFlbF/0zRH/a4PNR8z6qOX3xciL2T1CnxL4=
Subject key identifier:   CD:06:93:C7:91:33:F1:89:91:07:78:34:41:80:3C:D3:73:8A:0E:0C
Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
Certificate issuer:       /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
Manifest number:          052E
Signing time:             Sat 26 Apr 2025 23:17:57 +0000
Manifest this update:     Sat 26 Apr 2025 23:17:56 +0000
Manifest next update:     Sat 03 May 2025 23:17:56 +0000
Files and hashes:         1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: mc/YkM1vaDZQNp8TzbFo4m/VpWDkDS8z0M7xyPg/KGI=)
                          2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: J4bjJ7hQ5fLz6+3zFmcF7l6WC9eO2YDHrGDEilJ+wvY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
        Validity
            Not Before: Apr 26 23:17:56 2025 GMT
            Not After : May  3 23:17:56 2025 GMT
        Subject: CN=680d69a5-dd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:9e:4a:a9:99:36:60:37:68:0b:21:5b:25:
                    70:d7:6f:5d:3c:f4:34:8e:55:59:57:27:fd:86:88:
                    24:90:76:2b:b4:88:58:2f:9a:f3:28:db:52:6b:9f:
                    e1:c9:1d:f3:c7:ba:74:d6:fa:50:c8:80:8a:80:7c:
                    98:ad:7c:13:54:80:ed:d2:f7:34:c6:b0:80:8f:7b:
                    c0:e8:51:01:f9:f5:67:37:70:66:19:45:e2:3f:6b:
                    e3:bd:4e:d0:dc:f2:b3:ef:b3:1e:c0:48:61:bc:cd:
                    2c:50:e9:47:c5:a0:62:69:39:e0:61:e3:4d:db:b7:
                    4e:d4:ce:83:6a:4f:93:a8:5c:4c:a7:ee:86:6d:55:
                    9b:34:4e:f8:0e:b6:4e:bd:2b:d1:8b:15:ec:3a:e9:
                    27:57:1d:58:96:ef:ff:e9:09:f7:77:55:ad:12:1a:
                    37:d8:9d:a9:84:97:39:10:de:a2:4b:ec:1b:cd:e7:
                    4f:37:4a:20:5c:c1:71:81:08:3b:a2:17:f8:25:c4:
                    0a:bc:e3:ed:c5:62:44:30:96:22:60:71:6f:3b:c0:
                    68:9a:fe:cb:f1:6f:23:fb:95:97:b8:38:db:7a:e0:
                    47:da:d4:da:3c:de:51:74:25:96:f0:6e:a5:ec:63:
                    7c:95:61:0c:3e:15:c1:64:00:f9:e1:a3:f1:02:cc:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:06:93:C7:91:33:F1:89:91:07:78:34:41:80:3C:D3:73:8A:0E:0C
            X509v3 Authority Key Identifier:
                keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:69:39:e6:0b:f7:0f:3c:89:f2:94:1c:0d:ec:f9:6e:ef:
         72:40:fa:35:3e:99:09:0a:98:7b:23:07:6e:4e:37:1f:e5:29:
         83:bc:83:56:1d:af:39:34:51:e4:9a:54:26:d1:7f:af:e5:3b:
         40:ea:0d:53:a5:a3:72:6d:ea:df:5e:62:40:e0:35:bd:2a:5a:
         9d:56:8c:1d:b6:42:58:e4:9e:09:af:a8:17:04:ec:b7:ac:bf:
         91:a3:62:5a:ef:8b:76:a6:9a:97:06:2a:c6:51:bc:f6:ce:ad:
         50:bb:a3:f3:af:3f:b9:28:04:32:ca:4c:18:d7:73:48:c7:8d:
         07:15:98:f6:15:e0:52:b9:6d:61:59:b4:41:47:87:e8:cf:27:
         c0:c9:3f:d1:d0:18:53:e4:92:3d:d7:25:ee:ad:49:2c:e9:43:
         ef:0a:b9:a2:f5:25:91:b6:0e:09:89:23:86:69:ee:ee:e6:6a:
         9d:64:df:a2:34:93:28:c6:6e:75:c4:45:8a:ea:f4:82:d0:ff:
         ed:6f:bc:84:28:36:c6:ec:26:8d:7c:89:ad:2d:d4:71:6a:6f:
         09:b2:ff:5a:a4:78:68:6d:5f:87:ad:85:06:36:85:70:88:e4:
         d5:39:c9:be:6a:15:66:bf:ce:70:46:8d:10:a4:65:76:73:f9:
         37:b3:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:11 2025 by rpki-client on console.sobornost.net