Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
File:                     YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json)
Hash identifier:          sv9LGyBfXR0atbJ7TKWIyuHC0IeYvQ2LODY9HdUnk/w=
Subject key identifier:   79:E3:45:EA:A9:F5:01:B1:D8:58:D5:EE:2E:87:12:00:8A:E6:21:68
Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7
Certificate issuer:       /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
Manifest number:          60
Signing time:             Sun 27 Apr 2025 05:55:28 +0000
Manifest this update:     Sun 27 Apr 2025 05:55:27 +0000
Manifest next update:     Sun 04 May 2025 05:55:27 +0000
Files and hashes:         1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: e2Q2EpgnSAMV3r/51MpaTf4GRTNBW8IS/oi03JVVZhc=)
                          2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: +UFQWnXReAket39ycprPx9UMMcj46jyJIl0XNC8+2yo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl
                          rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
        Validity
            Not Before: Apr 27 05:55:27 2025 GMT
            Not After : May  4 05:55:27 2025 GMT
        Subject: CN=680dc6cf-5903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9d:ff:cd:88:cb:03:06:71:5f:5c:3b:ff:12:
                    7d:10:4c:46:87:7d:bd:df:17:f9:38:42:4f:6f:b4:
                    cf:a6:89:a7:29:19:c7:e7:d8:26:3c:64:03:a8:73:
                    c3:8f:2a:0f:84:12:ec:e4:72:10:37:e2:17:20:78:
                    a7:90:e7:63:c4:5c:46:8a:6a:17:77:0a:7d:b8:d0:
                    ac:f0:e7:51:80:22:e1:5c:2e:56:8b:34:d0:f1:ae:
                    e9:72:88:87:2b:55:ee:d5:8a:f6:ed:f5:27:3e:ac:
                    3c:5c:02:51:e9:6a:e0:b8:1e:01:20:c1:ac:78:b9:
                    ac:70:50:df:c3:0e:bb:4b:18:45:f3:fa:c9:7c:0d:
                    75:1f:b0:57:d9:9e:c8:60:fe:69:a2:4a:31:37:73:
                    0d:1b:4e:06:fe:ef:c6:99:c4:d5:9c:8a:a7:22:8b:
                    e2:1f:4d:a3:57:d9:5c:10:7b:a6:23:4e:d5:b1:cb:
                    36:e6:42:3a:eb:d3:4f:1e:4d:38:27:36:df:75:ce:
                    56:41:57:48:ea:92:a2:bb:94:79:7a:c8:a0:66:59:
                    59:bf:47:9e:3c:73:db:a3:fe:0a:bd:6d:14:c6:cd:
                    0e:5e:08:7c:42:0d:51:f3:fb:84:da:b8:7c:be:3a:
                    33:9f:44:36:90:b7:01:6d:36:1f:6d:ad:62:44:a3:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:45:EA:A9:F5:01:B1:D8:58:D5:EE:2E:87:12:00:8A:E6:21:68
            X509v3 Authority Key Identifier:
                keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:7b:a2:b0:e3:19:12:20:a7:9a:7c:86:2c:c8:1f:94:77:
         87:07:0d:11:e1:08:a6:2c:1f:ea:d0:d4:80:8d:11:9a:4d:51:
         80:2c:4d:40:31:c5:e6:84:dd:63:f7:27:73:bf:1a:76:86:77:
         00:61:56:75:9f:1e:ae:b1:49:59:17:0e:6d:69:1d:62:07:0f:
         f4:3f:10:c5:7d:d9:13:fa:b1:6f:27:de:94:67:b8:41:8f:3a:
         64:6d:9a:08:a4:f8:ca:b6:6a:3c:04:18:00:3a:91:97:4f:ef:
         88:4d:62:c6:68:42:84:be:75:3e:a5:e1:ef:a9:2d:5d:36:b8:
         0c:ae:13:75:90:82:30:d5:97:ed:b2:6f:35:b3:41:be:f0:0b:
         ac:9c:8c:24:eb:8f:d7:55:72:89:bc:c8:04:01:e6:28:3a:e9:
         a0:25:e2:4c:aa:d3:db:a5:f6:dd:a8:25:19:e2:75:25:6f:d6:
         f0:c1:a4:e7:75:56:b4:74:c6:7a:14:07:ec:b2:a2:66:74:65:
         ec:9b:e6:58:f8:8b:36:56:45:2a:eb:52:89:19:f7:15:7b:bb:
         66:22:e1:b9:4a:ff:4a:0c:20:e4:82:9a:e3:c3:e4:80:d8:4d:
         ed:c1:5e:26:72:ce:c2:a4:ca:ef:f5:4b:36:90:72:da:6b:42:
         09:9b:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net