Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
File:                     7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json)
Hash identifier:          TT5rCRMyPwTJbE9ex892EESxzb47MDOIE0+xx1XPV7w=
Subject key identifier:   8E:FF:B9:4C:B6:A5:60:B3:BC:F1:E3:C0:28:1B:B9:5D:D8:E3:51:BF
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       0325
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
Manifest number:          031F
Signing time:             Sun 27 Apr 2025 00:48:18 +0000
Manifest this update:     Sun 27 Apr 2025 00:48:18 +0000
Manifest next update:     Sun 04 May 2025 00:48:18 +0000
Files and hashes:         1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: US9rGMXlDFx7x1nFHNZZAbeYdBxof1JrIiMw1cqlaQY=)
                          2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: z4vQqgZhpqZXS+GtFlO73cYGprnonSTGtg6l7U/hdMg=)
                          3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: m3FNoE8x/APaB37yvI31cS5HnGrXCqQFoxWPhTaz/1c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Apr 27 00:48:18 2025 GMT
            Not After : May  4 00:48:18 2025 GMT
        Subject: CN=680d7ed2-e080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:0d:ba:40:bc:37:12:48:0a:91:6a:1d:9e:
                    10:3f:19:73:e4:50:a8:eb:77:0d:1e:f6:5f:fa:c4:
                    b5:1a:54:61:c6:3e:3e:ee:d4:f1:85:3c:51:b1:6c:
                    e2:21:e9:19:52:a0:74:6b:bf:b4:96:6e:ad:25:7b:
                    d8:81:b9:32:1d:8d:58:8d:1b:ad:32:ad:98:d2:a6:
                    56:d9:d0:8c:8b:38:b6:de:5c:14:8f:aa:8d:ec:98:
                    b2:82:79:ce:ec:5c:13:1b:f7:56:5c:f6:90:b5:f6:
                    72:5b:f7:da:52:4e:23:48:db:a8:2f:94:93:ea:ea:
                    01:a8:75:b3:5c:97:71:43:a7:49:83:b9:ff:e4:07:
                    0f:43:3d:3f:0e:50:3e:ee:b9:26:ce:d2:c5:38:dc:
                    09:76:ee:ea:92:ee:96:10:cb:4d:0c:f5:24:49:a2:
                    3c:7b:fe:a8:96:6c:d6:c8:f3:e8:a2:6e:b2:3a:00:
                    79:99:a7:bb:41:b5:e6:f3:57:b3:3c:7e:cf:3e:40:
                    2a:ba:df:b7:4b:b0:54:47:e5:26:84:61:22:56:6d:
                    ea:a1:07:dc:d4:ea:13:e3:4c:9d:f4:88:ca:ec:57:
                    12:2c:ee:cd:fe:66:0f:9b:db:81:c4:96:6a:e9:e2:
                    27:27:0f:56:f6:f1:a2:9d:93:20:18:c0:e3:7e:25:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FF:B9:4C:B6:A5:60:B3:BC:F1:E3:C0:28:1B:B9:5D:D8:E3:51:BF
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:88:3d:68:97:a4:e1:1f:85:62:18:0c:ae:6b:64:ed:e3:62:
         35:53:7f:36:ce:a0:0f:ad:be:83:42:3a:f5:62:0d:66:17:7e:
         89:49:7a:c5:0c:88:70:ac:1b:c0:e5:90:e3:6e:d7:df:a1:ad:
         1d:1f:f2:e5:be:90:fe:9f:92:fe:ca:ce:c2:e6:c7:e7:93:20:
         f5:db:ed:3f:b2:bf:7a:9c:94:9f:c0:e3:25:c3:6f:b9:e3:18:
         6e:a1:bc:21:83:e7:23:d9:a8:f6:da:1c:90:81:1a:a1:18:6e:
         c9:8e:1e:a8:61:0f:2b:74:9d:b6:38:da:da:ba:4d:cb:f6:aa:
         7a:ad:5a:c8:18:e0:0b:bd:68:19:7d:b6:e1:a7:36:66:c3:52:
         46:50:be:67:d1:03:65:31:52:5d:51:86:ee:a1:d6:a2:07:05:
         aa:5a:93:5d:68:b9:cb:7c:a5:02:19:5b:72:2a:8d:42:d2:46:
         77:bd:a7:f0:4a:02:fd:ea:7f:74:7e:46:c0:3a:c6:8f:08:6f:
         ec:18:a5:35:59:47:54:0f:2f:de:9f:f5:ab:57:a0:93:fd:84:
         27:07:0a:0f:9c:af:41:21:5b:d3:23:1c:e1:b3:62:0d:f6:83:
         9d:7c:dd:4d:d7:37:81:e3:57:58:a9:3b:86:b5:e0:a6:a4:58:
         10:32:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:11 2025 by rpki-client on console.sobornost.net