Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
File:                     cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json)
Hash identifier:          XCoBmm8EvBJEtjYWtjynebErwswbE18dw/ebqmzPxtc=
Subject key identifier:   A8:9C:A2:A0:F9:03:B2:28:75:A5:36:BE:58:15:75:1A:6E:13:36:B6
Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
Certificate issuer:       /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Certificate serial:       0621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
Manifest number:          0621
Signing time:             Sat 26 Apr 2025 22:23:39 +0000
Manifest this update:     Sat 26 Apr 2025 22:23:38 +0000
Manifest next update:     Sat 03 May 2025 22:23:38 +0000
Files and hashes:         1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: wIc+33hopjUlGl1jEVUzIw6pwHH0vxjkvhsuoTvMzU4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
        Validity
            Not Before: Apr 26 22:23:38 2025 GMT
            Not After : May  3 22:23:38 2025 GMT
        Subject: CN=680d5cea-7cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:68:31:46:23:54:16:3a:32:33:5f:7a:4e:
                    3e:66:8f:95:8d:10:fc:14:dd:80:fc:8a:e5:82:37:
                    61:ee:b8:6a:db:c3:3e:16:77:b2:56:75:02:88:8b:
                    f0:f7:38:c2:33:7d:df:89:00:3c:d2:d7:2f:13:2e:
                    91:35:e0:df:b8:69:99:14:8f:bc:68:37:28:ad:0d:
                    59:a7:6e:e8:20:ae:69:74:54:29:3a:40:ab:83:f3:
                    60:40:78:d2:c4:1a:d0:8d:2c:ed:05:a5:89:c4:df:
                    b9:0d:f8:20:d3:27:84:36:0a:0e:ef:21:3e:a6:cf:
                    8c:c7:a2:6b:2c:44:c3:bd:36:40:02:ae:c6:d6:86:
                    69:3f:fa:95:78:b8:40:ca:7d:c0:92:ec:b7:43:14:
                    88:29:08:ea:f2:64:ef:ec:ee:6f:45:79:1f:2a:26:
                    05:92:e5:4d:70:1b:0d:54:8e:30:68:cc:aa:7e:ec:
                    2c:9d:e8:8a:26:ec:b6:bb:58:49:d1:b1:7b:c8:1e:
                    56:d4:34:ea:70:b8:b4:e2:a8:b2:04:db:ef:e2:4e:
                    37:86:a4:bf:41:24:a8:6b:1a:99:1c:9a:b9:60:fe:
                    11:90:6f:bd:74:c1:cd:bc:68:ae:b7:c8:20:f7:84:
                    31:de:b5:8c:0e:6e:6d:34:21:e4:8c:57:4c:65:03:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9C:A2:A0:F9:03:B2:28:75:A5:36:BE:58:15:75:1A:6E:13:36:B6
            X509v3 Authority Key Identifier:
                keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9f:7c:0d:11:9a:76:aa:3f:e4:3a:34:aa:70:88:44:c8:85:
         4c:aa:ef:c2:e3:46:41:02:58:06:9d:cb:62:8e:5c:da:d5:55:
         e8:be:22:75:f8:0e:54:54:95:bf:1c:d8:e7:8c:63:48:b9:90:
         84:e3:18:73:71:42:67:24:81:ab:2d:90:d1:d5:98:93:26:27:
         3d:3d:86:9d:a0:21:ea:af:de:bf:d2:af:cc:99:7b:76:83:58:
         c4:73:b4:55:ec:fa:ef:53:a7:d8:5e:65:75:b4:88:8d:b0:bb:
         d5:33:e0:61:80:03:d2:21:b1:54:7a:4c:ad:92:94:e5:2a:7b:
         6e:c6:90:ea:0c:73:26:67:b2:41:57:cd:e5:36:a5:90:eb:54:
         5c:82:b8:54:20:a6:23:69:d4:93:cc:a8:a2:3c:e0:5a:7d:5b:
         c0:73:62:9e:48:ec:fd:b1:59:b5:62:0a:63:a7:5c:e0:d2:44:
         7d:90:fe:e7:38:79:f2:86:fd:33:6f:09:24:d8:64:5c:bb:66:
         3a:8e:42:07:92:23:c1:b1:c3:56:dd:36:b9:91:46:c5:2b:78:
         c1:b6:0b:2c:30:32:13:47:2a:f5:b0:31:40:72:49:65:f9:8c:
         0b:7e:cd:46:66:2f:fb:08:25:90:0e:72:2c:bb:f3:a9:aa:fe:
         49:b9:81:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy
MDkwMjZEQUEwHhcNMjUwNDI2MjIyMzM4WhcNMjUwNTAzMjIyMzM4WjAYMRYwFAYD
VQQDEw02ODBkNWNlYS03Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArXloMUYjVBY6MjNfek4+Zo+VjRD8FN2A/Irlgjdh7rhq28M+FneyVnUCiIvw
9zjCM33fiQA80tcvEy6RNeDfuGmZFI+8aDcorQ1Zp27oIK5pdFQpOkCrg/NgQHjS
xBrQjSztBaWJxN+5Dfgg0yeENgoO7yE+ps+Mx6JrLETDvTZAAq7G1oZpP/qVeLhA
yn3Akuy3QxSIKQjq8mTv7O5vRXkfKiYFkuVNcBsNVI4waMyqfuwsneiKJuy2u1hJ
0bF7yB5W1DTqcLi04qiyBNvv4k43hqS/QSSoaxqZHJq5YP4RkG+9dMHNvGiut8gg
94Qx3rWMDm5tNCHkjFdMZQPPPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKicoqD5
A7IodaU2vlgVdRpuEza2MB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz
NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni
YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz
X09vaWc2OFBGcllna0NiYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrn3wNEZp2qj/kOjSqcIhEyIVMqu/C40ZBAlgGnctijlza1VXoviJ1
+A5UVJW/HNjnjGNIuZCE4xhzcUJnJIGrLZDR1ZiTJic9PYadoCHqr96/0q/MmXt2
g1jEc7RV7PrvU6fYXmV1tIiNsLvVM+BhgAPSIbFUekytkpTlKntuxpDqDHMmZ7JB
V83lNqWQ61RcgrhUIKYjadSTzKiiPOBafVvAc2KeSOz9sVm1Ygpjp1zg0kR9kP7n
OHnyhv0zbwkk2GRcu2Y6jkIHkiPBscNW3Ta5kUbFK3jBtgssMDITRyr1sDFAckll
+YwLfs1GZi/7CCWQDnIsu/Opqv5JuYE/
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:11 2025 by rpki-client on console.sobornost.net