Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File:                     480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier:          emMKCb8YFj1MSJ43c3JlQRvVM24JSHsmGLlhcDr3LEw=
Subject key identifier:   DC:B9:BE:DD:E9:D1:7A:46:D3:DF:D3:64:18:82:6F:58:BD:B3:DE:0E
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer:       /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number:          054F
Signing time:             Sat 26 Apr 2025 22:21:46 +0000
Manifest this update:     Sat 26 Apr 2025 22:21:45 +0000
Manifest next update:     Sat 03 May 2025 22:21:45 +0000
Files and hashes:         1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: f6lUxUYDC+te/40A5Xd1BCcO1dzhNf8qgXClavNFvxA=)
                          2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
        Validity
            Not Before: Apr 26 22:21:45 2025 GMT
            Not After : May  3 22:21:45 2025 GMT
        Subject: CN=680d5c7a-b387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:dd:14:27:be:60:a2:07:76:af:c5:75:a3:
                    fd:13:81:2d:fe:86:32:34:48:c2:d2:14:83:10:c5:
                    9b:11:15:73:b6:a2:b6:91:4e:f8:52:cc:87:6a:de:
                    1f:de:80:f7:85:98:8b:94:fa:db:29:3c:94:cd:f3:
                    3b:7a:a4:0a:61:f9:c5:ad:4a:dd:c5:1a:42:21:fe:
                    b5:61:7d:0d:ab:49:cf:45:66:25:ff:84:a2:0f:17:
                    df:81:05:e0:ab:5e:1a:9b:4a:26:ae:cd:b5:5e:8a:
                    04:1b:32:75:1d:f9:a2:03:8c:0a:99:3c:92:0b:30:
                    42:c9:0a:ad:08:32:f3:68:c1:5c:01:5f:1d:60:be:
                    fe:86:e8:07:6e:6f:49:db:e9:83:a6:6b:91:81:e3:
                    7c:eb:f9:e0:18:3e:eb:05:dc:9b:2a:b6:5d:d6:9f:
                    15:3f:23:1b:a2:a9:df:4d:24:e0:77:38:d7:ae:07:
                    2f:f9:a8:d3:e8:ad:38:f7:99:e4:11:fc:f1:15:1b:
                    0f:41:fb:af:32:b8:2e:27:e5:08:27:3c:51:2a:05:
                    8b:c2:f8:ec:d3:ac:41:4f:c0:87:69:37:5a:23:6c:
                    26:4f:06:da:c2:22:43:95:76:9c:b9:79:44:ff:06:
                    ed:c3:7d:20:23:96:ec:cf:1b:0f:94:f6:dd:a2:11:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B9:BE:DD:E9:D1:7A:46:D3:DF:D3:64:18:82:6F:58:BD:B3:DE:0E
            X509v3 Authority Key Identifier:
                keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:28:3e:3e:aa:ac:5c:af:10:05:48:fd:2a:8d:d2:52:d6:
         cf:2b:de:b5:be:dd:75:5c:54:c7:f1:81:8e:e4:fb:a1:53:1a:
         5f:2b:25:99:ff:b6:ee:8c:d2:db:36:f3:c1:94:88:55:67:94:
         37:69:23:cf:8c:b8:00:25:df:41:f6:1c:aa:6a:13:e4:fa:3d:
         02:e1:fd:13:35:6b:f6:d6:fe:f7:d9:ee:9f:c6:71:47:65:43:
         93:d9:b6:be:ff:0e:d2:ff:7e:fb:49:ec:19:c6:43:df:7e:20:
         67:04:ff:bc:c2:eb:33:b6:3a:cc:61:35:2b:69:09:64:81:2b:
         0e:ad:dd:ae:4e:d9:67:18:bc:10:06:4f:d4:f3:c5:31:02:4d:
         94:6f:b3:fa:55:d5:95:05:02:62:e3:52:b8:94:64:41:a1:c6:
         68:e6:4b:1c:69:aa:04:f1:9c:1e:7f:b2:8a:4e:d5:94:76:7a:
         bd:ae:c3:b9:dd:32:81:0a:e1:0b:3c:ef:9a:e0:2e:33:f5:b7:
         5b:3b:13:92:37:ae:3e:c2:c7:d0:35:82:ca:76:65:ee:d2:61:
         79:3e:cf:98:99:6b:04:06:87:1f:1e:00:cb:cf:99:83:f0:17:
         3f:a4:12:90:a0:b4:6f:64:00:9c:64:e6:da:3d:3f:ee:b1:17:
         25:d8:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:11 2025 by rpki-client on console.sobornost.net