Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          NZqgYEnvQnxKUMmAy+VcQc3QwFsS63zCi1B2qj2AOVs=
Subject key identifier:   E1:C7:78:B3:FE:FE:6C:4B:0A:FA:2F:38:A9:B7:DA:37:39:0E:DA:9B
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       0536
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          0523
Signing time:             Sat 26 Apr 2025 23:16:23 +0000
Manifest this update:     Sat 26 Apr 2025 23:16:23 +0000
Manifest next update:     Sat 03 May 2025 23:16:23 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: uvdIxJx+l8vH0QX7VsHzQFFq1FRXvj/gyyX24Wya+Uo=)
                          2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 9EHn/O7TWbIzxUUf7sMxruBfENB+nlmVCyCtMi2XPLc=)
                          3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: lPjfdwsG9MxSbp4hrYgWXk0XAJ3QHf0VRvCcBo4gZRI=)
                          4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: QPyPuuXiEoxMRcuvSgY9i0fqsHr66Z613AzBKY7x8bA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Apr 26 23:16:23 2025 GMT
            Not After : May  3 23:16:23 2025 GMT
        Subject: CN=680d6947-6d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:6c:c1:1e:0f:98:0e:e9:d2:48:41:3f:1e:
                    48:2b:b8:d3:95:d2:55:7f:ec:c8:7f:4f:11:e5:18:
                    b6:b4:af:82:ed:96:9d:23:ac:d9:67:5a:ed:3f:93:
                    b7:ea:61:6e:a2:ca:14:91:ff:96:2a:fd:38:25:04:
                    dd:a9:0e:a7:27:90:58:15:71:53:3b:7c:f9:6b:b3:
                    ad:69:ce:43:ab:7a:e4:a8:51:02:3b:f4:66:13:68:
                    8e:5e:28:c4:09:ee:7d:59:46:f7:6b:12:ac:a5:9b:
                    5a:e5:0e:a4:fc:b7:e5:db:5e:9a:98:9a:2f:fa:6f:
                    72:d6:e5:e3:a7:da:0b:81:4c:9c:ab:6b:28:0e:d2:
                    f4:f1:f9:65:18:71:f4:8a:59:1e:60:f7:22:64:01:
                    d6:be:88:72:16:c4:de:1f:b3:ee:a4:aa:d3:79:05:
                    c9:f7:5c:55:ee:f5:f4:b4:50:61:0f:39:1b:fb:ba:
                    5d:fd:fa:54:98:0e:e4:44:e7:bd:33:b9:e7:2b:56:
                    85:95:c8:09:fd:1d:43:c9:64:ad:56:6f:87:de:5e:
                    ef:ef:9f:c0:6c:6a:b5:dc:05:11:a2:ba:e2:38:9b:
                    f3:35:46:47:02:a8:e9:c1:f1:51:99:ce:b4:25:6b:
                    53:54:d6:68:d4:16:2e:dc:2b:e7:9e:e8:5b:79:0a:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:78:B3:FE:FE:6C:4B:0A:FA:2F:38:A9:B7:DA:37:39:0E:DA:9B
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:29:35:c8:2d:da:f9:ba:12:d4:51:32:9c:d0:8d:9a:81:
         93:74:db:1e:d5:98:62:84:c3:e2:03:89:85:d2:3b:0d:43:dc:
         67:38:62:7a:81:5d:94:f8:4b:64:fd:57:da:5e:0d:b8:4f:49:
         ba:7b:0f:b1:12:98:02:a5:19:74:7d:ae:e8:d3:3a:f9:f6:b3:
         ce:82:26:56:1f:25:20:b3:96:4b:f1:d0:cd:7e:72:27:72:50:
         71:f3:24:0d:f6:f3:b6:93:9e:c5:bf:8d:9a:82:94:1b:7b:96:
         e7:95:d9:ba:b8:3e:08:df:08:89:d2:f8:16:16:be:f9:22:ae:
         af:50:c1:2b:57:83:33:55:e7:db:09:3e:c0:46:d5:5f:18:16:
         11:c3:0a:f0:47:1a:9c:89:64:74:23:28:51:f9:18:57:8d:c7:
         b5:d6:84:52:a6:fe:4e:8f:a1:0b:28:7f:f5:1b:78:8a:c4:72:
         2a:8b:e0:6c:66:ba:d9:f7:2a:89:e0:3e:ae:7c:df:9a:a5:0a:
         16:62:bd:dc:30:e4:6c:71:67:be:be:c4:35:5a:a6:3c:35:fe:
         62:e5:42:46:bc:b9:33:30:a2:a3:e6:ae:d5:10:69:c0:08:a6:
         d9:cd:6e:97:cb:25:c6:9a:41:06:2a:31:d1:c8:fa:d8:0e:74:
         ff:e4:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net