Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File:                     -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier:          x8gM6fMZ5k6zJz/oQ9C6fC99/26l+fAx4Atzdl3lcuU=
Subject key identifier:   EC:5D:10:EA:26:17:27:35:5E:8C:EE:3B:45:19:4A:D0:76:60:2A:39
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer:       /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial:       052C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number:          0520
Signing time:             Sat 26 Apr 2025 23:16:25 +0000
Manifest this update:     Sat 26 Apr 2025 23:16:25 +0000
Manifest next update:     Sat 03 May 2025 23:16:25 +0000
Files and hashes:         1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: SnB8x5wA6Gi1LUVu9LAH4cnUeBixxyPiJ47Lan1gh5c=)
                          2: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: qkH2tgtItXAMLVzBegmHlsCSZQIwAcDk4bjO6eyiVsA=)
                          3: 14A59A26E15B11ECA05C9236C4F9AE02.roa (hash: tCsPFlQbHjPtdKo2By1Yv1A/CwgH+Wy/z7j32R4zxhU=)
                          4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: Wg0ycCOoKuAHP5nQShBntZqgFSfdv38dgCrRwUlSjDU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
        Validity
            Not Before: Apr 26 23:16:25 2025 GMT
            Not After : May  3 23:16:25 2025 GMT
        Subject: CN=680d6949-2f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:8b:bf:f9:ab:60:bf:6d:25:86:07:2f:31:
                    54:a9:98:44:93:df:a0:a0:fb:70:58:17:08:98:a3:
                    05:6d:a9:a6:ce:fa:b2:80:79:06:45:96:e1:0f:bd:
                    66:02:f4:a2:bd:e2:cf:a5:01:11:22:56:16:bb:41:
                    b2:09:80:2a:a0:83:60:51:4d:dc:2a:57:46:42:5f:
                    83:a9:36:80:e0:9a:41:93:ac:6d:4e:61:35:34:63:
                    3c:c3:de:52:b7:e0:16:6f:b0:90:17:f9:3f:ed:3b:
                    00:8c:6a:24:5e:20:4f:6b:79:b9:a8:fd:a5:d8:0a:
                    68:b4:a8:24:11:f5:1a:40:6c:63:8c:92:c8:9d:b9:
                    df:00:cc:a6:7f:e1:99:82:80:23:11:ad:26:c2:ec:
                    fa:9c:cb:bb:5a:27:da:e0:78:69:bb:b8:39:8e:47:
                    b1:e2:29:73:5a:f7:10:5f:60:06:59:d8:bf:2f:38:
                    fb:2f:68:c7:69:12:9b:a7:41:52:6a:d8:20:37:39:
                    6f:42:68:b3:8f:60:fb:8e:66:6b:84:4e:00:9b:84:
                    25:bd:fd:98:f1:7c:e3:fb:84:83:53:e7:b0:a3:79:
                    0a:d8:f3:f4:2f:f6:66:f3:37:6d:00:c0:5a:11:83:
                    5c:05:73:53:82:a2:64:9c:c4:d3:99:5a:53:76:b9:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5D:10:EA:26:17:27:35:5E:8C:EE:3B:45:19:4A:D0:76:60:2A:39
            X509v3 Authority Key Identifier:
                keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:f8:7b:1e:d4:49:fb:c9:ce:2a:6e:1e:0e:7f:7b:18:23:
         ca:6f:6b:25:cb:4a:58:f6:fe:07:a3:22:30:84:8b:f7:0e:fb:
         35:38:87:32:dc:cd:63:d8:33:ae:95:df:11:07:6d:ac:1b:38:
         a9:3b:d9:45:c4:96:a5:fa:1a:07:3a:81:1d:9a:a4:b1:79:77:
         d1:18:3c:02:3c:0d:ba:54:b3:da:4d:4a:22:a7:83:aa:0e:26:
         9e:ce:42:70:65:9b:e5:5c:b5:b7:20:da:68:ef:f1:33:b9:01:
         f1:7b:10:87:af:c2:e8:46:4e:3f:80:5d:e4:5a:8e:c5:15:39:
         27:79:ed:ac:94:56:4d:3b:35:01:99:28:ea:ee:8d:f2:8a:ef:
         c7:17:bd:e5:c6:07:a1:9e:af:f4:11:4e:e8:0c:ea:8a:1a:d5:
         0c:bc:e7:76:96:07:43:59:94:00:ec:82:b0:47:7f:8f:db:bb:
         ab:21:9c:b5:9d:46:d1:5b:d1:e2:b2:8b:61:be:97:34:6f:89:
         b5:d8:d9:36:7f:dd:42:54:8f:fa:5d:9a:de:94:4d:fa:7f:34:
         65:69:44:40:e6:1f:1a:be:0c:d2:97:91:9e:e4:d7:10:f2:47:
         36:1a:a3:a9:a6:06:b1:01:43:7d:83:d4:f6:6a:66:52:53:8e:
         44:7d:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net