Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File:                     rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier:          Mxz/ZH8NkW+TnTZlLMZx8hq7gBO5biDUSOfppJeqet0=
Subject key identifier:   BD:E3:B4:DA:41:AC:9E:F5:1D:71:BC:9B:D0:67:DE:B8:30:0E:AC:9D
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number:          014B
Signing time:             Sun 27 Apr 2025 03:14:22 +0000
Manifest this update:     Sun 27 Apr 2025 03:14:22 +0000
Manifest next update:     Sun 04 May 2025 03:14:22 +0000
Files and hashes:         1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: C4ZBkzL/+dyWGE3AKNFY8DEKq2jTPxdfi79H9Xjs+TI=)
                          2: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: knnG12wLuZJ7GEg76U5ILM36lIjx9IdtYM3rUCgaB+w=)
                          3: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: eIIjFxp+ef05O83W47GAbRwK3AECc7ulokZsYTSnHpc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Apr 27 03:14:22 2025 GMT
            Not After : May  4 03:14:22 2025 GMT
        Subject: CN=680da10e-3392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:8f:33:b5:e4:46:df:0a:18:3f:1c:94:5f:
                    7b:9a:03:57:4a:14:ec:e4:7e:0b:d3:3e:96:0f:c4:
                    64:8f:7b:a1:54:ef:60:d4:b6:ab:e3:00:1f:e4:5d:
                    9f:78:a1:d8:0d:b4:e5:a7:fc:f4:7c:66:39:2f:72:
                    b0:92:25:bd:e0:1f:3e:70:0d:e5:6c:c8:2b:1f:b0:
                    f7:57:8b:f9:61:57:b1:45:d4:33:af:26:56:28:17:
                    36:0e:d3:4b:4a:d7:53:2e:3b:c2:5a:33:fc:3a:d8:
                    1d:0a:31:a8:a8:20:e5:5a:15:32:0c:a0:ec:2a:73:
                    4f:85:0b:00:ff:1c:61:16:d1:f6:60:53:02:00:c4:
                    27:83:81:a5:75:bb:d8:18:a4:c8:40:b9:42:fc:ac:
                    3f:6b:be:ac:c7:5f:27:9e:10:08:c2:ab:b2:b0:55:
                    4b:3c:0e:fa:c2:24:76:8c:f7:4f:75:ce:22:ed:42:
                    a3:78:57:7c:e9:cd:ae:54:01:e3:98:4d:3c:4e:a3:
                    dc:e6:4f:e8:f2:35:a7:c6:a1:25:67:76:b2:7a:14:
                    b2:0c:f3:cf:61:61:4f:a6:9f:d1:dc:a3:7d:38:a8:
                    6d:6b:08:46:8a:41:b1:d7:b0:a9:50:db:1b:ff:8a:
                    50:2a:12:b1:d9:01:2f:e4:7e:d1:20:66:a0:fc:03:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:B4:DA:41:AC:9E:F5:1D:71:BC:9B:D0:67:DE:B8:30:0E:AC:9D
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:46:fe:ed:14:2c:b0:d0:d6:63:53:8a:26:fc:b8:bb:1c:ef:
         4b:e0:21:b6:0e:65:29:fa:e0:43:cf:a7:db:bb:59:67:67:18:
         86:75:51:34:4b:9e:95:ee:f9:c9:7c:c6:c7:10:bf:68:e0:24:
         6c:cc:9a:d4:30:d9:83:60:8b:26:13:93:f7:6c:09:d1:eb:ff:
         dc:09:f1:4c:c9:01:81:4f:36:29:a3:d2:b6:94:58:03:d0:5d:
         8c:9c:09:46:fb:8a:8a:89:c2:9f:a2:a3:6a:e3:a6:91:94:0e:
         18:45:c8:fb:e2:26:3c:98:e9:8e:48:3e:fb:10:86:26:58:16:
         08:64:0d:52:0d:05:72:7e:e5:c4:62:92:2e:83:72:ea:0b:73:
         ff:9c:71:8e:83:6b:e0:34:86:79:dd:65:ae:44:a0:c2:2e:d6:
         66:5f:c4:78:f3:e5:2f:1e:d8:af:08:4f:63:18:73:dd:b6:03:
         6a:6a:3c:04:84:88:78:35:fb:21:1c:1b:8d:6d:ed:24:b5:4a:
         12:b8:31:8d:14:15:70:76:c2:5c:ac:2e:dc:ca:e4:ee:65:12:
         a3:d9:23:36:83:24:1a:3c:e5:10:95:29:01:72:9a:cc:39:83:
         3c:1d:8b:91:ce:8f:d2:19:6b:48:b7:ab:35:bc:02:55:de:ad:
         13:ac:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net