Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          bEN6yGMvA8aiqPYQqojqu5GPjWJcW54pnBUmx0mXz00=
Subject key identifier:   6F:1F:53:CB:A9:C6:13:09:14:EC:58:CD:BC:C5:D4:44:9F:36:9B:ED
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1952
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          1936
Signing time:             Mon 28 Apr 2025 16:35:53 +0000
Manifest this update:     Mon 28 Apr 2025 16:35:52 +0000
Manifest next update:     Mon 05 May 2025 16:35:52 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: RXHygIGq1MEhjLNK2rnLd5S6itVYgXEIC/BzcPv3kj4=)
                          2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: VHhU4T6PraaYgh0OKYxnF9YbskELwSN55WdyN/nVdKY=)
                          3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: y3ghXyFRCacdpqDozL1dHnRn5VnIW5O8UMNzKQMsfws=)
                          4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: MvSNDQCHIjbtKn6qI3pyzYR56RR/J9dUO091dvxUIn4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 16:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6482 (0x1952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Apr 28 16:35:52 2025 GMT
            Not After : May  5 16:35:52 2025 GMT
        Subject: CN=680fae68-34c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1c:28:4d:d0:26:ee:26:ce:90:e3:0e:7f:d7:
                    0d:b7:8e:41:a2:d0:f7:cc:1b:e1:a3:75:12:c1:2d:
                    30:c7:b5:71:05:fc:58:03:f2:57:70:8c:a5:71:66:
                    ce:c4:72:81:90:14:16:94:00:16:d4:22:70:11:d2:
                    88:00:f2:a6:65:fd:49:73:f9:d3:8e:b8:e6:50:83:
                    b9:2d:37:36:5b:71:2e:2d:3a:f9:ac:89:15:d6:eb:
                    53:79:dc:9f:2a:43:76:90:b4:72:78:d6:6d:98:0c:
                    28:bd:a7:56:0c:62:7d:c8:b9:96:3a:27:35:14:1d:
                    d0:6b:3b:ba:56:e3:a5:bc:5c:8d:46:58:17:16:90:
                    b3:00:38:56:cf:ec:d9:bb:35:3e:b7:1c:2e:22:98:
                    2e:9c:62:0c:41:f3:9e:ed:66:6f:71:c3:5d:4c:c0:
                    7e:e8:49:33:36:25:4f:bb:cd:36:55:3f:9a:07:b0:
                    4a:46:30:d1:55:90:77:eb:b4:f2:a2:e2:fb:1e:ae:
                    6e:f5:a3:34:10:5a:2f:40:bc:01:da:12:b5:b9:4e:
                    94:fb:df:65:d9:7f:8d:05:6b:9e:d7:a6:a5:be:ca:
                    d4:56:7c:58:5c:f2:3d:28:4b:3c:48:65:0f:a2:34:
                    2d:1d:04:80:f9:44:da:b6:d3:36:4f:96:eb:ee:5b:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:53:CB:A9:C6:13:09:14:EC:58:CD:BC:C5:D4:44:9F:36:9B:ED
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:95:79:7e:98:2c:d5:55:b4:5d:6f:cb:68:ba:f9:24:af:
         c6:af:fc:53:8f:42:3d:ce:70:99:c6:13:43:a0:af:ba:ba:b7:
         8f:3c:a5:d3:c6:72:96:07:5b:56:d9:41:ff:77:30:5c:19:68:
         a7:03:a8:45:91:32:78:28:4d:f8:80:02:f2:48:ac:1e:33:69:
         03:66:38:71:82:66:2b:1c:12:20:32:0a:0d:f9:45:38:ca:e8:
         6b:c2:47:5c:0c:83:cc:8b:d0:12:72:67:1c:18:a1:7c:cb:2b:
         04:7c:29:96:f6:f8:a9:c0:e3:1b:2e:b1:34:66:3b:76:58:8d:
         28:58:69:9c:49:20:ae:9f:91:12:43:25:62:62:97:df:81:f2:
         9b:5c:c8:77:68:12:43:2f:45:65:28:77:c5:cc:f5:40:f6:0f:
         9e:18:7c:e8:ca:6c:20:9b:af:82:d8:50:f3:f6:1c:51:ac:42:
         ad:4d:17:67:81:a8:bb:88:3a:a2:b4:f8:d3:73:ca:ba:90:35:
         c2:e2:03:b2:f7:76:22:04:7b:52:61:d6:e0:aa:0e:7f:fc:f2:
         55:e3:95:41:e3:43:b6:72:de:79:50:68:f8:e7:85:55:ac:b3:
         91:c3:77:e1:f7:34:60:4c:7c:fd:58:de:33:74:50:ce:3a:d8:
         74:6b:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:45 2025 by rpki-client on console.sobornost.net