Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
File:                     adr8x94-0cCfTDZqTKThf_sRqEk.mft (raw, json)
Hash identifier:          WBG38rlLggdWFG6gEa2i4vs/Yp0jbyg1ASkeO3Gz7Vk=
Subject key identifier:   00:A4:B0:60:09:32:91:71:AE:10:D7:28:E7:BC:DE:C6:F2:49:A7:CD
Authority key identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49
Certificate issuer:       /CN=A91879AC/serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
Manifest number:          52
Signing time:             Sun 27 Apr 2025 06:04:22 +0000
Manifest this update:     Sun 27 Apr 2025 06:04:21 +0000
Manifest next update:     Sun 04 May 2025 06:04:21 +0000
Files and hashes:         1: adr8x94-0cCfTDZqTKThf_sRqEk.crl (hash: uKHQWQeAlCFa9IClMZoc6SRJbOoPFgkdK5KpB0GW2uU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849
        Validity
            Not Before: Apr 27 06:04:21 2025 GMT
            Not After : May  4 06:04:21 2025 GMT
        Subject: CN=680dc8e5-5f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:0d:26:a6:2c:71:d1:b2:8b:59:08:e4:06:
                    53:df:6d:2e:9e:60:d5:3c:13:1a:70:54:19:1e:21:
                    81:40:65:d8:cd:2d:91:74:7b:10:0b:24:92:2a:b5:
                    99:f5:a3:49:35:9c:1e:77:7f:94:24:46:15:eb:b6:
                    9e:c7:73:f3:4e:3b:55:94:a9:5d:17:b0:e1:30:75:
                    7b:07:22:29:c2:a9:14:60:b7:b6:d3:1a:14:e9:26:
                    47:fb:51:ae:a5:1e:8d:7a:3f:f5:76:49:0c:e7:9d:
                    16:21:e6:58:a2:74:e6:2d:df:a4:d2:9d:26:77:63:
                    05:c8:ae:b6:3a:11:66:51:cf:fa:a3:7b:4f:f4:f9:
                    ef:a5:1f:ae:b8:96:86:a5:96:52:be:76:7b:f2:15:
                    fe:3d:78:08:b8:6a:68:a3:1b:df:44:fc:33:a9:e0:
                    b9:9f:cb:25:12:da:23:03:e3:6e:1f:af:65:00:1d:
                    83:6f:3a:0d:ae:b9:7c:16:f0:e6:ac:b9:60:56:dd:
                    05:17:8c:df:f9:e8:22:1b:e9:6f:7e:b4:ec:69:69:
                    04:c0:32:8d:d7:4e:7e:b0:9c:2c:ab:27:68:c2:c9:
                    0b:4a:8e:b3:d7:90:03:ea:15:1b:db:57:f0:3d:a4:
                    5a:e3:b3:64:7c:23:b4:d0:a1:c5:a6:f9:ed:f7:6c:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:B0:60:09:32:91:71:AE:10:D7:28:E7:BC:DE:C6:F2:49:A7:CD
            X509v3 Authority Key Identifier:
                keyid:69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:1a:be:62:e7:36:d3:df:c5:d2:b3:a5:83:c6:3e:1b:dd:
         80:9f:00:32:1d:ee:3f:56:d6:8b:5a:85:b7:5d:04:fb:4b:5f:
         1b:a7:8f:5e:77:39:f4:73:98:01:ef:73:a5:a6:dd:e0:4a:c8:
         f2:58:15:ca:c8:0b:ad:8a:ce:43:b7:b6:c8:81:f9:42:c6:a4:
         eb:3a:ae:9b:84:0d:1e:c5:39:35:f6:25:2e:26:18:03:d7:47:
         4f:95:2a:a9:d3:1a:2b:01:f9:54:c3:86:86:38:64:ad:23:db:
         f3:ab:42:1b:d7:25:99:18:c6:a4:20:f9:d3:df:85:b9:bc:d9:
         d6:b6:6e:3d:8a:53:01:be:dc:5e:25:a4:2f:6b:e5:e1:11:08:
         17:7b:5a:d2:cb:d6:32:6a:49:49:72:99:fe:d2:f5:65:63:b7:
         7f:d2:97:8d:c9:51:1d:e4:e0:5d:4f:2a:20:fb:ca:93:d6:6d:
         8c:0d:33:10:35:ed:ea:2a:19:16:95:6c:59:81:20:53:6d:30:
         5f:03:35:fc:5d:1a:37:a3:04:b4:b3:2e:ed:7b:f9:d3:4e:ab:
         3a:ed:8e:12:8f:5a:03:c6:2c:fd:0d:f4:50:b2:c5:d1:2a:4a:
         b6:2c:26:ba:30:85:85:82:6f:8c:a9:bb:47:e1:83:e8:52:cb:
         cc:8c:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net