Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
File:                     e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json)
Hash identifier:          Uzg6/Ef9YR4/HqeXly0TAvNAcYAHVkgoVGcMpn0HS18=
Subject key identifier:   56:C2:61:B0:88:7E:AE:92:94:7A:53:B1:E2:0B:03:C1:6A:8B:67:EB
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Certificate issuer:       /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
Manifest number:          40
Signing time:             Sun 27 Apr 2025 06:22:40 +0000
Manifest this update:     Sun 27 Apr 2025 06:22:40 +0000
Manifest next update:     Sun 04 May 2025 06:22:39 +0000
Files and hashes:         1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: tHeVOX0eudZvSptnEi2jUFDWgu/awuDBWyFR5p3PY+0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
        Validity
            Not Before: Apr 27 06:22:40 2025 GMT
            Not After : May  4 06:22:39 2025 GMT
        Subject: CN=680dcd30-9db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:4c:e1:87:31:af:77:04:ae:0d:94:21:1b:
                    10:00:73:a8:8a:82:f1:da:c4:a9:b3:ba:cf:0d:07:
                    e7:a1:01:0e:3a:b0:56:7f:2c:58:f1:be:5a:9a:6d:
                    66:ca:ca:a2:e6:1c:7b:d5:49:78:ff:a2:98:fc:35:
                    f1:71:46:d0:65:81:d2:d6:ee:52:5c:cf:28:38:24:
                    5e:6d:43:f8:74:12:c6:54:4f:69:75:8f:22:61:52:
                    eb:80:1f:81:94:31:49:db:c5:7c:17:5f:24:42:d1:
                    06:53:bb:63:ef:6c:eb:86:b3:4a:a9:53:2e:a6:c6:
                    45:6f:b3:2f:fd:bb:0a:40:f7:9d:82:fd:c7:39:86:
                    0d:79:1d:8e:54:14:07:80:5c:b8:2c:e6:19:a8:27:
                    4b:b7:d5:33:18:90:ee:16:6c:c4:b1:c0:44:1c:b4:
                    f6:05:cd:7a:a7:f2:cc:a2:29:ea:5d:76:6f:e0:39:
                    54:f9:a1:f6:cc:2a:98:cc:0b:10:26:f8:52:53:2b:
                    cf:c1:b6:e5:5e:87:f0:4b:4b:82:27:43:5c:b8:0a:
                    9c:3c:58:d2:c2:5f:7f:72:63:16:2a:34:df:0a:e9:
                    78:56:23:d0:50:9c:c3:74:d2:12:33:0e:fd:45:05:
                    63:2d:4e:63:83:81:c1:94:8f:f1:dc:1b:66:18:01:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C2:61:B0:88:7E:AE:92:94:7A:53:B1:E2:0B:03:C1:6A:8B:67:EB
            X509v3 Authority Key Identifier:
                keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:91:f8:82:77:04:98:51:f3:27:12:cc:06:2f:0b:d2:80:87:
         3a:2a:1d:63:72:20:50:e2:a1:99:a2:fa:fb:79:81:dc:01:85:
         fe:03:9d:68:fc:4e:ef:a7:e9:5a:75:62:35:fc:27:4c:dd:e6:
         24:65:fb:1f:93:1e:32:ab:24:bf:a3:07:da:c4:94:ad:3c:54:
         76:27:88:a1:e4:04:52:34:85:8c:7f:04:c3:cd:0d:ad:53:bb:
         9f:f7:07:16:3b:20:81:c9:12:75:a7:b7:2a:6c:83:3b:3b:70:
         8d:a6:69:bc:1f:93:2e:be:a8:46:ad:79:e7:d7:23:0f:90:f6:
         e3:07:40:0c:85:1c:53:36:38:28:15:c2:0d:fa:25:ec:39:0f:
         97:c8:56:a8:f1:e5:3f:d9:cb:de:3a:60:f7:01:93:38:53:d7:
         8f:7f:f3:bc:3f:38:1b:f2:9d:79:f3:af:3c:1a:d6:46:11:96:
         48:33:a1:e2:1c:bd:27:58:dc:c1:34:ce:d6:39:b7:1a:fd:f4:
         35:8b:1e:b2:58:a2:2d:47:39:67:5e:c5:24:57:18:8c:bf:25:
         f6:ae:ac:36:b6:7a:b6:11:34:fe:2a:06:6a:13:d5:66:b8:d0:
         e6:a0:6e:b3:b7:5a:53:a8:94:aa:59:79:8d:ae:d1:db:4d:90:
         83:5c:18:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net