Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File:                     C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier:          nOucAAHfaNBh/fm0TiyUdUNmknfHy7bBV9RpEqR4TGM=
Subject key identifier:   90:CC:14:C1:44:18:AF:41:94:03:34:6D:8D:48:07:FA:59:D2:E7:C2
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       05CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number:          05B7
Signing time:             Sat 26 Apr 2025 22:49:39 +0000
Manifest this update:     Sat 26 Apr 2025 22:49:39 +0000
Manifest next update:     Sat 03 May 2025 22:49:39 +0000
Files and hashes:         1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: XlzbdErL2n4KtpfhfAQxlKWJv04JNvJxLMiYfiMSIYw=)
                          2: 387532CEE46D11EE8DBC2937C4F9AE02.roa (hash: ruwggHNoAUFm9Chx4UGeH2/Ms9/ktBjyMv9b4cEeu5E=)
                          3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: Ofg177dT9U9TbFcWrgETTbW4rQYxs3ewgMOUkLe9Rug=)
                          4: F5BE1E346FFD11EE83D3D154C4F9AE02.roa (hash: zkvJXsg6ZbaTEwK193SUdCnoyTyMt79mUaZuDwnshuE=)
                          5: D4413B92007C11EE99460918C4F9AE02.roa (hash: bEBpIBlAOueDVvlaTSK/ST40bTuOmwGNh/38eLyftkg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Apr 26 22:49:39 2025 GMT
            Not After : May  3 22:49:39 2025 GMT
        Subject: CN=680d6303-a1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:f6:2f:ad:ec:67:e2:26:03:e6:15:14:55:
                    03:e2:53:ef:49:db:bb:4e:77:3a:ec:97:30:4a:50:
                    91:6e:c1:91:fc:6c:9d:86:59:23:0d:06:ae:80:e1:
                    27:bc:3d:76:31:c3:e1:38:e9:2c:9d:e3:49:5c:e7:
                    d8:8a:fe:88:ee:76:5e:c6:f3:37:fe:37:fd:5a:ed:
                    a8:e7:69:9c:f9:e4:5b:05:fe:71:26:23:de:96:4e:
                    03:56:34:bd:96:7a:7f:76:fd:19:85:62:98:a2:aa:
                    e8:5d:5f:cc:03:eb:b2:91:47:b8:d5:c1:1e:03:a9:
                    51:1f:ba:79:68:93:dd:ee:bd:89:05:9a:c6:b9:2e:
                    d4:66:97:eb:56:05:d1:cd:1e:af:00:ed:3f:ba:65:
                    41:72:db:6b:de:fe:e0:de:99:25:b1:38:18:26:66:
                    3e:ca:7a:b5:73:21:a3:97:a6:2f:9e:d8:5a:6e:98:
                    8c:69:af:6f:30:7d:0b:0f:42:98:f8:a1:b7:73:a2:
                    19:41:01:75:ea:21:be:dc:b5:b9:2f:25:9b:a8:fc:
                    a2:84:0a:97:8d:57:dc:98:36:ca:42:15:86:65:cf:
                    3a:89:bb:d4:5e:e7:e0:d4:7b:03:4b:ac:30:d4:2c:
                    70:9f:23:87:cf:2c:f3:15:9e:0d:7b:c3:ed:98:55:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CC:14:C1:44:18:AF:41:94:03:34:6D:8D:48:07:FA:59:D2:E7:C2
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4b:49:2c:b1:53:63:1a:c2:77:f9:ec:a8:7f:a4:75:fa:92:
         5b:55:3d:5d:3c:2e:6e:41:ef:0d:77:83:37:d7:98:99:4a:53:
         f7:71:90:a9:93:5c:b7:4a:86:51:63:e3:e8:b3:e9:8e:b3:7d:
         4c:a3:f8:2d:f4:fe:c2:38:98:55:35:ad:96:09:80:76:d5:a0:
         61:2a:47:52:7c:33:ce:ba:6c:de:72:83:78:6d:ac:03:b5:95:
         9e:88:5d:5f:a3:c8:56:50:1d:fa:8a:f6:d4:cf:86:2a:6d:7d:
         02:cd:a7:51:53:5b:05:0a:4b:4a:df:8c:5d:f0:dd:85:a2:b3:
         e0:77:6c:03:44:29:f2:60:ae:97:b8:70:f3:cb:c7:88:f0:2f:
         f6:9d:2d:5a:35:3b:92:78:b4:1d:07:91:46:df:a4:5d:31:9f:
         6f:81:74:12:93:87:0b:3b:57:af:7e:e1:0a:fd:0a:9e:68:c9:
         72:85:f1:fc:f3:6e:05:a5:56:f5:54:c2:db:26:f6:2d:a9:24:
         b8:73:bd:00:f2:40:7a:40:1c:46:ca:4f:57:e5:29:bb:9b:10:
         98:e9:94:e6:c2:86:19:11:de:de:e5:12:10:7a:37:4d:a5:73:
         8d:58:6a:e7:c4:4e:71:e5:1c:4e:c5:25:cd:df:69:02:c5:9c:
         2e:f9:e1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net