Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
File:                     punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json)
Hash identifier:          cnND2IxGWiVdKbjEpriDlhZnNiKH4THRg9DP1fZdef4=
Subject key identifier:   E4:84:94:3A:1B:8A:2A:3C:70:8E:A4:A5:F7:C2:7B:2D:86:77:B0:05
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Certificate issuer:       /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
Manifest number:          81
Signing time:             Sun 27 Apr 2025 05:29:02 +0000
Manifest this update:     Sun 27 Apr 2025 05:29:02 +0000
Manifest next update:     Sun 04 May 2025 05:29:02 +0000
Files and hashes:         1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: tqpQcq0lz914zqq1bLDyooPTvcL27PRDoRhJx5od8Rs=)
                          2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: hIohGLAEr9r6SYuLg+aGzwQmujzK2d8ao66pEwxDxz4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
                          rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
        Validity
            Not Before: Apr 27 05:29:02 2025 GMT
            Not After : May  4 05:29:02 2025 GMT
        Subject: CN=680dc09e-e8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a9:9c:de:0e:99:d2:8f:a4:e2:10:2d:c5:10:
                    4b:d4:a7:b2:51:b3:37:4c:39:09:f5:47:dd:54:e8:
                    d3:e8:78:16:23:e9:e0:63:9f:f2:c3:4b:22:81:7b:
                    1a:01:f5:d4:f4:bc:1f:a0:2a:c5:4d:ec:0b:c7:8c:
                    1d:ed:30:2f:0a:aa:e2:a6:01:b4:b6:ae:7c:d3:9c:
                    04:99:45:a1:30:00:8e:38:d9:55:bc:f1:81:57:9d:
                    3b:f5:94:ee:fc:bd:fb:26:d2:6a:76:ec:8b:eb:14:
                    a6:11:8a:ee:58:3c:73:13:cc:e2:5e:02:77:c8:c4:
                    ec:32:fd:f0:70:12:8d:78:d8:90:49:84:37:61:18:
                    8d:d0:cc:35:c4:c3:29:9d:08:88:2f:4f:15:51:12:
                    b8:d7:fe:c9:70:e4:3d:ac:a1:74:b0:3c:96:64:20:
                    e5:fa:7d:3c:d4:ed:ff:ad:d2:ec:83:50:55:d5:da:
                    66:02:11:4e:28:72:36:03:a9:1a:c8:8c:b9:22:49:
                    79:92:67:3b:9a:71:fd:8b:da:e1:13:7d:9c:60:4f:
                    75:87:91:5d:84:ca:bb:41:00:db:06:af:a4:9b:54:
                    f2:1b:fc:e1:1b:76:3f:20:18:1c:4d:2b:4c:b2:da:
                    c0:7c:cd:11:c7:29:a7:3b:03:0b:21:36:5d:3a:37:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:94:3A:1B:8A:2A:3C:70:8E:A4:A5:F7:C2:7B:2D:86:77:B0:05
            X509v3 Authority Key Identifier:
                keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:20:07:bc:24:8a:a5:60:1c:9b:86:49:a4:a0:30:34:0d:
         40:0c:08:92:82:3e:93:17:a2:fb:71:75:eb:af:c1:b6:80:21:
         e9:10:2a:e9:38:5f:6c:94:42:51:aa:68:f0:79:ab:56:10:5d:
         94:10:ac:00:d1:f2:57:73:51:34:46:12:36:46:8c:ca:cd:8e:
         fa:c9:f2:21:2e:fc:3c:df:d3:e6:25:92:91:a8:d0:09:1d:de:
         0a:af:6a:48:d3:81:58:be:41:86:6e:ad:27:db:1a:2f:e3:d9:
         b7:49:ac:d4:a1:dc:15:5a:35:ac:98:37:69:b5:28:5c:22:70:
         e4:9e:f0:eb:2d:91:d5:af:40:13:24:86:dd:f2:b3:64:63:bb:
         9f:cd:bc:c8:30:89:65:52:14:bb:b1:eb:27:7f:b9:3f:56:1c:
         f1:24:bf:dc:73:25:cb:57:5f:96:f9:9b:6d:ed:1c:df:e9:a0:
         fe:ee:d2:4f:36:7c:40:a2:0f:5b:a5:60:81:cc:65:2b:df:a7:
         c4:7a:e2:e4:7d:2c:66:52:2f:12:1e:ab:83:9a:78:57:64:04:
         78:4c:b3:29:58:e3:59:95:60:ec:06:92:54:53:46:8e:56:e1:
         0d:bd:80:58:e4:0c:b2:45:4f:5f:f2:a8:a7:85:af:c0:eb:72:
         39:18:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net