Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File:                     It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier:          SD6IUYRAh9JGAE18je6iTm9H2g/nTA65rb/xLA+/6TY=
Subject key identifier:   0C:9A:E4:7E:CB:1D:88:EA:B4:9C:AB:1C:A4:3C:76:AD:B9:43:5C:86
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer:       /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number:          81
Signing time:             Sun 27 Apr 2025 05:29:00 +0000
Manifest this update:     Sun 27 Apr 2025 05:28:59 +0000
Manifest next update:     Sun 04 May 2025 05:28:59 +0000
Files and hashes:         1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: e1QwHLFd+RlMskJ+lWoGURQxr6GTKldL5OpYqVJVoMc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
                          rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
        Validity
            Not Before: Apr 27 05:28:59 2025 GMT
            Not After : May  4 05:28:59 2025 GMT
        Subject: CN=680dc09c-eb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:10:db:55:f5:9f:a7:80:fa:3f:6d:6a:57:
                    5e:83:a5:20:f2:75:87:81:df:3a:f1:05:a9:9c:93:
                    6c:71:23:55:e5:20:dd:8c:25:45:8b:c7:e8:2b:11:
                    15:37:34:76:f0:f8:fd:68:d7:6f:a8:3f:70:61:df:
                    09:75:7b:ec:39:e3:97:86:9e:0c:a4:0d:c9:a1:15:
                    3a:5f:1b:7e:1b:c2:4d:8f:30:b7:a4:c1:30:7c:85:
                    d0:c5:e6:c9:bd:c0:61:e9:ca:6e:1c:ec:57:e7:fb:
                    fe:86:57:8f:df:5a:ab:41:52:b6:a5:a9:a9:e9:bc:
                    4e:22:5b:c5:d1:22:83:6b:4b:3f:d7:1f:69:ad:9f:
                    42:6e:a7:9f:4a:10:37:b1:62:71:d5:56:b5:7a:4d:
                    06:57:32:79:d6:6d:0d:1c:a8:c5:fe:2b:28:79:72:
                    b4:41:32:6d:70:63:f0:99:cf:61:c6:77:e9:04:2f:
                    70:1e:ba:7f:e6:62:fa:9e:11:14:7e:63:29:a7:88:
                    f4:2e:66:36:6a:6b:d5:a8:f4:e2:6c:d5:1e:83:9a:
                    68:39:86:db:59:98:fa:54:ff:14:a1:89:53:10:24:
                    40:b6:e3:ea:0e:d9:67:e5:69:97:52:47:fe:ed:ab:
                    22:0b:7d:ae:48:b6:44:2d:ef:1e:8b:1d:72:c7:60:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:E4:7E:CB:1D:88:EA:B4:9C:AB:1C:A4:3C:76:AD:B9:43:5C:86
            X509v3 Authority Key Identifier:
                keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:92:3c:31:53:83:4f:79:6e:8c:66:6f:97:0a:6d:17:07:
         53:96:6f:41:f6:e2:02:1b:55:22:30:c4:fd:4c:fc:fd:1d:58:
         0b:0e:ad:e9:24:ce:8d:96:79:d5:a0:f4:f0:ea:8a:8a:b5:a5:
         5f:d7:2c:f9:8e:dc:a4:f9:49:50:ea:32:c0:1e:86:1c:87:ed:
         0c:a7:1a:38:d9:0d:02:38:81:9d:d7:ce:77:a8:e7:4a:93:2a:
         51:00:25:86:cc:86:2c:1c:84:ae:8d:19:f9:08:c9:1f:3b:45:
         a7:e1:12:9b:7c:c9:90:1b:f5:80:7b:b9:ea:01:80:a5:1d:ac:
         13:5c:45:53:30:af:3b:0e:8d:5e:ec:7e:5d:58:2f:b5:a4:6d:
         40:2f:d1:2c:e1:98:8d:db:52:fd:16:a4:8d:5a:41:a0:29:ea:
         62:f2:de:ae:59:0e:80:4d:94:a8:c7:7b:4a:99:d2:4c:42:9a:
         e1:47:a5:02:82:01:d3:b1:4e:64:2a:aa:c7:f9:7c:8a:e9:25:
         48:2f:c0:1b:ee:64:6b:18:71:df:58:41:5a:4d:10:f1:75:7b:
         f0:53:74:3f:65:4c:17:ee:a3:91:d1:0a:38:55:2f:3a:78:e7:
         05:4a:ca:93:e9:98:5d:73:23:65:ff:59:0d:f0:2d:d4:72:d5:
         1c:38:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net