Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
File:                     ByXySRgBUFGFyQaaQBNjXDi1a3I.mft (raw, json)
Hash identifier:          xIyeeTxeE3UH2vXBe5jpcx5WGQMPKyFa3c+Zjcs4c6U=
Subject key identifier:   8A:77:9F:E3:D5:81:ED:C0:03:0B:66:76:7C:98:4A:AB:F8:7A:DC:38
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Certificate issuer:       /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
Manifest number:          1659
Signing time:             Mon 28 Apr 2025 18:24:43 +0000
Manifest this update:     Mon 28 Apr 2025 18:24:43 +0000
Manifest next update:     Mon 05 May 2025 18:24:43 +0000
Files and hashes:         1: ByXySRgBUFGFyQaaQBNjXDi1a3I.crl (hash: oT0e/ON8n2GK+BF2/g0ZWTNqWcB/tylMhDpOnk+RmOY=)
                          2: 9852B952A98811EE8837E63EC4F9AE02.roa (hash: 9ift5kSzh9fTdIpx68YjBI74nzABzTlye9TNliwhHE4=)
                          3: B1471960C69F11EEA49B0321C4F9AE02.roa (hash: efQyEJ0PSvPnKB7dDppoyZhGuzoiLAkyZXNjFW2dtjQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
                          rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
        Validity
            Not Before: Apr 28 18:24:43 2025 GMT
            Not After : May  5 18:24:43 2025 GMT
        Subject: CN=680fc7eb-162c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:50:6f:ab:1a:27:fc:3a:a6:03:8a:cf:5b:
                    cb:12:6e:bd:84:8a:71:43:7f:ee:77:cd:9b:1d:e2:
                    9a:5f:e4:22:d3:ac:c1:83:14:4b:4a:1b:19:2f:01:
                    fa:3e:87:de:03:cc:dc:fc:9a:ef:82:63:82:e1:50:
                    0a:90:b2:0b:7b:39:68:2c:8c:9d:62:25:2b:b8:d4:
                    ad:d0:d1:1d:b0:42:8b:62:09:ec:11:f2:32:5b:bf:
                    b7:2e:b5:40:e0:97:ff:3a:dc:ed:2b:2d:55:1c:b2:
                    0f:9d:0a:5b:82:80:04:2c:23:eb:75:f9:be:49:00:
                    cc:6e:7a:56:4b:12:d9:15:42:80:1d:3c:54:29:73:
                    0f:c8:60:02:a0:8d:6e:ec:d2:9e:00:f5:82:ab:7f:
                    51:da:77:fa:be:ca:0b:d8:55:01:47:72:cf:7f:93:
                    4d:f8:6d:3a:7a:ad:22:65:ba:de:80:63:23:9a:19:
                    ec:ef:ea:ed:c8:8d:2e:d3:12:3b:41:4b:8b:f6:ee:
                    01:a4:06:63:12:c9:2d:20:da:ac:92:37:e4:fb:db:
                    a3:c4:83:f5:47:9c:bb:78:c0:8f:ef:bd:fb:c7:84:
                    39:c3:ed:3b:64:c2:91:de:d8:a3:1f:7d:a6:e6:5e:
                    68:23:56:1f:60:ba:b0:81:20:cc:c1:39:ff:66:1a:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:77:9F:E3:D5:81:ED:C0:03:0B:66:76:7C:98:4A:AB:F8:7A:DC:38
            X509v3 Authority Key Identifier:
                keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b7:4d:e1:07:a9:f0:a5:f4:0e:3b:64:3e:ce:62:9b:0a:ee:
         4f:4a:f0:81:65:33:46:86:f0:a2:bf:b5:11:9a:55:59:13:e8:
         f8:14:78:db:ea:ef:4c:03:2b:fa:81:6f:b7:e7:7d:8f:e0:a4:
         68:8a:cf:31:d2:a7:a1:f1:0d:61:91:a1:1e:06:98:14:70:2c:
         25:19:a2:9c:69:59:cd:5e:5f:8f:46:64:35:6c:53:77:2a:9e:
         81:1c:eb:30:e3:9c:6a:87:02:84:81:8b:48:07:60:9a:99:0b:
         be:63:56:c9:d3:9c:32:03:d8:b1:83:06:31:7c:28:61:62:5e:
         5a:08:c1:17:ac:b7:8c:94:27:ed:5f:ed:a8:d2:3b:27:a6:0e:
         72:fc:1b:24:d3:3e:9b:b8:42:92:10:17:93:e4:cc:32:d5:c5:
         63:c7:f6:70:5a:75:f9:50:77:ff:f7:fa:01:8f:70:e9:00:5a:
         1d:a6:62:4b:2e:ed:2e:a3:d4:63:52:e6:5e:29:4c:ba:e7:f6:
         a1:20:dd:21:61:c5:46:cf:5e:c0:dd:4d:fd:5a:22:ec:a7:ae:
         4f:7f:70:67:88:97:2b:0d:52:95:a0:4d:29:5e:94:c1:1d:de:
         72:6f:61:97:35:94:2d:13:55:45:b3:78:62:f4:b6:00:bb:0d:
         6a:5d:b9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:46 2025 by rpki-client on console.sobornost.net