Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
File:                     Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json)
Hash identifier:          n4UWamhRmbgDSFFlGd6RSchmAyXvCIV3V6Mlply4pbA=
Subject key identifier:   FA:AF:67:BC:8C:6D:8C:94:86:CD:8A:FD:93:C0:52:9A:C3:4F:C4:AA
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Certificate issuer:       /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial:       0545
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
Manifest number:          053B
Signing time:             Sat 26 Apr 2025 23:07:22 +0000
Manifest this update:     Sat 26 Apr 2025 23:07:22 +0000
Manifest next update:     Sat 03 May 2025 23:07:22 +0000
Files and hashes:         1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: QlcDx7xDXcQzd3yUgKD88MG6cSjoyXEeSAh+DN/AVgM=)
                          2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=)
                          3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
                          rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
        Validity
            Not Before: Apr 26 23:07:22 2025 GMT
            Not After : May  3 23:07:22 2025 GMT
        Subject: CN=680d672a-47c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:17:e5:c2:b8:fa:1d:2d:e1:97:ee:dd:d9:
                    45:5b:6e:d9:b0:a4:03:92:84:01:fc:46:dd:9c:35:
                    55:ef:52:7c:58:67:51:62:2b:35:a5:5c:c7:b7:5f:
                    80:a8:83:fa:15:c3:c7:7d:ae:df:67:d9:4c:48:b6:
                    1f:e0:b2:bf:0f:10:d1:7c:48:fa:93:57:73:de:f1:
                    b6:61:f2:f6:b1:22:f4:41:69:8e:2a:5b:47:d1:c3:
                    6f:93:7b:4c:da:db:24:bc:8a:c7:b6:ca:f2:ea:03:
                    1f:33:9f:cc:d6:2d:9f:aa:df:3d:9c:7f:95:35:e2:
                    f9:fd:9f:da:83:e8:0b:2f:76:87:74:36:0a:f1:14:
                    04:3c:9e:20:c1:69:a2:b1:55:ed:9f:03:27:1d:cb:
                    c1:3b:2e:0d:57:93:ac:ad:c8:a7:d8:ff:d2:5e:6b:
                    a7:92:4e:fb:ab:b3:5d:d7:72:b1:b6:0a:86:1b:82:
                    54:04:a0:f2:81:44:c2:ff:87:4c:41:91:e1:2b:b0:
                    77:c2:ef:1a:63:7c:10:e6:db:4b:02:28:85:4c:11:
                    04:ec:9a:32:01:e9:c0:9c:b4:dd:a8:71:cc:bb:a6:
                    86:d3:9e:c0:ea:01:53:71:6d:6a:03:2e:af:44:b5:
                    4c:36:1f:3b:66:1b:06:22:d6:de:8f:01:22:21:8d:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AF:67:BC:8C:6D:8C:94:86:CD:8A:FD:93:C0:52:9A:C3:4F:C4:AA
            X509v3 Authority Key Identifier:
                keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:42:a3:28:ef:64:2a:a8:2e:3c:fe:45:8d:b4:40:26:49:
         92:fe:97:ab:6d:1c:50:49:45:87:10:2e:eb:30:b9:00:f5:c3:
         1b:22:d7:23:e0:09:c3:35:5f:c8:9e:7a:e1:d6:08:d0:48:bf:
         40:0d:96:be:5d:d1:f5:36:ab:87:da:e7:6b:5c:0d:13:a6:95:
         95:e8:f5:f8:2a:b5:5d:51:f5:34:c0:27:1e:2c:32:aa:60:ad:
         15:30:ee:6f:9d:8f:ab:c8:de:96:fa:3d:3a:82:45:c8:a4:ce:
         78:7b:45:eb:41:52:eb:67:71:c8:26:83:76:ee:74:bd:80:0e:
         b9:8e:8c:08:58:87:95:52:a6:89:3f:48:83:bd:fb:66:ad:4f:
         3f:fe:07:a1:30:b3:3a:b2:3f:93:7a:21:d5:ca:f2:ca:e3:92:
         b7:9b:16:49:53:3f:c8:b4:7e:38:25:94:71:b7:5c:d8:1d:38:
         1e:28:2c:0d:b9:59:5a:52:41:75:1b:f3:73:79:72:6d:12:8c:
         fd:de:5e:87:b6:9b:75:43:96:e8:d2:54:f5:42:73:38:31:46:
         13:15:b3:d0:1e:db:bf:8f:d8:74:bf:a5:16:6b:2f:73:74:af:
         26:70:d3:f9:93:f0:b8:ff:c7:f5:e2:94:84:ee:c6:e5:7e:bb:
         5a:9d:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net