Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File:                     0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier:          x29nmEHxtBenO/7A5PfFaWyvxbCD/3DJct97ygav4Gc=
Subject key identifier:   B2:EA:CE:E0:6D:22:F2:BC:09:DC:91:22:23:82:35:92:9B:1E:74:DC
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer:       /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial:       0C56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number:          0C3F
Signing time:             Mon 28 Apr 2025 18:48:16 +0000
Manifest this update:     Mon 28 Apr 2025 18:48:16 +0000
Manifest next update:     Mon 05 May 2025 18:48:16 +0000
Files and hashes:         1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: 1jE2SFz86mrIjVvqbBw/vaCv6g+28jPxVOCkwp2kFgo=)
                          2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=)
                          3: B430443A324211EFB14FB614C4F9AE02.roa (hash: CYY0LXP9X4xKQBGfZAofQe57hCMYIiU/YbWGmHYH8e0=)
                          4: 18CB29D4D42611EFAE000281C4F9AE02.roa (hash: GuYqrGtWVlJyoBE0Sfpp3oNaKMeRtWzRn135dDFohmw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
                          rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3158 (0xc56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
        Validity
            Not Before: Apr 28 18:48:16 2025 GMT
            Not After : May  5 18:48:16 2025 GMT
        Subject: CN=680fcd70-79ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:31:88:69:f6:0c:d0:9a:8a:32:ba:2e:4a:
                    f2:a2:54:a5:ef:e1:c3:39:40:b3:28:54:19:6d:f5:
                    93:d1:63:7c:85:43:93:2b:9b:91:10:ca:2b:eb:ef:
                    43:00:94:88:cf:7e:a3:9e:ef:da:dd:cd:58:b4:6c:
                    34:64:80:04:15:77:ac:f4:15:ef:77:40:95:8f:b1:
                    fa:55:26:22:35:39:cf:35:b4:fa:f1:ce:35:17:40:
                    9a:db:2f:27:81:da:64:ef:d2:5e:bd:15:b5:3d:9d:
                    7b:52:e1:4a:c4:51:b8:cb:96:3c:ad:8f:f2:98:b9:
                    8b:15:d0:37:df:76:99:48:a2:ec:aa:ed:9e:7e:58:
                    8a:5c:97:28:19:1e:65:7f:98:ea:be:e6:07:c1:af:
                    84:b7:68:6d:5a:43:7b:16:d7:94:f5:92:9f:59:90:
                    b7:13:0f:f6:83:0b:4d:54:9c:fa:69:98:66:9e:02:
                    56:a6:e8:83:de:40:1b:13:26:16:fd:8c:3b:23:5e:
                    f3:21:e4:dd:a1:ec:da:4d:14:a9:71:0a:ec:f5:f7:
                    49:55:1f:2f:be:df:ce:ad:c0:17:83:ae:91:a0:82:
                    ee:af:97:d6:c3:fe:a9:5d:4a:41:7c:33:57:30:46:
                    a7:f5:73:86:e1:ac:b0:6a:75:d4:97:56:29:c9:55:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EA:CE:E0:6D:22:F2:BC:09:DC:91:22:23:82:35:92:9B:1E:74:DC
            X509v3 Authority Key Identifier:
                keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:a1:c8:45:33:82:d2:5b:a9:98:84:88:d7:93:03:59:15:
         b9:07:b8:6c:0c:68:98:8e:43:7d:e7:2b:55:a1:ef:e3:f3:ea:
         e1:04:4f:1a:cd:05:3c:4b:44:2a:fb:e8:59:1e:45:96:02:1e:
         4c:1c:b5:0f:44:54:b1:43:1d:3f:95:b2:bf:66:8d:35:47:38:
         d3:4b:78:88:d4:c9:aa:20:84:15:c2:94:aa:5a:b5:be:2c:ad:
         ea:c3:ea:e7:f9:3f:4f:bb:d3:f5:ec:ca:81:cb:61:fb:c5:0e:
         cb:83:58:bb:58:4c:13:27:e1:86:c9:ac:d6:10:d3:a5:c3:01:
         01:b5:43:b2:69:1c:60:d9:00:a9:b4:f4:02:de:42:e2:48:b6:
         33:00:69:d8:28:e4:df:70:c7:96:4c:0e:eb:1d:01:1f:95:f8:
         5e:d9:fb:b6:66:61:97:5b:ff:fb:be:15:c2:a2:2d:f5:67:77:
         89:e7:17:e8:af:21:19:e6:a5:86:e8:81:5b:a1:ba:50:91:78:
         ff:82:70:5f:7a:b1:b7:52:31:dc:87:1f:f7:b0:48:7a:c2:d8:
         15:19:e3:b8:ef:f0:d3:06:9b:bb:49:bb:3e:b4:04:ed:75:3b:
         4b:59:f7:3b:f5:04:27:fb:12:5c:f2:82:bf:e6:7d:dd:38:dd:
         62:7d:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:39 2025 by rpki-client on console.sobornost.net