Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File:                     XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier:          DdVI1Z3MomEc4VaTApC2bO6NgUB1XzI9fONeN766PtI=
Subject key identifier:   26:F6:3F:84:90:17:1C:D7:29:52:E9:BD:E4:1C:DF:3C:74:41:72:A0
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0B34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number:          0B27
Signing time:             Mon 28 Apr 2025 19:32:52 +0000
Manifest this update:     Mon 28 Apr 2025 19:32:51 +0000
Manifest next update:     Mon 05 May 2025 19:32:51 +0000
Files and hashes:         1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: bvWBIHjP0sJnM4OdBi6hGJbnpfUuYsjZErpzlTaEWWw=)
                          2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: jt3q3eu5PH5pGOuIsdjdUutobUCzp2vYtDeECsWMzEc=)
                          3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: rs0VbwQOx7elbsUZDFIThAHCStbl8j3g8d0JAoWIucc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2868 (0xb34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Apr 28 19:32:51 2025 GMT
            Not After : May  5 19:32:51 2025 GMT
        Subject: CN=680fd7e3-9ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:35:72:38:93:22:59:2c:61:62:17:fd:0b:
                    9d:dd:1f:28:87:f6:73:65:f0:47:07:96:f5:c7:4d:
                    f7:50:ef:da:a5:b3:3f:dd:31:3d:19:99:93:04:65:
                    03:82:28:33:60:7a:cf:22:bd:ad:7f:31:3f:1d:1c:
                    62:56:ac:00:88:67:f3:83:89:f9:f2:64:69:4d:15:
                    ce:36:2c:40:03:ec:52:98:e3:7f:6f:a1:e7:35:b8:
                    dc:6b:9a:1e:06:c5:a8:75:65:62:7e:8a:53:52:f6:
                    dc:61:58:00:08:fc:e5:fd:8a:c0:10:67:89:13:bc:
                    8c:86:e0:0a:a8:66:a2:7f:e6:cf:3d:a3:52:cb:2d:
                    b0:cd:b7:1d:9e:49:85:bf:b2:0a:37:f3:f9:86:a5:
                    df:1c:fd:8b:02:44:d7:6a:d6:5c:77:fb:f3:fe:30:
                    26:27:6e:31:12:42:13:ee:b8:e7:56:9b:b7:f5:0d:
                    c1:a0:59:aa:c5:19:d4:53:52:2a:3b:93:82:65:c0:
                    81:8d:cc:b1:87:52:d4:51:c1:e6:70:dd:bb:87:cb:
                    bb:ae:e0:c1:1c:2c:24:dc:f0:d2:81:32:b3:16:49:
                    6e:b0:fd:25:f4:05:71:34:97:69:13:90:ba:9a:d2:
                    37:1b:94:86:b9:06:f1:c7:56:60:42:f5:d6:36:8c:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F6:3F:84:90:17:1C:D7:29:52:E9:BD:E4:1C:DF:3C:74:41:72:A0
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:7d:b8:a7:d8:cf:e8:f3:ec:44:78:4e:56:cf:27:3f:53:
         30:dc:d0:d2:ea:a1:b3:a5:fb:ab:ed:ad:cf:e8:b0:0d:ca:c1:
         18:e9:28:4d:0b:86:66:1b:ce:78:9d:a6:6e:57:ba:c9:07:5b:
         bc:46:e5:03:0c:43:94:9f:14:2c:fa:94:ca:f4:a1:bb:b5:af:
         be:34:a7:a0:42:30:f5:95:8f:da:c7:74:57:68:a9:ce:86:be:
         ea:6d:75:26:54:23:98:9b:e1:8d:9c:ac:33:df:47:ec:d5:d0:
         5b:c5:a7:5d:5e:3f:7c:e2:d2:aa:a5:f0:4b:c8:bf:ce:8a:9c:
         3f:11:4c:e0:16:5a:c8:a0:26:e0:98:1a:69:4a:c9:36:1e:80:
         d9:c0:6a:0a:fe:8c:eb:67:fa:f5:6c:da:4b:a0:c0:b7:73:8b:
         42:17:2d:a1:a6:4d:6c:2e:e1:6c:ef:34:71:ed:79:a6:35:a5:
         03:36:15:d4:a1:c7:7d:04:ad:69:04:9a:cb:d4:ca:02:d9:01:
         ef:30:8b:86:13:66:0c:f9:17:3d:2a:64:01:b3:50:83:d6:ff:
         9c:73:18:f8:38:09:fb:76:22:33:d9:99:8f:5a:22:da:50:b9:
         0e:f0:61:6a:4f:40:ba:36:cb:b5:d4:6b:fd:b4:ab:c9:88:33:
         ae:af:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:39 2025 by rpki-client on console.sobornost.net