Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
File:                     7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json)
Hash identifier:          mWYS3Bakk9jIYrz7DpolLre+nuoQvciMdhLaj9JAW8I=
Subject key identifier:   B5:C5:8E:56:78:30:81:AE:90:A9:F2:F2:00:46:17:D1:6E:42:82:B7
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
Manifest number:          04C4
Signing time:             Sat 26 Apr 2025 15:22:16 +0000
Manifest this update:     Sat 26 Apr 2025 15:22:16 +0000
Manifest next update:     Sat 03 May 2025 15:22:16 +0000
Files and hashes:         1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: bxF7kXR5yNkkTmCGbnZ+d7UqIBsnh5VlVTBOHLTo9GI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Apr 26 15:22:16 2025 GMT
            Not After : May  3 15:22:16 2025 GMT
        Subject: CN=680cfa28-cc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:dc:a7:b4:6b:74:2c:b1:19:bc:f4:ff:ae:
                    d3:db:13:7f:f5:f3:f5:54:3e:b6:f4:91:1e:9d:c0:
                    5e:1e:60:e7:3b:2f:a2:4e:6e:63:fb:25:ec:ac:14:
                    88:d1:5b:73:cb:ef:6e:8a:2f:1e:ac:1d:d4:f4:c2:
                    fa:05:08:ac:2e:d3:da:93:2e:ef:67:d0:aa:e6:58:
                    3b:13:f7:65:ce:d9:f7:21:14:fb:8d:24:ff:91:ac:
                    5e:0e:ea:b4:21:3f:a0:c6:eb:c7:85:59:a9:e7:ad:
                    14:17:fe:77:ae:30:62:42:56:b8:24:9f:d6:d7:7c:
                    01:7c:44:a5:b0:2b:ea:b0:4e:f9:e9:2f:71:db:94:
                    d6:84:81:e2:b6:90:9a:ba:81:d5:60:d6:dc:47:48:
                    f5:a1:9e:32:c5:5b:2b:b8:6e:82:27:d7:6f:9d:49:
                    f8:59:9d:e6:d8:44:92:6f:8d:44:3a:11:6b:61:22:
                    04:0a:ee:7c:6e:2a:51:2c:b5:e0:ca:23:c0:85:2f:
                    80:56:ee:f0:d4:7b:b6:1e:ce:73:5a:53:2e:97:2c:
                    c3:03:f3:fe:f5:a9:d4:3a:e8:e3:94:ce:04:4c:e4:
                    ba:28:88:6f:21:c3:34:48:cb:63:38:b7:7c:32:a7:
                    66:2c:27:64:3b:cf:38:4f:77:cb:81:21:de:8f:a4:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C5:8E:56:78:30:81:AE:90:A9:F2:F2:00:46:17:D1:6E:42:82:B7
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:08:ee:6c:c4:3e:ca:97:52:fb:5f:7c:9f:ec:af:88:ca:24:
         3e:8c:69:82:e8:a5:14:3e:7e:e0:18:25:1b:a1:24:c7:56:c7:
         1c:d0:6f:ef:74:e8:73:b2:5f:9c:08:ca:db:ff:6a:9b:d4:6f:
         a3:d1:2b:64:52:be:3b:44:7b:5d:18:cd:f2:4d:28:78:d5:67:
         71:be:06:e3:10:82:b0:7f:cf:19:bb:4d:9e:7f:df:ed:d0:89:
         b8:a2:cd:3c:53:aa:08:e0:15:49:2c:ad:2a:38:42:a2:21:0d:
         a0:64:bb:1d:18:4a:0f:55:49:29:d9:bc:d3:8d:6c:2c:3b:74:
         47:b8:70:17:28:03:e3:4a:8e:c7:3e:d9:58:c8:9c:3c:c3:ea:
         54:28:ad:38:73:4c:89:df:80:26:d0:c3:df:1b:1d:83:42:85:
         72:57:15:fe:6a:14:5c:fb:bd:8a:6e:36:98:2a:00:7f:ca:53:
         88:4e:e2:2c:14:a2:c9:10:f1:8f:24:4a:71:95:a8:65:86:37:
         6c:2b:11:1f:8d:37:99:99:1a:ef:86:a5:3f:1e:e5:d4:e3:df:
         20:4d:48:3e:b1:c6:fa:d9:02:0d:46:bc:01:7e:15:11:6c:83:
         cb:d1:72:b9:20:70:31:c4:70:86:ae:54:30:35:0a:48:f7:ed:
         00:73:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:27 2025 by rpki-client on console.sobornost.net