Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          X4ZEKNDsTb/EJ7LhWybH1gX4OQk4NJNuALN2V1J6Zn8=
Subject key identifier:   CF:B2:DE:A0:2F:00:CB:11:95:A6:79:2A:9E:66:5C:0B:C0:A3:A2:ED
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          019F
Signing time:             Sun 27 Apr 2025 02:22:45 +0000
Manifest this update:     Sun 27 Apr 2025 02:22:45 +0000
Manifest next update:     Sun 04 May 2025 02:22:45 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: vpIJH60bbEyHMG6u0Ygcjvn4M8rAXVEn1wvI21sSZL8=)
                          2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=)
                          3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=)
                          4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Apr 27 02:22:45 2025 GMT
            Not After : May  4 02:22:45 2025 GMT
        Subject: CN=680d94f5-f1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:61:af:32:fb:7d:00:27:5e:08:b6:78:8f:
                    c7:18:a4:9e:e0:44:e8:c0:fe:f9:ba:bc:3d:6e:9d:
                    44:53:55:19:83:34:25:00:a7:0e:14:a8:3e:44:ef:
                    62:be:02:dd:9f:ca:9b:7f:19:4b:88:c1:e3:bc:5d:
                    41:8c:7f:36:ea:0d:87:5d:23:43:83:4b:15:41:46:
                    fd:af:34:0e:98:24:b4:87:ca:6e:b7:e1:b4:b2:d6:
                    c9:4c:3a:5f:2b:98:cd:ae:1b:1f:fc:3c:4a:52:43:
                    d3:0a:4c:eb:f1:e5:2a:da:84:60:9d:75:9b:d1:12:
                    37:a0:94:5b:6b:44:33:40:bf:9a:02:fc:f8:08:b2:
                    80:72:21:db:bc:da:09:6a:60:ba:64:a6:06:0f:05:
                    62:94:a1:d4:26:a0:b5:03:97:d2:d1:73:ad:a9:13:
                    c5:6c:5f:1e:f4:40:32:f2:0d:b8:ae:72:35:f4:fb:
                    4f:7c:10:c7:61:5f:bf:9a:3c:ec:8e:e6:68:aa:36:
                    5e:82:5b:0c:2b:09:b6:1b:77:4c:0b:aa:c7:5e:11:
                    63:1e:38:84:97:b5:60:83:b2:fe:a0:d8:92:23:67:
                    83:f0:6c:c6:0a:ec:c9:76:44:e4:c5:18:bf:d9:94:
                    f9:6e:f0:e9:d9:8c:26:32:c4:90:29:94:f2:e9:43:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:DE:A0:2F:00:CB:11:95:A6:79:2A:9E:66:5C:0B:C0:A3:A2:ED
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:06:25:93:6a:f9:d0:10:f3:3a:18:ce:8d:81:50:61:78:55:
         e1:a0:99:51:cb:62:8b:d0:73:ac:d5:90:6a:70:ca:6a:5a:a8:
         4c:fb:22:24:e4:3c:13:b7:ab:b9:75:b6:4e:17:27:37:02:96:
         4e:89:85:0b:07:3e:9d:ea:be:38:d9:ad:7f:3a:72:71:40:61:
         f8:82:94:e8:1a:3d:08:85:44:76:cc:9c:3b:49:ff:87:07:88:
         08:69:66:da:75:b6:f7:dc:07:04:41:f3:ff:11:ed:50:50:38:
         2e:72:d1:3f:c7:10:ff:00:a1:ae:0a:33:02:16:24:bd:69:0b:
         46:5d:96:6c:59:ac:5c:39:09:9c:32:97:bd:11:e6:c7:25:55:
         36:f4:27:d2:31:a6:f1:cd:81:36:23:4b:ee:e9:8b:af:75:4a:
         93:56:cf:d4:d1:b5:79:56:c6:da:19:fa:d2:ff:b2:b0:52:d0:
         f0:2a:3e:e6:b4:21:42:97:f0:e9:13:6c:1f:ab:aa:3e:5f:6d:
         e4:de:c6:87:ad:5c:ff:dc:d7:c1:8b:2b:4c:54:a0:b7:04:f6:
         d0:1d:c4:dd:33:a5:4f:c7:df:00:54:0d:cc:ef:7a:e6:bc:8e:
         d3:6a:cc:a9:87:08:b7:39:b5:e4:4d:3c:37:fe:31:5f:19:ee:
         1f:03:51:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:59 2025 by rpki-client on console.sobornost.net