Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
File:                     PeqLG7hy3RJspkfMN1wgdgJAw4U.mft (raw, json)
Hash identifier:          zNKC6loTcwIvz0XnmKJ1vyFLA0yGd0EQih/DCBjPGqI=
Subject key identifier:   69:70:72:78:1E:F2:06:61:03:28:AF:6E:AB:64:22:C0:AD:7A:69:80
Authority key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
Certificate issuer:       /CN=A918F0E2/serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
Manifest number:          57
Signing time:             Sun 27 Apr 2025 06:01:34 +0000
Manifest this update:     Sun 27 Apr 2025 06:01:33 +0000
Manifest next update:     Sun 04 May 2025 06:01:33 +0000
Files and hashes:         1: PeqLG7hy3RJspkfMN1wgdgJAw4U.crl (hash: Y8iJGnChBfr7WcpEhYJiCwLTXvT0KoyPeDQtmucJXzs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385
        Validity
            Not Before: Apr 27 06:01:33 2025 GMT
            Not After : May  4 06:01:33 2025 GMT
        Subject: CN=680dc83e-dc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:2a:7d:60:a0:a1:fe:fb:0b:d0:96:4e:2e:
                    58:d0:2e:77:63:42:18:44:90:e8:5c:ca:79:b9:96:
                    dc:b4:f9:24:51:fe:12:83:19:ff:f8:33:da:5a:a2:
                    26:d8:6a:84:e8:11:57:8f:0c:dc:28:8a:45:a3:dd:
                    57:f2:3e:ba:d5:ce:91:3d:10:9d:6c:4c:56:b9:19:
                    87:ff:3e:74:a3:d0:07:2d:06:b1:79:8b:93:40:72:
                    a8:a0:10:29:a5:46:8d:29:88:09:cd:b5:e7:56:af:
                    57:a5:8a:0a:2b:6d:8e:af:d3:06:17:d1:e5:9f:9d:
                    4b:e5:2a:17:d1:a1:37:ce:83:57:53:cc:15:07:55:
                    8b:fd:8f:67:8d:08:49:60:c6:cb:0d:ad:6c:45:93:
                    22:5a:9d:36:92:62:e4:42:73:fc:cf:e1:e8:35:36:
                    c1:45:db:3e:91:04:00:a6:45:0b:9e:db:7c:37:59:
                    36:40:54:5b:90:54:5b:c2:3d:2f:f3:0c:9c:de:9a:
                    fc:d0:f5:b3:e5:90:4a:44:bc:76:bd:72:26:fb:f5:
                    1b:8c:61:c1:e9:21:3e:6b:b3:39:84:29:ac:f0:3a:
                    94:b5:c8:45:14:f6:24:99:46:de:c4:ad:2f:16:88:
                    b3:cb:25:c2:fb:13:6e:a8:35:47:f7:ab:3a:47:03:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:72:78:1E:F2:06:61:03:28:AF:6E:AB:64:22:C0:AD:7A:69:80
            X509v3 Authority Key Identifier:
                keyid:3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:48:e2:3f:3c:64:d5:8b:c9:c4:dd:8e:9f:c5:fb:14:19:58:
         38:98:3b:87:ec:0a:2b:f9:18:93:b1:f1:34:0f:d7:e7:ed:74:
         75:4b:30:86:a5:3c:f8:87:fb:b8:93:94:39:98:56:7a:aa:98:
         a4:6e:19:0f:5f:50:4e:bf:7f:55:43:fc:1a:f0:19:a3:ae:80:
         98:b7:ef:4f:51:bf:63:30:c1:d2:89:86:e4:73:33:24:87:cc:
         bf:82:a6:cd:9c:78:04:2f:da:0e:29:9b:d7:e4:86:4f:93:99:
         5c:da:45:0d:f5:92:1e:6e:ea:81:48:d5:2b:b9:ac:04:3b:b6:
         80:cf:ce:fc:99:86:61:8c:c8:fc:4a:1a:ca:ca:d0:05:09:90:
         17:8a:4d:4d:d8:32:81:f4:98:83:8c:f8:08:ef:a8:55:6b:cb:
         0e:fb:60:23:ce:87:1c:54:b9:84:77:47:64:dc:fd:b4:36:05:
         6b:c7:1d:03:b9:56:39:2d:c9:18:c3:6e:79:ce:50:54:e2:5f:
         70:db:fe:eb:9b:44:9e:c4:43:00:96:55:d3:09:62:e6:c3:78:
         48:ca:e9:e1:c7:c8:df:69:0a:95:f5:47:d5:ad:63:86:2c:39:
         3c:10:e0:2f:eb:03:1b:2e:df:f4:cc:47:94:6c:4b:9e:20:ba:
         88:50:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net