Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File:                     dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier:          dyUSzPccqQBMiDiILTOYeTvDajOKUXZITRNVraLGnKE=
Subject key identifier:   E7:CB:F8:41:0D:AD:D9:07:85:5E:1E:58:17:A9:54:A8:72:E2:E2:1F
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number:          039C
Signing time:             Sun 27 Apr 2025 00:25:42 +0000
Manifest this update:     Sun 27 Apr 2025 00:25:42 +0000
Manifest next update:     Sun 04 May 2025 00:25:42 +0000
Files and hashes:         1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: rfkTlsbQd54EVI8Dj3YffwuDZ8AgiQJEnWO2AWOuokI=)
                          2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: qw+A+BnLOmGwGidGoi7dHOK2xbb/S+TCMScy/km8BDQ=)
                          3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: n+2sXe4f0iVt9C4wbyP1cXDc9FlPGl6NGcrzJRe+w7U=)
                          4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: u6+Gbtl2iv9JRXTumN5Ye5SMQrPpCaTXinSOYRqNVkQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: Apr 27 00:25:42 2025 GMT
            Not After : May  4 00:25:42 2025 GMT
        Subject: CN=680d7986-5724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:54:de:af:e2:8b:aa:4c:e9:59:cb:5d:0b:
                    b9:d0:8b:48:27:d6:57:56:53:b6:90:7a:7c:12:d7:
                    20:40:71:bf:b1:96:6d:c5:fc:fa:45:a1:e8:31:e7:
                    b2:fe:19:da:49:86:26:50:94:86:ae:24:ea:18:83:
                    e1:fb:d2:ee:e7:40:c5:e7:8f:f7:bd:ce:d5:25:a1:
                    31:0b:51:f1:6b:05:f8:5f:1d:2b:45:20:9b:89:3c:
                    79:7d:c3:23:cb:1e:5a:31:12:b6:58:30:7a:b6:8e:
                    fd:2c:33:db:af:e3:d7:59:51:27:47:45:b2:5c:c0:
                    41:39:35:05:56:48:b2:58:30:99:11:81:d3:0d:f4:
                    d4:78:4b:f2:c5:e4:3c:1c:b6:be:ee:80:95:24:6b:
                    79:b6:7e:93:05:40:c7:da:63:ba:aa:63:20:ae:05:
                    57:59:c9:04:71:6e:9d:e5:a7:1b:99:2f:11:ca:fe:
                    fb:d8:53:b1:1f:7e:9e:9c:36:f5:6a:ad:df:ef:59:
                    70:f4:66:2c:af:7c:69:8e:2e:d4:3f:81:d5:08:b8:
                    7a:c4:57:fa:71:e5:ed:5f:34:c6:ef:b4:67:20:9e:
                    de:69:0b:85:46:92:f4:d3:ee:45:ac:e6:a4:6c:53:
                    d6:4e:00:fb:6c:19:0c:8c:25:7b:49:ed:eb:39:5e:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:F8:41:0D:AD:D9:07:85:5E:1E:58:17:A9:54:A8:72:E2:E2:1F
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:da:fd:f3:09:90:2a:a4:76:6e:ea:5f:a8:24:3f:79:46:a3:
         b2:72:d3:a1:b4:33:3f:89:54:6e:71:46:bd:fe:45:85:ac:6d:
         cd:22:6e:cf:62:ed:76:8e:66:e5:5b:15:be:85:44:77:31:23:
         90:dd:27:31:e9:7c:89:fe:d9:59:b0:06:9d:a3:12:d9:72:5f:
         31:45:2b:8b:4f:9b:5b:4a:23:0d:48:6d:d3:b6:d6:17:34:f6:
         df:d3:85:c4:0c:5d:dd:88:4d:7e:cc:50:1c:2f:2e:33:3d:dc:
         98:7b:99:37:20:5a:02:76:2e:c8:bb:11:77:cc:22:2e:c5:63:
         6f:ae:bd:1f:af:6b:b1:ee:02:76:44:10:6b:8f:5f:bd:6b:a6:
         31:b4:cb:de:6c:a9:1d:b3:e2:8e:86:23:73:43:9e:0a:80:d1:
         64:58:3b:f2:db:33:67:bd:6e:22:93:86:b0:4e:78:42:93:c2:
         ed:2e:18:81:2d:a8:85:f6:ea:95:eb:5c:60:91:50:2c:d6:b5:
         3f:03:01:a1:bf:1a:94:8d:7d:fa:e7:04:9d:ad:5d:7c:9a:c6:
         f9:12:05:29:c8:1a:d4:df:16:e6:9a:cb:b2:97:d4:a5:2b:fd:
         40:86:c2:ea:f6:a8:69:67:b6:18:c1:6b:7d:97:af:31:00:a3:
         2c:2d:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:59 2025 by rpki-client on console.sobornost.net