Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          6YAvxtNrzpxj3x5Cb4ZykoVnX47bHQJdeLRZbrkcJ+8=
Subject key identifier:   AB:B4:CE:9A:AE:E4:95:FC:F0:1C:14:C9:91:02:D4:4D:03:81:94:AA
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       071B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          0710
Signing time:             Sat 26 Apr 2025 21:33:36 +0000
Manifest this update:     Sat 26 Apr 2025 21:33:36 +0000
Manifest next update:     Sat 03 May 2025 21:33:36 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: bVxiOuSQdLmKjE33cVye88FH99IeFNKXGs/E9RPyba4=)
                          2: FA93793637C011EB97405947C4F9AE02.roa (hash: mkvl6eYOBUcYWRwYiBwVS0K1wVeK5CC5TdYufIA/AfQ=)
                          3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 1+jxf6thWYfAYYLkfgmBPO3HMtuISkV6ufCHk+IUOxQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Apr 26 21:33:36 2025 GMT
            Not After : May  3 21:33:36 2025 GMT
        Subject: CN=680d5130-57b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:60:43:43:d8:fe:06:73:19:18:c2:bd:13:
                    c6:6e:a6:50:d2:73:c5:42:99:52:43:68:76:08:f1:
                    bb:96:ab:b2:be:cf:01:5d:41:1b:45:da:49:52:08:
                    fb:36:11:cf:4f:18:cb:65:47:c2:de:50:4f:bd:64:
                    b2:fd:a2:1c:bb:59:48:17:35:c6:47:9f:9b:44:5a:
                    5d:d3:df:08:d8:6d:2d:da:a0:8a:a4:b7:31:68:f1:
                    80:fa:fb:e0:99:eb:87:17:62:a8:f7:60:be:81:25:
                    3c:3b:dd:38:81:2a:4c:a1:1a:07:3d:13:14:b9:9a:
                    6b:2f:b1:d7:dc:fd:f5:b2:da:1d:7a:7e:aa:65:e6:
                    ba:a1:b7:f3:e8:5a:51:5e:f8:0d:4b:d0:15:4f:e0:
                    78:2e:d8:85:80:81:8f:ca:83:5f:ac:d3:7e:cb:e9:
                    f1:1c:95:52:53:a0:8c:51:e2:f0:f0:e4:1a:4d:e4:
                    b0:cd:d0:a7:98:c8:13:e5:de:04:4f:35:b3:e6:71:
                    da:8d:8b:1c:52:5d:89:16:86:9f:7b:19:bc:b5:2f:
                    e1:af:5e:07:92:af:50:49:68:dd:71:1d:f4:83:aa:
                    89:df:11:d6:38:47:17:8d:c4:2e:3b:b6:aa:71:6a:
                    f4:7b:68:75:36:28:8e:00:90:24:99:e8:3b:46:6b:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B4:CE:9A:AE:E4:95:FC:F0:1C:14:C9:91:02:D4:4D:03:81:94:AA
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:d0:ee:27:33:4e:ee:44:58:99:af:18:09:39:1c:91:1f:a6:
         7f:eb:73:de:e6:6d:2c:cb:2e:b2:1f:80:ab:32:56:fb:5d:da:
         b7:06:9a:04:eb:c2:22:e4:76:0c:51:2f:e9:5a:d8:c9:96:db:
         b7:0f:1f:08:f2:00:bf:c4:1a:91:2d:20:e4:a2:ee:8f:46:d1:
         48:93:9d:90:23:77:4b:12:8b:b2:be:4f:b3:77:1a:1c:25:2c:
         96:e7:db:c7:f7:81:ed:a4:87:d0:8e:1f:0b:56:c5:c5:e5:94:
         0b:d8:e2:71:aa:41:85:19:54:ba:be:a1:0f:dc:0c:ad:16:b0:
         4d:d3:ad:2c:ad:7d:7e:13:d8:fe:f0:8c:94:28:d6:33:6b:18:
         ab:2a:a5:55:20:3e:14:4d:41:16:f0:bb:44:3c:69:75:d0:04:
         29:e5:35:72:36:0a:d4:41:63:b3:43:c9:5c:5c:c9:e6:a8:61:
         ae:8c:5d:1d:78:22:0e:b1:b6:5b:44:7f:44:45:77:28:9f:c3:
         c2:b9:7e:08:d7:99:65:5b:04:3e:98:e8:52:59:e5:a3:9c:8e:
         99:d3:6b:ae:ee:a7:eb:9c:3f:66:54:b8:40:53:0c:3a:d0:53:
         37:aa:0b:fc:7d:0c:52:d7:b9:98:e2:d2:ed:1e:d7:97:85:b6:
         c7:34:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net