Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File:                     31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier:          TOSemncQ/KVVmQIY/cDKwZj0ppCZqCte8lwlRkXxews=
Subject key identifier:   98:58:42:30:8E:51:F7:33:F5:E0:6F:85:7B:CA:6D:AA:F0:85:0C:C6
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer:       /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number:          0165
Signing time:             Sun 27 Apr 2025 02:54:43 +0000
Manifest this update:     Sun 27 Apr 2025 02:54:43 +0000
Manifest next update:     Sun 04 May 2025 02:54:43 +0000
Files and hashes:         1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: mD126fD1SjxT7a/grPKQEuhxtA8vCPfzF9aZOohqpNg=)
                          2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: M5+rFpRElgL5MsNDAAy/cLdqoRb25PYbimpSg/t1Z3k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
                          rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
        Validity
            Not Before: Apr 27 02:54:43 2025 GMT
            Not After : May  4 02:54:43 2025 GMT
        Subject: CN=680d9c73-0405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:5d:a9:aa:ce:8e:a5:1d:81:b8:d1:09:ec:
                    cd:33:8d:59:35:6e:47:ca:dd:c4:55:2f:9c:1e:41:
                    00:b4:a6:41:55:cf:bf:39:c3:6b:76:1e:32:c9:ab:
                    8a:df:10:77:c8:39:80:f1:62:65:a5:7a:a0:d2:0d:
                    dd:ac:39:17:d5:0e:2d:86:f2:9b:4d:ed:a4:bb:09:
                    11:57:d6:e6:d5:1a:48:18:70:ba:af:4e:af:f1:11:
                    79:54:9f:ab:48:64:47:e2:bf:c7:8c:06:60:ef:13:
                    34:37:67:40:da:1c:58:4b:17:c6:5a:7a:95:66:d4:
                    96:cd:ee:c3:bf:f4:71:ee:b4:2b:dd:50:53:4b:ec:
                    60:cf:87:de:e8:93:40:f3:a2:c4:f7:e0:ee:83:16:
                    6e:06:f7:46:5b:e4:2d:0e:62:e7:98:b7:ed:26:f7:
                    82:94:d0:77:0d:41:d4:cd:c4:af:65:82:2d:4d:2c:
                    89:75:4a:01:07:d5:52:d8:18:b6:1c:52:5b:86:26:
                    20:cf:4e:1a:70:90:58:d4:d2:e5:5d:00:68:f6:aa:
                    28:45:4d:56:4b:7c:f7:8c:5c:e8:53:67:5c:f1:32:
                    26:b9:9f:61:dd:aa:a7:2a:a1:eb:01:06:85:75:05:
                    9e:4e:56:05:d4:a0:41:81:6b:29:4c:aa:f6:d2:a0:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:42:30:8E:51:F7:33:F5:E0:6F:85:7B:CA:6D:AA:F0:85:0C:C6
            X509v3 Authority Key Identifier:
                keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:fc:e0:d2:45:51:bb:97:54:49:8f:b2:6b:9e:13:fc:14:
         58:a7:a6:83:17:f3:76:09:ad:aa:36:ac:bd:8f:80:5f:29:70:
         29:26:42:f2:b6:48:53:77:bf:73:e0:4b:5c:4f:10:b8:ed:bd:
         7c:2f:f8:04:c7:93:2f:43:03:19:19:6f:fb:4e:01:0c:5d:c2:
         ed:0d:61:c6:13:6f:1d:cb:07:98:c4:97:2c:ed:b9:a0:07:da:
         09:21:17:c8:f8:94:a4:90:37:5d:40:9f:3c:93:22:52:f9:ec:
         0d:92:07:83:f5:ae:ae:00:18:04:1c:c6:21:3e:7c:fe:fb:da:
         5c:38:ca:ff:9d:b4:77:40:d0:e5:b5:24:6a:8f:20:58:a7:df:
         ba:b6:89:d4:f6:7f:eb:e3:fd:38:1e:d3:71:a1:b0:b3:ba:22:
         9b:46:99:1e:bd:4b:7b:80:37:26:d7:2b:ea:9e:ad:f8:33:2b:
         99:25:5f:62:0b:fa:53:dc:bd:71:ea:48:2f:6c:23:d7:a4:b9:
         2d:39:5e:3a:0f:ce:f4:f3:89:b9:84:4c:12:47:98:59:c0:0f:
         5b:cb:88:7e:42:45:f6:1d:e7:0a:bd:a0:9b:5d:80:8c:2e:04:
         f5:d6:58:f1:e2:4d:0a:af:8e:89:82:d4:73:ed:2c:e2:b0:fd:
         81:38:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:59 2025 by rpki-client on console.sobornost.net