Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
File:                     mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft (raw, json)
Hash identifier:          XH93jKIO9Vda6da1gsKPdsN4igI69vsiPfP7QLu+bIE=
Subject key identifier:   3B:A4:C0:1B:BA:22:0F:F9:77:A7:8E:43:74:99:7B:EB:09:8F:71:11
Authority key identifier: 98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5
Certificate issuer:       /CN=A9191989/serialNumber=98E54ED57250C612747E3CA296853EAF919059F5
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
Manifest number:          01C6
Signing time:             Sun 27 Apr 2025 02:09:30 +0000
Manifest this update:     Sun 27 Apr 2025 02:09:30 +0000
Manifest next update:     Sun 04 May 2025 02:09:30 +0000
Files and hashes:         1: mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl (hash: SQnsbblRLdP1/9JGFgW0N11GvFXUO4qOG/TxwIRnJtQ=)
                          2: 40EF3C8690CE11ED98F4C344C4F9AE02.roa (hash: P9D/nziK9AMdOvj2LYszQtonPVIk8D2X2+l0ieGppXA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl
                          rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191989, serialNumber=98E54ED57250C612747E3CA296853EAF919059F5
        Validity
            Not Before: Apr 27 02:09:30 2025 GMT
            Not After : May  4 02:09:30 2025 GMT
        Subject: CN=680d91da-3990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:3d:61:fb:84:cc:f3:aa:1e:87:f1:01:4c:
                    ca:cf:81:f6:1f:20:89:d0:d2:3d:ec:4b:cb:5b:10:
                    f9:fa:ef:e7:13:ef:8e:4b:98:55:b8:c1:04:cf:2e:
                    4d:6d:b6:cf:7d:c0:f7:3d:65:3a:79:ec:63:fa:b4:
                    e6:67:14:9f:a5:40:07:38:c7:4c:79:ca:e9:77:c9:
                    c1:3e:25:fa:d8:d9:67:52:08:17:6a:5f:99:1d:8f:
                    ec:db:75:d6:ea:7f:e4:85:f9:63:4e:2c:34:00:82:
                    a1:f0:c1:00:ba:90:e4:e8:43:da:25:a0:de:27:6e:
                    1c:e2:9a:dd:be:37:0a:3d:15:f6:09:f7:a7:fa:08:
                    9f:de:62:ad:8e:5d:85:36:2c:33:20:b9:77:7d:df:
                    5e:d2:3f:77:91:16:4b:7b:96:8a:ce:43:d7:82:26:
                    5e:25:a6:19:82:19:c6:f2:fb:a2:23:1f:a5:04:6e:
                    9e:96:16:28:f4:1b:a1:e7:bb:00:a6:f7:bb:f2:57:
                    9d:5b:f0:21:d8:e4:7b:1e:98:e4:cf:d9:86:25:dc:
                    66:dd:ff:76:0b:28:14:04:14:e9:86:0c:c7:db:68:
                    43:81:78:de:fc:d4:b3:cd:5b:b9:ea:9b:f8:ca:e6:
                    d8:fc:d2:98:29:21:75:f4:3d:ec:13:e6:15:96:8d:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A4:C0:1B:BA:22:0F:F9:77:A7:8E:43:74:99:7B:EB:09:8F:71:11
            X509v3 Authority Key Identifier:
                keyid:98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:8e:dc:05:b4:5d:dd:46:34:fe:66:7c:2e:72:d3:d7:23:
         2f:14:81:06:ec:9d:9c:47:e7:61:78:ef:d7:cf:63:fb:2f:75:
         60:2a:08:ca:61:6a:49:b0:07:9e:c9:68:94:34:5e:72:9c:72:
         69:49:86:a9:d2:4c:ca:1c:55:28:a4:b1:05:8f:fb:7c:50:01:
         56:0e:0e:81:7e:73:44:4f:5c:72:c8:95:de:34:21:eb:cb:42:
         1d:a3:ff:57:d6:1a:bc:c9:79:7b:84:7f:2c:2a:b4:52:fd:d1:
         88:52:8b:48:4d:83:dc:74:cb:26:fb:07:35:e8:35:96:49:ed:
         ba:c0:31:3a:c4:c6:57:3a:69:3e:07:ab:12:a3:b8:bc:9e:08:
         29:b4:cd:25:c3:ed:1f:94:5d:95:9a:d6:7e:a7:97:e0:f4:a7:
         6d:69:67:57:16:c0:95:9b:6d:b0:ce:33:7f:e8:31:07:07:69:
         41:93:aa:b1:45:3f:c1:20:c8:28:11:53:86:7d:a4:34:8f:59:
         e1:ca:ca:94:56:dd:a9:a6:1d:41:86:0b:27:1c:18:19:a3:cb:
         fd:5e:2c:07:54:d5:d4:bf:04:48:c7:8a:c7:e3:21:4c:ea:18:
         2f:9a:41:55:ef:a6:28:f0:d0:f1:e8:bd:a1:82:2e:b0:56:ab:
         91:59:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:59 2025 by rpki-client on console.sobornost.net