Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          19aW9YhgnUkCDSpiSqmeAI3aOtPKFqpSSu+PNG8GWIk=
Subject key identifier:   46:F3:35:2F:72:BE:99:00:67:51:3E:14:31:F6:69:17:8D:6B:D7:98
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          48
Signing time:             Sun 27 Apr 2025 06:13:46 +0000
Manifest this update:     Sun 27 Apr 2025 06:13:45 +0000
Manifest next update:     Sun 04 May 2025 06:13:45 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: R6Ip1aulKRSbAmekLrdaxuQ2LNDmfOXe5AFvqGH++uM=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: +OL0LwWDdzCSmXdG5gDsUEjfzy5Uq5zJxTv17RF0xXQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: Apr 27 06:13:45 2025 GMT
            Not After : May  4 06:13:45 2025 GMT
        Subject: CN=680dcb1a-88a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:94:8a:a8:aa:05:35:c8:fa:16:b9:0f:6c:
                    2e:53:2c:f9:00:8b:19:ba:25:90:66:4c:3f:6d:45:
                    3e:01:61:ac:8e:20:f0:b5:19:51:a7:f7:76:92:b1:
                    de:55:53:f6:00:c9:0f:5e:ac:13:84:82:e9:85:1d:
                    ad:81:3e:96:da:55:ff:76:6d:3c:61:ff:52:d9:d2:
                    f7:e2:93:30:1d:e7:2f:bb:34:77:de:3e:98:1c:a2:
                    ff:45:55:f3:a3:0d:6c:bc:96:e2:14:d1:db:b2:c1:
                    be:ac:7f:fb:86:a5:1d:7e:82:f6:18:86:1d:4b:d3:
                    c7:a0:9e:6b:22:18:0c:7b:76:79:20:73:75:61:77:
                    45:28:41:48:7c:4f:62:5a:d9:30:b4:59:50:af:b4:
                    a7:37:46:40:f2:8a:54:a4:74:78:6c:0b:97:6d:17:
                    fd:fe:65:52:75:e8:87:ad:dc:64:a8:cf:65:d9:9d:
                    75:8b:77:73:60:ec:8c:00:8c:8f:c1:27:0f:a0:7a:
                    fa:aa:9d:88:27:6a:82:2d:57:94:7e:6c:74:77:2b:
                    0e:2e:ac:a0:61:30:82:8a:06:98:e8:a5:d4:bf:1c:
                    91:70:0a:b3:c2:58:20:fc:29:fd:54:d6:30:ca:8c:
                    1f:35:06:9f:3c:1b:b7:92:f9:39:6c:e8:6f:5a:e2:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:35:2F:72:BE:99:00:67:51:3E:14:31:F6:69:17:8D:6B:D7:98
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:23:e7:d5:d6:33:0e:8c:c4:c6:76:de:09:57:94:04:57:35:
         39:49:8c:2f:33:8f:bc:06:2b:31:8a:a9:a1:c6:0a:90:30:7c:
         83:ee:0f:68:08:c6:d7:5b:53:8a:5e:21:de:16:96:3a:63:c7:
         65:b8:62:18:43:a4:04:64:50:15:9d:5c:67:b4:7d:f7:c9:6d:
         8a:01:0e:b8:12:54:75:16:11:80:f1:ea:ff:56:52:c1:74:25:
         f8:df:3a:78:87:23:1f:fe:69:7e:28:5a:4a:63:02:d1:47:78:
         66:3a:99:62:6f:0b:83:e2:ad:84:38:51:5d:50:05:68:7e:45:
         5b:82:8c:27:82:be:f0:c9:4b:e6:ce:51:df:77:4d:73:b6:37:
         0b:ac:af:b1:23:d6:f3:a7:44:ea:b3:a4:8a:3a:96:ac:3e:36:
         7f:30:ed:a2:99:0b:f9:bc:f0:6a:98:d5:4a:43:4f:3e:89:0f:
         d6:36:de:48:3d:c6:aa:cb:1c:04:f0:43:b1:c8:d4:10:01:4b:
         9e:c1:c3:36:5b:35:00:87:7a:a4:f2:4f:93:cc:45:b8:25:4f:
         65:c2:b1:cc:a1:4e:6e:a8:ce:fb:92:39:81:cd:b7:fe:cb:97:
         59:fd:45:22:bc:04:98:2a:72:f8:26:84:0d:20:d4:9a:ca:c7:
         8b:55:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net