Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File:                     DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier:          yquUL16GGttHSpPJe8SFpZf8hGQhm1oTI1g8KoeVO4k=
Subject key identifier:   07:E9:95:D5:86:4D:38:60:6D:CF:FF:46:25:E6:20:83:C7:5C:49:E5
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer:       /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number:          1C
Signing time:             Sun 27 Apr 2025 06:44:06 +0000
Manifest this update:     Sun 27 Apr 2025 06:44:06 +0000
Manifest next update:     Sun 04 May 2025 06:44:06 +0000
Files and hashes:         1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: h7RwVFfVHL09Aic/mkaikXi0b+VVUQLbiZQfY7zYpv4=)
                          2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: JCV9BgemXhUBaAgBPhl6UiNH0ukdvH/wrcQapOQQK+U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
                          rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
        Validity
            Not Before: Apr 27 06:44:06 2025 GMT
            Not After : May  4 06:44:06 2025 GMT
        Subject: CN=680dd236-2ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:5a:92:4b:97:73:68:5d:22:1a:da:c1:c5:
                    38:9e:bd:aa:87:43:b2:14:96:f4:3b:af:4c:0b:47:
                    55:09:27:cc:d7:fa:97:e6:07:13:d1:b3:9e:9d:c3:
                    a0:15:fd:a4:13:b8:b5:7b:81:88:57:a4:0e:32:3e:
                    73:17:7b:81:cb:7b:28:9f:b3:c5:58:f9:28:af:f4:
                    a6:32:b9:a4:91:66:79:4d:50:e3:f7:54:c4:74:7d:
                    26:b1:0f:4b:4a:bc:5c:37:f3:8c:37:08:f5:d6:99:
                    b7:ca:82:f3:98:28:7e:e1:24:aa:40:30:9a:a3:d9:
                    1c:8d:68:20:ae:7e:46:69:1e:f8:51:4e:4a:87:ff:
                    47:ea:78:66:e4:6d:41:c3:45:3f:21:58:5a:5c:3f:
                    5d:5b:f0:fc:df:14:8c:31:b2:f2:76:b1:ce:db:f4:
                    79:8c:c1:ee:f0:57:7a:b5:ec:ae:b4:d2:78:cc:25:
                    52:c1:82:62:f6:bd:08:f5:a7:d5:74:49:f0:01:50:
                    05:a5:f1:00:de:97:18:f3:b9:05:63:2a:3d:1a:3e:
                    1f:b7:c4:02:4b:92:af:d8:52:77:4b:dd:89:40:8f:
                    3e:c7:25:6a:1f:9a:22:e7:a7:ae:14:58:35:b1:20:
                    ef:68:b7:50:e2:5a:cb:3a:aa:94:02:53:aa:c9:ae:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:95:D5:86:4D:38:60:6D:CF:FF:46:25:E6:20:83:C7:5C:49:E5
            X509v3 Authority Key Identifier:
                keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:0c:18:f4:c2:bd:57:a7:ee:a9:33:a6:65:4c:02:fb:d7:
         c4:50:50:f6:74:25:f7:9b:17:b4:12:f4:ef:b3:7e:b1:3b:bd:
         60:cb:92:68:7b:8c:7c:25:f9:96:2b:39:c8:07:8a:13:af:55:
         c5:55:20:f4:a2:d0:aa:53:c7:6f:c4:f0:5a:de:e6:59:a5:4a:
         66:5b:50:7f:c5:08:ac:ac:d9:65:5e:f1:58:60:2f:66:35:0f:
         82:99:65:56:95:1c:e2:f5:73:6f:19:a1:8b:3a:2b:cc:38:bd:
         02:f4:d1:48:f2:05:f4:ae:cb:69:3d:f1:40:e5:3a:bf:b7:fd:
         76:5e:55:57:b3:8f:f1:ed:52:1f:ad:55:dc:96:d1:3d:7a:7c:
         a2:df:65:08:df:1d:68:5c:df:db:2e:3d:4d:0c:f1:e2:2e:d4:
         d3:38:99:fe:bf:39:f9:c7:12:72:3e:e2:d1:ff:c8:53:54:7f:
         cf:76:ab:64:c1:ef:9f:33:d6:db:ff:db:c6:5a:2a:00:3d:b7:
         2c:cc:b8:39:83:e0:a3:bd:e5:fd:12:e7:f4:d0:31:9a:02:23:
         71:05:e5:15:34:dc:17:aa:79:23:be:75:34:29:54:67:a9:dd:
         55:d9:55:9f:bc:e8:f7:f2:18:34:e8:06:8e:90:86:80:f3:a2:
         91:05:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net