Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
File:                     GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json)
Hash identifier:          vPlSPSPCSFt9ZFC7ClVNBMKJoWu9QuwikSMxmN1hnXQ=
Subject key identifier:   2B:FD:0C:E6:50:F3:69:D4:70:E0:39:48:EA:B2:2D:D7:1D:9B:26:30
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
Manifest number:          05F9
Signing time:             Sat 26 Apr 2025 22:34:43 +0000
Manifest this update:     Sat 26 Apr 2025 22:34:43 +0000
Manifest next update:     Sat 03 May 2025 22:34:43 +0000
Files and hashes:         1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: NoPMaY9EhrCKoewbXI2H6dAIADAa00xUx9cd4Qs+EAo=)
                          2: 6E6A801066CB11EFA513A684C4F9AE02.roa (hash: vXar9bKA8CImjVKWhu4MzK44EuwvcZRevRawwazNHWQ=)
                          3: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: lUgZ45NhNVzRaDmFfEX8lN0zDz9HpfoRqK2qSylb5c0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: Apr 26 22:34:43 2025 GMT
            Not After : May  3 22:34:43 2025 GMT
        Subject: CN=680d5f83-32b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:01:43:51:50:7b:85:a2:13:93:7a:2f:60:
                    ec:e1:52:f8:e4:05:0d:d7:83:e1:33:39:ad:ba:0e:
                    d2:e8:92:20:b8:5c:01:23:0d:63:4a:b8:92:c2:82:
                    65:30:6f:83:48:0f:35:be:63:9b:ac:cf:7f:88:94:
                    d1:35:f2:19:b1:d6:58:7a:0c:bd:82:27:82:75:74:
                    e3:9c:f5:11:b7:48:48:ee:ce:93:f0:24:50:b9:b9:
                    37:47:01:ce:67:e7:2e:a6:a6:e2:59:4c:bd:77:7f:
                    3b:60:8b:4d:33:1a:6e:38:c6:86:05:4c:b1:35:09:
                    2f:39:c1:a7:40:31:99:8e:aa:85:8c:02:7d:88:9d:
                    0b:a8:89:9d:4a:2f:e3:83:a7:15:56:56:6e:de:23:
                    86:18:68:ee:c9:71:fb:a5:7a:b7:6e:6e:bf:a0:4a:
                    88:ee:e0:09:1f:16:4c:0c:7d:53:0b:02:23:2d:14:
                    95:86:70:63:56:d4:68:69:f7:c1:8b:43:41:78:47:
                    30:11:e1:39:f3:09:45:17:02:8c:ab:b4:c0:bf:5d:
                    ef:0a:ed:d3:63:81:1d:76:b4:1b:73:85:9c:28:01:
                    f7:18:77:ad:9a:e1:a7:7f:5a:0d:46:d2:4e:32:41:
                    aa:00:d2:c0:e8:dd:26:cb:de:d5:75:36:08:1d:b0:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:0C:E6:50:F3:69:D4:70:E0:39:48:EA:B2:2D:D7:1D:9B:26:30
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:6e:f0:c9:3a:6b:f1:8b:ba:de:1a:cd:e3:30:68:fc:94:
         81:b3:3c:e8:33:d2:47:44:7e:79:95:32:b6:03:e4:93:87:80:
         94:0f:7e:ee:ab:80:b2:ea:f8:5b:ea:4f:38:e5:5b:2b:ca:fc:
         67:d4:22:b5:2c:aa:74:57:67:f4:8d:29:a6:23:b3:4e:e9:05:
         16:cd:82:af:a0:08:2d:97:f4:ed:30:ba:b9:9e:f4:79:43:74:
         ea:ec:77:44:14:3d:64:c8:1f:f5:5e:6f:0a:3a:c2:17:1a:d9:
         de:3f:ab:6d:5e:a2:dc:c4:ba:36:b0:97:06:a9:bb:2e:5b:ea:
         93:2c:54:37:09:b0:ba:7c:56:63:6b:11:40:22:5e:ed:d5:63:
         e1:dd:bf:8c:99:3c:4f:c7:66:d2:e5:a9:50:64:6f:82:c9:63:
         ad:b8:97:aa:2b:2e:3b:3a:a5:94:20:98:2b:7b:2e:cd:40:e9:
         bb:7e:bb:1a:eb:86:f1:98:cb:30:a5:e7:0b:64:24:a2:e8:15:
         c6:d0:2d:3b:5e:a0:b6:00:fe:72:1f:fd:dd:0e:56:57:9e:29:
         f3:12:f7:11:bf:94:67:17:2c:d8:2b:eb:ef:3a:fc:41:32:2a:
         f1:58:d4:24:df:da:10:1f:4b:f1:30:9d:7c:33:42:4c:a0:9f:
         24:d6:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net