Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          IUttcB6bgcAhY2Y9cy2NMqmHQSTurOzneYNPhFjHO38=
Subject key identifier:   AC:38:B6:E2:2A:44:B8:BB:2D:C1:97:59:E3:16:5E:70:3C:8F:21:73
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          01AC
Signing time:             Sun 27 Apr 2025 02:14:54 +0000
Manifest this update:     Sun 27 Apr 2025 02:14:54 +0000
Manifest next update:     Sun 04 May 2025 02:14:54 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: 3c5LceGrWxhekAxXea8usGHYHdmWZbvWx+XIhEMmnJQ=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: Lgy8vm2n/ceKz+w+M1ZDWnunc26MQi1fRDcUPx4mLN8=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: acIP9bNBSWQVEKBII6hnoV+cuy/+F66JRfGEFST3yH8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Apr 27 02:14:54 2025 GMT
            Not After : May  4 02:14:54 2025 GMT
        Subject: CN=680d931e-5242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:07:70:56:8c:20:c6:59:70:1e:73:b7:a4:
                    5c:f4:5d:0f:3c:94:38:a5:23:67:5a:4f:16:ea:52:
                    f6:14:d3:34:80:c2:59:45:94:72:59:e6:db:0f:e2:
                    32:3e:53:f2:2f:e7:52:57:c0:15:ad:a1:d0:bc:90:
                    9f:70:02:1a:e0:de:76:40:d0:5b:7a:a1:c5:91:95:
                    41:35:4e:69:35:93:d0:2a:ff:63:ab:9d:15:29:49:
                    2a:4d:b1:58:f8:5c:11:42:70:e1:48:95:1b:a5:40:
                    ec:72:4c:57:71:dd:c3:8e:b9:6c:de:58:22:cd:b5:
                    36:ce:2c:27:2a:52:00:62:32:a7:74:bd:74:65:43:
                    3a:46:92:30:3e:93:5f:2b:0b:47:af:8f:32:6d:c3:
                    bd:08:c2:8c:73:6d:18:36:cc:6f:5f:3e:5d:9f:55:
                    ba:bb:2f:7b:29:c1:f0:d4:28:9a:41:7a:c0:3c:2f:
                    a7:c6:a6:69:4d:71:05:1c:1c:be:b6:c0:ab:4b:72:
                    3a:55:79:44:d6:0b:b6:af:a5:67:2c:92:73:47:c0:
                    ab:b5:35:12:35:fd:2b:35:fd:5a:76:fc:9b:fa:f1:
                    ec:07:09:64:c6:4c:46:0a:a8:58:22:39:a0:aa:41:
                    90:39:49:18:17:ae:8f:b7:d6:91:e5:86:bc:87:55:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:B6:E2:2A:44:B8:BB:2D:C1:97:59:E3:16:5E:70:3C:8F:21:73
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:3d:ef:f0:24:7a:81:92:7f:32:dd:0a:bd:a3:34:60:03:
         25:9a:42:29:89:ca:78:af:93:72:29:07:ef:ed:34:38:83:52:
         ff:5d:b8:c0:6b:64:36:5d:84:9d:cb:3c:20:cd:6e:6a:87:63:
         c7:0b:12:98:23:ea:5a:36:88:92:6d:c4:dc:c0:03:58:ab:2d:
         d8:78:b5:b8:1a:52:3f:f1:15:dc:22:b0:00:7e:88:9e:d6:c4:
         17:d7:30:54:cc:2d:3b:5e:92:8c:fb:94:a2:60:4e:88:c3:d6:
         36:8d:35:f6:ca:28:22:82:85:73:a2:1b:b2:1c:a0:22:d3:c1:
         c7:c9:54:48:f1:9a:43:e3:4e:42:cf:07:02:d5:d5:67:03:38:
         1a:3a:ab:1c:0e:68:8f:e1:ce:8a:86:e6:8e:6b:bc:d6:0b:26:
         fd:0c:37:d1:0f:8e:dd:46:49:51:1e:18:5d:23:3a:d7:ed:f9:
         cd:01:d0:80:2c:a9:b0:ce:df:36:c6:cb:b2:35:58:71:97:c5:
         06:68:6b:0b:56:b9:0a:04:32:17:a8:96:06:e0:dc:35:ec:35:
         11:4b:bf:52:4e:07:3a:6e:4a:9d:20:61:e8:8a:a3:e9:b9:63:
         7e:1e:c6:9f:b1:6e:af:df:d4:bf:cd:c1:6d:90:28:38:bd:d5:
         35:be:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net