Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File:                     -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier:          aoQanyN87f4i8GwPCN+q4b6mmOeMLl0eeayle2TKFs4=
Subject key identifier:   96:47:AC:B8:98:1C:C6:72:24:7B:F3:9C:E5:28:0F:89:AE:52:10:24
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer:       /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number:          A0
Signing time:             Sun 27 Apr 2025 05:02:23 +0000
Manifest this update:     Sun 27 Apr 2025 05:02:23 +0000
Manifest next update:     Sun 04 May 2025 05:02:23 +0000
Files and hashes:         1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: kObkE5Gs1s+GAAxY5NHFr/Uyt/FUmPWic6DsdNX67O8=)
                          2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: Etmj0xt/W0SmV0Orr2NUt8hTe4pIwfnUtLKYwnR9+RI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
                          rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
        Validity
            Not Before: Apr 27 05:02:23 2025 GMT
            Not After : May  4 05:02:23 2025 GMT
        Subject: CN=680dba5f-fa0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:a4:8f:c5:25:e0:16:32:a5:99:5f:f0:12:
                    5d:27:bd:77:11:70:83:0d:52:4d:17:c3:4f:0d:8f:
                    b9:be:1c:b2:b7:67:a8:18:89:17:a3:36:b3:39:02:
                    7e:76:47:f8:69:8a:e8:c0:d0:5c:89:7d:5b:02:4c:
                    2b:da:5f:2b:52:64:6a:8e:b7:ae:ac:dd:f3:b4:f8:
                    e5:bf:c2:97:88:6d:3b:17:4c:83:55:90:7c:55:13:
                    bc:59:31:9b:58:ed:2b:69:cc:2f:47:ac:4b:95:76:
                    87:97:de:9f:1e:0e:21:8c:34:c1:54:5c:a0:f9:a5:
                    aa:68:38:64:2a:87:3b:d3:f7:15:a5:84:04:03:54:
                    f7:2f:e2:58:25:f4:40:4d:c9:56:dd:ec:a9:7a:d9:
                    63:2d:0c:28:f0:71:9e:63:7f:ec:7c:f4:16:c0:e2:
                    94:1a:10:4b:72:32:68:f9:f9:6e:d3:ae:31:4c:a2:
                    60:a0:5a:e8:43:ea:76:1c:07:f4:7f:2e:2c:61:13:
                    f5:c4:9d:f5:56:97:cf:db:5d:c0:64:d2:d4:3e:37:
                    c4:4a:55:96:d1:ae:d6:e5:e9:b3:9d:3f:fa:cf:5c:
                    84:d2:c0:a8:0f:76:87:00:9d:f5:9d:ac:e7:c5:5d:
                    26:67:99:74:fd:3d:60:e1:8a:d7:74:f2:63:31:ed:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:47:AC:B8:98:1C:C6:72:24:7B:F3:9C:E5:28:0F:89:AE:52:10:24
            X509v3 Authority Key Identifier:
                keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:4c:22:74:9a:ef:47:a9:dd:80:26:48:54:4d:fe:bd:57:
         e7:51:70:bd:c4:a6:f4:3b:31:dd:6f:3f:ad:50:cd:27:37:54:
         df:44:67:fb:30:95:16:bb:f6:1a:0e:59:05:2c:b7:2d:f2:a5:
         3e:0f:e8:41:7d:48:da:38:c2:9a:ba:99:fd:01:6c:6e:ad:b0:
         2c:1a:0e:83:9d:ef:5a:9e:b2:2e:4c:42:0e:4c:6a:bb:b3:8d:
         17:a7:2d:7a:5d:b6:2e:2b:6d:33:8a:ee:fa:a8:a5:d9:13:ea:
         10:5d:b8:fd:25:db:bd:4b:ad:79:5b:99:8e:de:07:40:55:37:
         bc:d9:48:5b:a5:d9:c4:5b:af:a4:85:d7:99:9b:cb:eb:61:1c:
         25:40:24:2c:46:5c:c5:1d:c6:96:0c:a4:e1:e8:37:af:32:af:
         a2:aa:1a:9b:73:65:49:57:9f:cb:85:ea:97:d1:26:30:d7:23:
         55:3d:ab:9a:11:a4:41:92:01:e3:7e:ca:81:46:57:19:53:11:
         01:47:34:f2:bd:e9:f4:3d:c0:a8:8a:f0:35:f2:03:7b:f9:cd:
         31:53:15:25:ad:65:6d:8f:51:2f:39:05:d0:f7:96:d3:40:c4:
         95:79:f3:7f:1b:99:9e:be:f6:3c:c5:1d:b9:dc:b3:b1:7b:a0:
         60:3d:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net