Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
File:                     45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json)
Hash identifier:          r7mHrWfCq1ldDPWU6zpPTQteGwPf2Sw3t2Tp0dDFbFo=
Subject key identifier:   6C:EB:21:9A:0E:3B:5F:42:DC:3A:7B:FB:44:F4:A8:CA:C2:B4:56:D4
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       3492
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
Manifest number:          347E
Signing time:             Mon 28 Apr 2025 15:18:08 +0000
Manifest this update:     Mon 28 Apr 2025 15:18:08 +0000
Manifest next update:     Mon 05 May 2025 15:18:08 +0000
Files and hashes:         1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: RNCOogbAoLUwkqeg7ndn8MfWMiu/LbsqwA7p28XkBKE=)
                          2: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: cqg+DSKnyJEQ2eZBDWRlzFwbq68PCAP4lP7BZ9uGoSY=)
                          3: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: 48skWMAdj9drhHu2eh7bahmOkoZkfvFChpuIgM6+7w8=)
                          4: AAF9A7AC41AC11EA9BD8CB25C4F9AE02.roa (hash: wZnaCk/gJYbevnAK1yVFsEKeXrhTNDea/rw+miTZiyc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 15:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13458 (0x3492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Apr 28 15:18:08 2025 GMT
            Not After : May  5 15:18:08 2025 GMT
        Subject: CN=680f9c30-46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:31:33:08:0f:7f:aa:0f:e1:9b:b7:1a:2e:
                    15:51:a9:b5:a3:cc:78:5b:53:d6:19:25:3d:c9:60:
                    29:51:78:35:6c:32:b5:1d:82:28:8d:3b:6f:79:ba:
                    b8:f2:3a:04:4a:56:cf:05:00:2e:75:79:5a:ef:4f:
                    c9:9c:95:b8:df:4d:2a:cb:eb:dd:fb:8f:c3:00:ce:
                    3c:68:79:e4:3b:e2:7e:88:8f:a4:2c:9c:44:eb:f2:
                    92:87:9c:40:d9:ab:88:5a:7c:57:a6:01:95:5d:56:
                    e4:7a:b0:04:2b:8b:73:94:83:98:f3:35:00:28:94:
                    ca:00:f3:2d:16:c6:cc:00:8c:3c:d2:0d:ce:00:86:
                    8b:ae:8b:e6:94:21:75:9f:4f:40:8e:d0:07:ee:f2:
                    29:da:a5:e3:05:61:33:2a:16:a4:0c:df:dd:09:87:
                    0c:10:8d:fb:05:2c:75:34:c4:5a:8f:12:85:ed:50:
                    51:4c:d5:a8:f7:0d:69:5e:df:59:61:3c:ff:50:82:
                    da:bc:8e:c1:65:07:ff:79:5a:03:1c:a3:b2:ae:80:
                    ad:1c:77:e0:1d:3d:e0:9f:f4:da:6b:f3:9a:99:93:
                    1d:f0:b2:89:e1:0c:fd:ed:f9:96:6a:e4:f6:4a:5a:
                    f5:99:2e:7f:31:7f:fe:e4:6a:48:ec:1a:25:ec:83:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EB:21:9A:0E:3B:5F:42:DC:3A:7B:FB:44:F4:A8:CA:C2:B4:56:D4
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:4c:e0:ad:20:e4:48:63:b0:87:ca:38:a9:84:9c:fc:11:
         a9:df:44:36:18:54:92:fb:0e:b7:a0:fa:b5:39:60:82:8c:a9:
         5f:f1:11:e2:9c:36:27:95:13:b3:eb:84:ba:10:c3:63:6a:f6:
         c0:67:31:68:74:64:7b:c1:7b:c1:ab:0c:5a:81:9c:23:82:59:
         bf:e4:4b:9e:f5:ab:54:79:91:0a:a1:cd:4e:6a:b5:9a:e5:8b:
         3f:2e:37:85:4f:e3:3e:84:0a:bd:71:ba:24:a0:0f:2c:b8:3c:
         37:57:98:ff:95:99:65:cb:94:44:3e:1c:3d:bc:26:f2:2b:76:
         5a:6e:7e:89:b3:bd:90:43:5b:7e:65:32:a0:1d:51:a2:37:e0:
         ea:a2:91:7f:32:91:69:6e:82:39:44:c1:21:8c:03:70:9e:3b:
         4c:5e:58:b7:45:10:be:d6:80:ab:e9:f0:7c:60:87:91:ef:d1:
         a2:d4:b4:82:86:b5:2b:61:56:fb:e8:84:5e:3b:43:09:7d:fd:
         95:e0:8d:fe:09:29:59:0f:cd:63:aa:c1:14:ee:1d:66:f3:7c:
         99:cf:f0:6b:6c:1c:03:04:f4:4f:ad:8e:f6:08:b1:27:a1:fa:
         04:8f:0a:5d:c6:62:b6:2b:4d:28:2f:c8:76:bd:39:23:39:cd:
         c4:a0:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net