Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File:                     8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier:          IULqZs80+Yswwx2LR4zukhzWdEBQLnNWmm11YTxcfBc=
Subject key identifier:   F4:C9:CF:A9:6E:42:2A:39:FE:A5:B2:A8:69:E4:AD:FF:21:85:3D:FB
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer:       /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number:          56
Signing time:             Sun 27 Apr 2025 06:02:10 +0000
Manifest this update:     Sun 27 Apr 2025 06:02:10 +0000
Manifest next update:     Sun 04 May 2025 06:02:10 +0000
Files and hashes:         1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: 5WTXXPVCdiIHz+G6UBXklcx9W0JigI50TrhxEYqv8zI=)
                          2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
        Validity
            Not Before: Apr 27 06:02:10 2025 GMT
            Not After : May  4 06:02:10 2025 GMT
        Subject: CN=680dc862-9d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:c9:46:7c:26:51:a7:48:d3:63:2e:32:ef:
                    fa:c9:f5:83:72:bf:48:e9:4c:08:8c:61:a2:33:7f:
                    48:8f:4c:32:85:6a:23:5f:7c:22:45:8f:b0:3f:78:
                    2f:a0:1c:4a:1b:9c:11:fb:db:f1:02:4a:7a:de:1f:
                    6e:43:3b:84:6f:6c:99:30:60:8d:d7:e6:bd:a6:f0:
                    4f:b2:24:b1:bb:ae:22:8e:9e:c9:6b:33:62:a6:df:
                    2a:74:bf:89:d2:35:53:57:12:1e:64:b1:e6:af:a1:
                    ea:0e:c4:35:d9:05:06:75:2f:f3:b8:c3:d2:03:a3:
                    22:2f:6a:98:8d:74:e7:25:40:7c:53:ce:d4:19:29:
                    2e:14:f7:8e:5e:db:04:b4:68:35:0d:26:f2:13:9a:
                    c2:f8:7e:bd:82:2e:04:65:73:ff:a7:97:c4:e5:2a:
                    bd:00:e2:93:fd:6d:a0:bf:18:8c:ac:13:5f:35:66:
                    bb:17:1b:8f:07:60:93:a1:c0:92:7c:f3:63:55:60:
                    72:8e:41:81:d2:ef:42:65:59:28:f9:93:d0:da:8b:
                    0d:ee:92:f4:01:ad:e3:99:45:85:5a:f4:a3:6e:25:
                    07:eb:79:c9:07:13:ae:06:1b:6e:ea:85:28:e1:d2:
                    8e:05:84:4c:77:ac:88:a7:9a:c8:96:f2:26:ee:41:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C9:CF:A9:6E:42:2A:39:FE:A5:B2:A8:69:E4:AD:FF:21:85:3D:FB
            X509v3 Authority Key Identifier:
                keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:02:20:24:bd:a0:0c:b0:b3:ed:37:ed:8a:bf:ff:92:34:f6:
         eb:53:7d:6f:8b:99:7e:15:62:6c:84:35:ae:2f:d5:e1:e2:32:
         96:6c:32:16:18:94:6a:5b:9e:aa:26:d7:34:92:f4:3f:cc:15:
         d4:5c:d1:00:22:4f:35:c7:97:8b:27:66:e9:38:b7:0b:85:f9:
         da:98:e4:40:e7:c7:dc:19:3b:57:f5:a4:f9:42:e6:0e:dd:5e:
         0f:7b:6b:24:38:ef:1b:e1:19:f4:d7:3d:ee:32:1e:8a:bc:bb:
         0d:37:72:a3:49:34:36:7d:73:4d:ea:a5:b8:c3:93:e9:87:13:
         09:71:34:bd:ee:61:00:e8:ad:c8:ca:a9:d5:64:04:d9:98:e8:
         05:da:e7:a6:59:0f:9f:d2:4d:4d:40:77:00:6c:90:1a:4f:85:
         66:28:12:d8:c6:8a:b0:e7:c7:ac:e2:40:70:3c:ef:de:f4:42:
         61:ee:ca:58:9b:52:fe:2f:2f:13:2d:09:49:2a:bd:f5:8b:24:
         46:0e:ad:db:8f:35:f2:58:87:98:5d:80:b6:8e:82:9c:3f:53:
         73:35:de:b4:9b:18:0f:bd:bb:6a:8c:87:bf:c0:da:9c:0f:53:
         23:dd:84:78:91:73:da:17:21:73:27:1b:5b:e7:99:2f:85:dd:
         a0:bc:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net