Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File:                     bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier:          c98lUPrwI9L7EfcpDBj7q8+Nim7u6a9U81k2awEzSJc=
Subject key identifier:   6A:F4:A0:5B:46:36:19:B7:C9:15:66:85:9A:8C:EE:98:B3:74:BD:FB
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer:       /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial:       1125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number:          1115
Signing time:             Mon 28 Apr 2025 17:30:54 +0000
Manifest this update:     Mon 28 Apr 2025 17:30:53 +0000
Manifest next update:     Mon 05 May 2025 17:30:53 +0000
Files and hashes:         1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: Y4Mkhzd1vlH793CjXDFtp46C45p8CCVZuSVPeiR2358=)
                          2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=)
                          3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
                          rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4389 (0x1125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
        Validity
            Not Before: Apr 28 17:30:53 2025 GMT
            Not After : May  5 17:30:53 2025 GMT
        Subject: CN=680fbb4d-4285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:33:32:9c:ae:01:5a:30:19:1a:1f:cd:fb:
                    39:30:ee:08:aa:30:dc:00:06:b6:2d:ce:45:ab:9a:
                    bb:0b:87:3d:db:36:67:50:09:7a:7d:b7:27:96:17:
                    fc:15:ca:16:19:66:98:63:60:49:52:ed:f0:62:14:
                    73:ef:77:b9:65:68:fc:16:43:f2:eb:d2:5d:e0:d8:
                    90:59:d4:d8:61:dd:20:f5:1d:63:bf:8e:8b:cc:b1:
                    f1:b2:20:f4:34:97:e7:e5:50:75:37:10:ac:9d:08:
                    6d:d0:45:f6:a8:cd:aa:a2:2a:09:1d:25:26:25:d7:
                    4e:7d:3e:1f:a5:ef:51:43:9d:1b:ce:fb:85:21:b9:
                    db:f1:2e:2f:4e:0b:e8:e0:40:0e:2b:2b:b8:60:eb:
                    c1:cd:3c:5c:6e:79:89:99:4e:a8:1b:93:22:c2:ed:
                    67:5c:f2:0c:04:14:29:a5:d4:a4:d6:9a:ae:ef:27:
                    c6:c2:0c:94:e7:42:ea:55:29:65:8f:68:e6:f3:82:
                    02:ea:aa:d0:55:b2:7e:89:fa:ff:4f:3a:09:7a:d8:
                    3d:0c:cd:05:96:dd:fa:96:d5:a6:d0:0d:ac:a7:0b:
                    c6:6b:3c:61:0f:d3:0b:fd:5b:72:27:bc:2d:11:86:
                    9c:71:49:67:05:dc:49:e2:3b:81:89:d4:aa:9a:70:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:A0:5B:46:36:19:B7:C9:15:66:85:9A:8C:EE:98:B3:74:BD:FB
            X509v3 Authority Key Identifier:
                keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:01:ee:8d:20:03:5e:46:f8:47:9f:08:b8:cf:6a:4f:20:4f:
         02:0b:b4:ea:ad:b9:56:04:03:ff:9d:2e:b1:db:98:3f:ae:49:
         47:b5:f3:d6:f1:46:68:a8:a2:d4:17:ec:0f:79:12:3d:3d:39:
         4c:08:30:fb:aa:87:67:c1:62:2a:f8:54:a6:72:12:11:8d:a6:
         13:41:86:b0:12:fe:bb:4b:3c:d2:a9:80:eb:41:ba:9e:ea:82:
         12:2b:7b:1f:80:35:6c:95:bd:4c:8f:23:d6:7f:35:4d:c1:fa:
         c6:4e:3f:03:d9:0c:2c:e3:28:d0:c2:f6:99:95:98:59:51:cb:
         b7:ad:0c:83:68:fd:6b:80:21:d3:35:c6:ed:2d:99:09:80:9f:
         8d:7e:db:b2:60:68:e8:9f:dc:de:68:d4:1c:b8:f0:5f:77:23:
         88:04:ae:d9:1d:48:0c:7a:2d:b3:f7:a3:63:c1:f7:c0:21:96:
         fa:bc:7e:1a:1d:ec:2c:ee:17:c0:77:c2:27:70:f8:72:a1:3f:
         ed:09:b7:bb:64:e4:91:9b:03:31:2e:cc:9f:66:c0:b5:96:d7:
         9a:8d:9f:26:e0:cf:eb:87:e7:24:9b:1c:97:d7:de:0a:0b:59:
         fa:d3:e4:b1:c0:4f:68:51:87:d6:2c:b3:15:ec:36:76:2f:78:
         34:94:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:49 2025 by rpki-client on console.sobornost.net