Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File:                     nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier:          +UerbVK4PHjWlvGrk70gM5bX1sk6MeuQPjARuQcBidY=
Subject key identifier:   5E:E0:8C:9C:FC:3E:F0:7B:E8:BA:23:EF:F7:B0:F3:C6:80:CD:23:34
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       0533
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number:          052B
Signing time:             Sat 26 Apr 2025 23:10:58 +0000
Manifest this update:     Sat 26 Apr 2025 23:10:58 +0000
Manifest next update:     Sat 03 May 2025 23:10:57 +0000
Files and hashes:         1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: D67o/KD2ZAyW7c9uFrHCotjyT+0H59IteH79El54cYA=)
                          2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: EZ7XOZu8P3fYljWZEYYsh451lzcL+Hz2HibFDv/VLxc=)
                          3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: dojgMfaVkK8Ikxn0bp2yTuAA7toIIjYyBZcEBpuQu+E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1331 (0x533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Apr 26 23:10:58 2025 GMT
            Not After : May  3 23:10:57 2025 GMT
        Subject: CN=680d6802-1c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:35:34:4d:4c:bc:63:a3:43:fc:95:ce:2d:
                    c4:77:53:35:6f:04:6c:76:75:67:4d:cc:5c:98:32:
                    f2:d0:cd:14:03:cc:3c:3f:1c:88:4f:1a:0c:e1:2c:
                    7f:5c:b9:cb:0b:8d:29:d1:86:22:a2:75:64:b6:24:
                    68:c6:15:49:cb:25:f6:b1:cd:85:f3:62:5b:0b:15:
                    dd:44:34:c2:fa:be:8e:81:0c:b8:b6:c8:5e:d8:ac:
                    0b:8b:cd:44:7c:d3:da:4c:04:80:9c:7d:7a:85:e8:
                    19:81:09:82:26:e4:6c:de:fa:f6:26:c4:dc:80:89:
                    b5:a6:df:f6:27:a0:3c:b0:3b:54:02:33:4c:e5:7e:
                    ac:e9:b5:1b:1b:62:30:5c:4a:9f:d6:67:af:d6:3b:
                    39:48:39:d0:3e:f0:5b:d7:3e:de:ec:be:53:d1:ac:
                    07:e2:e6:b7:30:d1:09:c9:92:1a:cc:f0:24:5e:4f:
                    43:5a:be:29:d9:7a:69:5e:92:0f:0e:eb:d0:c3:38:
                    73:32:ee:0e:0a:50:e6:0a:d8:1d:c3:08:ee:58:34:
                    5c:f6:2e:05:8f:f6:39:75:5d:81:a9:9f:25:35:56:
                    21:94:c1:cd:d3:86:03:3b:41:dd:f6:00:ef:d1:7c:
                    3d:bb:13:54:e6:8a:e7:32:db:7e:ce:df:63:90:f6:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E0:8C:9C:FC:3E:F0:7B:E8:BA:23:EF:F7:B0:F3:C6:80:CD:23:34
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:30:ec:fb:b7:18:56:b7:5d:df:f3:9c:05:7d:1b:5e:a4:8a:
         2e:99:34:8f:b1:7b:ed:af:41:9e:8f:11:d9:39:6b:59:8f:3b:
         15:82:2b:5c:be:72:54:4b:58:57:2a:6f:cf:d2:ee:18:60:e0:
         c8:39:52:13:7c:a2:0a:6d:68:2d:14:48:48:50:06:5e:e4:30:
         81:f5:58:25:7c:05:1e:f2:e3:b4:29:4e:0b:8c:f0:a5:da:63:
         83:07:92:48:6c:c6:19:f9:82:6d:92:4a:fc:64:c1:cb:15:f4:
         0f:49:be:fc:08:c0:97:28:95:17:2e:b6:ba:35:b5:d5:8a:8d:
         e9:04:20:91:4d:78:b1:03:6d:6a:9b:00:5b:98:3c:06:57:b5:
         58:d2:a9:65:05:f2:ef:20:28:04:40:d7:2a:40:b1:3a:35:ed:
         95:bc:15:2f:a8:7f:8b:97:d1:f8:71:79:49:35:be:02:ae:bc:
         44:d2:b4:1a:89:4b:7e:6c:57:02:b9:d2:a8:ce:2e:2b:5e:d8:
         6f:b0:72:61:5f:3f:de:ae:a9:3c:0e:35:40:ab:6f:04:55:a0:
         91:5b:6f:6f:dc:5e:ff:1b:ce:19:82:6c:60:bd:f3:30:2e:9c:
         da:54:99:65:f2:20:86:ed:56:55:57:3c:fd:64:2e:bb:f4:71:
         13:b6:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net