Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
File:                     1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json)
Hash identifier:          RWwifPU5B6nYt7MuMZ4kocKIPRKZTifS3ts5SuxUjiM=
Subject key identifier:   94:98:4F:7B:42:90:F2:30:74:65:16:24:D4:D9:DA:E8:09:55:E1:2D
Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
Certificate issuer:       /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Certificate serial:       1080
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
Manifest number:          1067
Signing time:             Sat 26 Apr 2025 17:17:07 +0000
Manifest this update:     Sat 26 Apr 2025 17:17:06 +0000
Manifest next update:     Sat 03 May 2025 17:17:06 +0000
Files and hashes:         1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: tRMZSOk+xL6WDTSfoHQGKr9XeZ0jIc9xUe4fza69P6E=)
                          2: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 3gmCEFiYlMlievK4CwoMawO55eg7L6f6YvnH2KxpTBg=)
                          3: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: x/lWlD9SNRm3Ra3Juz0ScqnsIpd3eUHkeQs8wFQ7pns=)
                          4: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
                          rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 17:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4224 (0x1080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
        Validity
            Not Before: Apr 26 17:17:06 2025 GMT
            Not After : May  3 17:17:06 2025 GMT
        Subject: CN=680d1512-0ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:ff:f1:7c:ae:e9:a9:18:ab:bf:86:22:ad:
                    03:94:f4:32:0c:c5:d4:b3:21:8d:ad:4e:a3:84:6b:
                    22:81:bc:13:1a:ea:85:c4:c1:85:66:b5:c1:20:4f:
                    ac:39:a9:20:e3:79:4a:d2:fe:91:68:7f:39:c8:57:
                    f2:0a:88:94:1e:9b:27:4c:f1:89:4b:a2:75:a3:01:
                    00:5e:6a:e7:1b:58:f4:db:29:18:61:d1:92:3c:4f:
                    30:51:c0:b5:4d:06:9c:eb:31:30:ff:1e:72:18:03:
                    ca:a3:14:ef:d8:ae:ff:67:24:b9:54:c2:8c:12:3e:
                    83:3e:50:b9:c2:df:8f:5a:96:ce:fd:47:12:09:79:
                    56:c4:8d:a2:83:3e:79:4b:d0:8b:0b:c0:fd:c9:28:
                    e5:4d:22:07:c1:8d:3c:88:13:6d:5e:c3:b5:a0:33:
                    ca:6d:bf:7e:c0:50:58:2b:2d:8c:35:fa:84:2b:0d:
                    44:19:6e:65:27:37:3d:6d:a9:ea:f2:b6:88:e2:5d:
                    1b:08:ba:32:bb:18:ea:3e:74:45:7d:78:6f:0c:9c:
                    d1:8e:e5:80:06:68:26:27:99:a5:a6:45:c6:6e:97:
                    55:c6:81:c0:9a:4e:b8:67:e7:ee:60:71:ba:6e:3c:
                    85:4f:4a:2a:86:44:ff:ea:92:fd:44:f5:31:75:a3:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:98:4F:7B:42:90:F2:30:74:65:16:24:D4:D9:DA:E8:09:55:E1:2D
            X509v3 Authority Key Identifier:
                keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:23:b3:ea:1e:50:f7:f0:4b:72:b1:36:5a:b0:02:b1:f1:
         19:6e:4d:55:26:65:c3:c9:69:fc:b4:7a:db:99:e1:6a:2f:75:
         cc:e9:d1:27:80:09:77:a6:7e:44:1a:25:a6:f4:af:09:ac:cf:
         97:c7:97:d6:fd:70:16:22:a0:e7:cd:e9:ec:ba:21:6c:c0:87:
         55:4f:13:68:de:87:66:42:7b:3a:d9:09:4d:18:06:7d:d6:a7:
         53:18:c5:a8:04:fc:db:a9:12:a6:75:cc:fa:13:af:a3:f6:18:
         09:96:90:c3:42:0d:a3:e5:ba:66:b4:a8:c4:0e:42:9b:22:e4:
         4d:d3:65:a2:c9:2c:fa:e1:8d:71:40:46:b3:0c:e9:77:e2:52:
         ff:e8:39:ae:72:8e:ad:13:55:16:5e:d1:25:a0:49:08:3b:8a:
         1b:cb:b9:1b:65:8d:35:76:9a:2e:0d:3e:f6:80:19:e3:e2:2a:
         d9:f8:b5:df:15:b3:45:ae:23:32:5e:84:c7:8d:8b:ff:48:b2:
         44:8a:be:af:33:8b:fa:52:fa:b6:ff:95:e4:90:14:9e:1f:9a:
         8a:78:62:e2:a7:8f:ee:f3:cb:70:4e:f2:94:87:ce:c5:22:de:
         ec:02:2a:5f:da:b0:77:fd:3c:74:e8:05:49:f7:46:31:d2:df:
         b9:14:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:58 2025 by rpki-client on console.sobornost.net