Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
File:                     T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json)
Hash identifier:          CVbpACINxwvuPiyE18KU90L11Q2t33KavW0D8RZf/e8=
Subject key identifier:   A9:15:D2:32:89:E5:AB:5F:69:08:FD:DF:DB:99:9F:8B:D7:21:B1:C7
Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3
Certificate issuer:       /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
Manifest number:          02D7
Signing time:             Sun 27 Apr 2025 01:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:23 +0000
Manifest next update:     Sun 04 May 2025 01:00:23 +0000
Files and hashes:         1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: 7B1RrQgrWTV51iP12q3idMRrn3ZL6na83P7oj688+VM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl
                          rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A713, serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3
        Validity
            Not Before: Apr 27 01:00:23 2025 GMT
            Not After : May  4 01:00:23 2025 GMT
        Subject: CN=680d81a7-cace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:6a:af:f3:a7:19:1b:70:a4:de:87:7e:ef:
                    9c:ea:d1:87:ec:af:1a:a1:dc:39:d5:a1:c5:52:84:
                    05:e6:92:91:7d:c8:94:ab:5f:b5:ca:a5:b7:3e:56:
                    9a:5b:14:0a:63:43:6b:37:a1:a1:b2:57:f4:45:d8:
                    14:fb:1d:98:e1:fd:c3:72:b1:1d:eb:81:3e:86:dd:
                    ae:a6:42:20:9e:a9:f9:aa:37:24:76:94:91:db:75:
                    57:1c:f2:56:8a:30:bc:54:28:6f:ea:2b:f7:d0:65:
                    cb:36:59:6c:c1:d1:8c:be:39:48:1b:07:33:53:99:
                    12:4c:6b:de:77:0b:d7:07:1d:cf:24:ac:e8:4d:cb:
                    90:60:48:82:7e:4d:46:ad:cf:fc:0c:71:45:4d:3c:
                    e6:5f:bb:4f:01:41:8b:30:83:b0:90:63:9c:8f:4b:
                    bf:01:37:3a:93:f3:50:2b:87:fd:83:25:67:1d:5b:
                    8e:68:26:92:80:8e:a2:4b:75:e0:8c:ff:7b:6e:7e:
                    87:cf:3e:79:56:fe:ac:cd:6d:d9:ea:6e:ab:a2:ac:
                    b5:5b:61:bb:ee:83:3f:ab:1b:b1:d3:e8:c4:81:9b:
                    89:29:a8:a9:b4:85:3b:63:58:aa:7b:bb:da:32:74:
                    e9:43:e0:18:68:1f:82:65:59:ba:80:e1:13:65:46:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:D2:32:89:E5:AB:5F:69:08:FD:DF:DB:99:9F:8B:D7:21:B1:C7
            X509v3 Authority Key Identifier:
                keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:41:99:01:0f:1f:a1:51:dc:40:de:07:5e:d5:d5:fb:af:07:
         05:73:de:53:c4:87:af:cf:f5:b0:c2:3e:3f:ad:a4:ad:6a:84:
         3b:1c:59:d2:21:81:83:da:17:39:c8:17:75:f8:5e:14:be:47:
         53:92:42:7f:73:6e:a2:fc:e5:90:e8:68:52:4a:63:39:c6:02:
         03:de:4c:af:28:3e:25:69:52:f4:60:57:a5:ab:20:ae:a2:34:
         1e:5a:a9:58:90:28:1e:03:59:b8:15:35:13:80:c5:c3:36:85:
         29:93:dc:76:dc:d7:71:9c:c3:d0:73:60:f4:fa:99:b2:e5:ed:
         b6:34:b8:38:54:4f:04:6a:14:97:07:28:c1:4b:56:34:8b:b1:
         88:3d:e8:4c:bb:0f:56:35:8c:e1:ba:d0:04:62:b9:77:84:f6:
         38:45:86:44:cb:54:72:97:be:36:65:06:03:bb:8d:c4:27:a5:
         88:d7:b4:64:1b:ff:b2:30:5f:1b:bb:45:26:d5:c7:98:a9:a1:
         c4:2f:51:0b:5c:47:5a:9b:59:7e:32:f0:9a:8c:c6:1b:77:f2:
         c5:12:91:58:2c:91:d4:8e:4c:ba:69:16:3c:bd:35:f2:70:76:
         6e:95:f4:f4:c4:cc:bd:08:52:fe:a3:b9:38:0b:e3:33:95:c3:
         a0:7c:32:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net