Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
File:                     rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json)
Hash identifier:          Sojp3DPv3rroU5l/CRFfcIz435yEAqsu2sTXwhficyo=
Subject key identifier:   C0:A1:01:07:2F:ED:90:0B:EB:D2:27:C9:E9:72:89:75:E0:66:A7:92
Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2
Certificate issuer:       /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
Manifest number:          0172
Signing time:             Sun 27 Apr 2025 02:46:48 +0000
Manifest this update:     Sun 27 Apr 2025 02:46:47 +0000
Manifest next update:     Sun 04 May 2025 02:46:47 +0000
Files and hashes:         1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: P9JweU9w2Mi/2xthAs+MKEcsxF38HceLq6fQkL/pPZE=)
                          2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: 9Lo3d3eS9DODsA0QbUdso+ksBYI/XtOkg6gbRTT4iCU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl
                          rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C0F6, serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
        Validity
            Not Before: Apr 27 02:46:47 2025 GMT
            Not After : May  4 02:46:47 2025 GMT
        Subject: CN=680d9a97-9683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:11:ae:9b:75:31:71:97:94:14:f8:41:f5:
                    b5:f6:5d:22:a7:2d:1c:bf:fb:97:6b:aa:74:6b:aa:
                    f1:fa:68:67:70:bc:a7:61:93:18:ed:8f:cc:e9:51:
                    c1:a6:21:7f:8d:7d:6a:db:11:43:e1:39:81:5d:66:
                    d9:19:0d:55:53:7c:13:97:74:a9:71:7a:1d:cb:9b:
                    0e:e4:79:06:5a:5d:8b:5e:2e:60:b0:35:ea:2a:83:
                    e7:52:c7:21:73:82:e6:f5:ef:f6:8e:ad:68:30:2f:
                    e9:4c:d2:2b:83:95:f3:d7:7d:84:e1:6a:57:f4:77:
                    eb:cb:e6:89:49:0f:27:0c:89:eb:e9:69:6a:6f:77:
                    0d:d5:c0:48:e4:8e:d8:28:f5:7e:10:6a:8c:8e:1a:
                    60:a4:fa:d0:72:74:fb:38:08:81:c1:d5:81:a9:0d:
                    34:27:e9:ae:ec:a8:2d:6a:8c:1b:07:cd:9c:9e:ad:
                    a5:d9:88:07:6f:7c:ce:c7:e5:3e:b7:1a:c0:c2:e4:
                    da:de:50:56:da:e9:2b:28:54:1d:da:cb:bb:9b:63:
                    ea:51:9a:7e:0d:9c:f3:2b:77:35:c5:f2:fb:0f:53:
                    ff:40:c0:25:f5:47:40:e0:18:4f:9e:92:b9:6a:36:
                    c1:a7:13:20:ed:4b:04:23:7d:ab:53:33:98:ac:37:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:01:07:2F:ED:90:0B:EB:D2:27:C9:E9:72:89:75:E0:66:A7:92
            X509v3 Authority Key Identifier:
                keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:a5:dc:b3:a5:c3:7c:d4:2b:0a:ec:e5:b6:fa:e5:29:74:
         d6:41:26:ab:ab:38:3b:87:4a:a8:7c:67:3d:95:dd:63:b1:54:
         73:0b:00:a5:c7:65:5c:0f:d3:5d:b5:f9:0a:84:12:6a:55:b8:
         ef:45:c0:89:d1:0b:49:40:60:e0:89:1f:59:b4:a0:09:d0:7b:
         c0:10:71:46:46:0b:1f:9f:e4:3f:e1:96:fd:7a:d1:53:b9:bc:
         39:55:6b:98:44:5c:fc:2c:fa:2e:8c:bd:d1:c0:e8:f5:85:c1:
         b4:ea:37:3a:5e:53:e2:63:49:e0:24:22:3b:a8:a3:e9:4d:6c:
         92:00:9a:2a:c4:ed:85:3f:8a:6b:ef:40:40:d0:89:cd:c3:b5:
         3b:25:7d:6e:46:05:b4:aa:af:bc:9f:13:7f:04:90:f3:4d:85:
         e1:e5:44:77:0e:15:34:b2:37:cd:43:7f:1f:b3:6c:99:b7:d2:
         8b:50:35:5e:89:36:87:ee:6c:27:fe:79:68:cf:c5:e0:ec:0f:
         59:55:9d:d9:6e:e4:04:d4:fc:2e:96:35:20:6d:a8:fd:8f:ec:
         6a:23:98:89:c0:a3:57:47:95:90:20:b5:8d:37:c5:ce:87:83:
         ae:fb:fe:f0:67:03:76:49:4a:c6:ba:f5:94:18:01:e5:3b:90:
         24:67:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net