Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File:                     cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier:          uqNttnyzkf1HxM4CzCwq9766iEbjsJ+2MMCEvqpWLw8=
Subject key identifier:   D8:10:59:B1:C0:7A:5B:95:54:DB:4C:0D:5A:2A:3E:4F:B9:9B:2C:B6
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number:          0126
Signing time:             Wed 23 Apr 2025 03:52:28 +0000
Manifest this update:     Wed 23 Apr 2025 03:52:28 +0000
Manifest next update:     Wed 30 Apr 2025 03:52:28 +0000
Files and hashes:         1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: AX50vfIQXzWzAHf1gbUI0xN7W2F1vjpyNCcM2LtJLBA=)
                          2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: YwXGuIwLbAOZzPiPRemoc11a6IYzMpgzJQrMI7kN5fw=)
                          3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: NFu6vOIdrlQETQmdi2ziHOwoF9spOq/YA6DUc9jHTPM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 03:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Apr 23 03:52:28 2025 GMT
            Not After : Apr 30 03:52:28 2025 GMT
        Subject: CN=680863fc-5494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:1a:ad:2b:1f:5f:38:e3:81:75:c5:63:52:
                    64:d1:45:ed:8c:21:0a:aa:7f:87:e9:48:a5:1d:b2:
                    f1:69:de:89:83:6e:11:ac:e9:7b:cf:6a:f3:47:2e:
                    89:db:73:d9:93:9c:a3:a1:25:30:65:0a:10:6f:10:
                    9c:b2:95:b0:16:0b:35:0a:4f:df:f4:87:fb:40:a7:
                    45:fb:80:7f:4d:a8:31:88:f7:f2:86:8d:cf:8f:ed:
                    f9:6c:f1:08:2c:c1:ef:99:da:e6:4d:e6:d0:71:be:
                    59:22:06:47:30:e6:e5:d8:b3:88:64:c5:de:c7:ed:
                    60:c5:39:99:5e:db:4d:e6:6c:c5:6c:e5:0e:1f:eb:
                    a7:ce:b1:f6:e6:ee:b9:8c:91:42:bf:b8:dd:0d:45:
                    ea:4d:c5:db:aa:98:cd:9d:ac:3a:91:44:21:9b:44:
                    a3:94:e0:5c:2a:b9:21:0f:19:79:46:76:8b:2b:82:
                    6c:99:2a:b2:8e:bc:04:ee:86:a4:56:ce:0f:73:80:
                    82:2e:b6:c4:3e:be:a5:7c:56:55:cf:54:dd:ab:c2:
                    03:9c:91:66:48:2c:66:f7:90:e2:1d:cf:e4:a8:d4:
                    bf:0a:10:12:74:9b:fc:fa:2d:17:30:f9:fb:e8:62:
                    f3:30:d2:7d:3d:aa:69:d8:bc:1f:77:12:1d:5d:da:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:59:B1:C0:7A:5B:95:54:DB:4C:0D:5A:2A:3E:4F:B9:9B:2C:B6
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c3:8e:78:bc:61:d8:bc:9e:c6:61:12:47:60:cd:c5:e9:f3:
         70:9c:f6:f8:77:a9:5a:84:bb:fe:fc:f7:0a:18:d5:26:b8:14:
         e9:a8:d4:ad:ef:6b:ec:b4:cd:ae:0e:9c:e9:5b:15:0c:b9:0d:
         5a:10:70:46:51:bf:d9:c6:01:7b:63:fa:5f:19:64:75:d1:01:
         24:4c:01:71:cd:da:a3:4c:2d:f9:0e:01:dc:69:e4:4e:6b:1c:
         fd:9b:d7:43:1b:cf:d3:69:8b:34:6b:f4:47:25:fc:25:40:89:
         c7:e6:b8:37:8f:af:52:21:6b:9a:ad:c5:0f:1f:c7:d7:c2:c7:
         d0:a3:9e:f2:43:aa:71:be:f5:51:25:fa:37:e4:1b:81:cb:55:
         7b:ad:d2:44:c3:cf:3e:fd:c9:d2:27:72:42:90:47:48:98:ba:
         b2:7d:1f:9f:44:7a:ca:92:74:da:97:fb:8e:c2:c0:af:ad:0a:
         3b:bc:99:37:05:c1:bc:84:f6:1b:2f:33:99:c8:c3:e3:20:c5:
         1e:07:5b:f8:a7:d5:ed:2e:06:4b:a7:27:a1:89:92:be:e2:bd:
         62:4d:1b:bb:61:41:e3:f1:7c:01:42:7d:f1:1c:99:41:86:4b:
         da:31:a0:38:64:92:c4:55:0c:c3:0a:bc:18:2f:d1:dd:cb:f1:
         47:61:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:53 2025 by rpki-client on console.sobornost.net