Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          ysAAT1Sa3x0j0w7bOs1Eq0UwqVc5lU9cQnlD3ox7mj0=
Subject key identifier:   79:5A:28:AF:A9:C1:3A:11:56:45:35:73:56:3E:16:D1:2A:46:11:B1
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       0796
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          0786
Signing time:             Sat 26 Apr 2025 21:06:40 +0000
Manifest this update:     Sat 26 Apr 2025 21:06:39 +0000
Manifest next update:     Sat 03 May 2025 21:06:39 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: eSUUVmNDxlB51s+X7b+zxFospsQpwlVdi9RDBET8MwY=)
                          2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: Exd4hWo7RjQZYiSVZdpWrDDgrfmW84G9O8hG7MRZr3A=)
                          3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /1U9CvjJjnoR+Cc8eBTwWfrYGw1ed/NEOO7axvdE43I=)
                          4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: ByhLwzpNP4nEx1e7cU+PcjpRDhLSsMQBSaYtj5jgQSQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: Apr 26 21:06:39 2025 GMT
            Not After : May  3 21:06:39 2025 GMT
        Subject: CN=680d4adf-c045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dc:7c:66:0b:71:4f:10:cd:42:a7:8c:5f:7e:
                    54:90:68:19:cd:14:1f:b9:83:71:9b:1f:9d:40:8e:
                    52:05:fd:ad:9e:ea:e0:2b:9d:19:40:46:9d:0e:0c:
                    b8:e2:54:b6:cb:03:97:d6:dd:fc:8e:c1:b0:5d:01:
                    a5:33:5e:e5:4e:27:13:5d:2a:82:16:1e:9d:c9:7a:
                    f7:af:da:12:a8:6d:52:84:b8:b7:c3:07:5f:2c:a9:
                    52:a0:78:17:00:17:3e:7a:4b:cc:91:26:81:26:c2:
                    ca:e1:dc:d4:2e:40:48:8c:1c:e7:85:3b:5c:b8:51:
                    47:cd:fa:87:8b:01:e9:57:9e:73:76:bd:db:cc:25:
                    10:9c:01:28:8e:8b:98:76:6b:8e:e9:11:22:2a:90:
                    66:09:84:39:0f:7b:ad:fd:69:ec:5f:69:f4:6c:5d:
                    7e:50:67:95:ad:81:8a:13:b8:b1:da:d0:52:00:8f:
                    0a:2e:0b:ee:4e:4e:7e:2a:35:3e:19:50:0d:c3:8e:
                    9f:4c:cb:c5:ce:f6:db:1b:dc:26:7f:0d:bc:e1:56:
                    a6:d1:b8:0d:44:81:ba:df:85:03:22:93:a9:74:e4:
                    c4:14:78:f0:fe:ef:73:a9:4d:87:2a:0a:0d:d5:b6:
                    d2:a8:0b:a8:4a:cd:9c:44:aa:15:fd:ad:49:72:b1:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:28:AF:A9:C1:3A:11:56:45:35:73:56:3E:16:D1:2A:46:11:B1
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:69:0e:45:49:be:7b:83:28:c8:d9:d4:7c:b5:90:b0:da:d0:
         54:99:f3:cd:39:c7:95:fc:5d:6d:c4:9e:4e:10:39:1f:1e:3a:
         83:4c:25:52:13:1b:cc:f4:5f:ef:01:af:8c:19:a1:d7:04:ce:
         d6:1b:c3:21:b9:ce:7c:67:9f:6b:2a:60:61:73:d4:2a:64:1d:
         0c:58:f7:f2:26:70:38:c2:bd:c7:dd:b6:98:89:ed:68:ce:df:
         d4:6f:52:34:ce:e5:7b:3a:8d:9e:2c:96:55:b9:3a:eb:54:69:
         5f:b7:cb:7a:35:4f:fa:c7:7c:44:1a:c6:d6:03:ec:f9:83:c3:
         24:12:db:36:e9:38:96:48:f3:2b:2f:6a:21:ef:65:25:c4:3b:
         c7:13:3d:bf:23:ab:ca:31:d5:0b:7b:d7:76:31:b0:a1:32:d0:
         c0:c2:f0:0d:21:fd:55:b3:12:38:32:78:5e:8a:e3:5b:0d:bf:
         50:9f:d3:ef:55:a1:c1:1b:f1:5e:8c:fb:7f:fa:8d:3a:7d:52:
         65:ec:ae:1c:a5:a4:6e:ef:fb:7c:a5:37:38:50:71:ba:81:11:
         17:27:34:b4:72:1d:1e:89:87:98:41:1d:dc:5a:8f:21:60:24:
         94:64:4a:08:1c:c6:10:c2:68:c1:1c:fe:df:69:eb:19:c3:f4:
         48:80:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:07 2025 by rpki-client on console.sobornost.net