Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          UkricBo/iu2EAcYmc5wqDOafe7ezqeEo2OuvXrclv8o=
Subject key identifier:   3E:97:CF:8D:5C:4F:07:55:0A:29:BA:16:D1:F4:51:38:20:0F:94:96
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0B2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0B1C
Signing time:             Mon 28 Apr 2025 19:35:01 +0000
Manifest this update:     Mon 28 Apr 2025 19:35:01 +0000
Manifest next update:     Mon 05 May 2025 19:35:01 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: rFIgRyynHe7yxky/xYN1ABpS7X8/Kq8OMcDWMLUd6Fw=)
                          2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: 1DhhlreUt8zg3cfxMSneWtvTg2HGZV+ffd2QwHY8Xbg=)
                          3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: YABE0cos6VtRV6egJC6YTrl7tEuiiHleDpqVdQV913A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: Apr 28 19:35:01 2025 GMT
            Not After : May  5 19:35:01 2025 GMT
        Subject: CN=680fd865-edc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a0:e1:d5:ae:8a:24:54:2a:97:0d:7a:05:0e:
                    7a:dd:95:4a:18:4f:2c:fc:08:16:5b:dd:f6:41:80:
                    12:03:a4:c0:9f:39:b1:36:f9:ef:6b:da:62:fa:28:
                    6c:9e:f5:dc:6d:f5:69:64:b1:05:21:9a:c1:80:e5:
                    17:43:c7:c2:87:43:95:4d:c4:2c:5d:dc:a7:e7:04:
                    39:b8:ef:97:32:83:55:a4:44:11:2b:a3:9f:60:e1:
                    cd:02:d4:62:7f:60:55:63:68:63:c0:c1:d1:92:be:
                    1e:d7:81:4f:e2:28:67:86:57:44:97:70:03:9a:64:
                    19:c8:27:63:d5:56:49:fb:5f:8f:84:80:92:97:79:
                    9a:f6:ae:b8:7d:86:ae:a7:af:68:8c:c7:63:dc:84:
                    df:f9:35:5e:4a:14:c8:b6:94:02:10:e6:d8:84:b8:
                    af:5d:c0:84:a2:13:d0:e8:3e:ed:3c:93:62:77:43:
                    91:1f:eb:0a:8c:d3:41:03:b1:1d:ab:60:2d:e9:cd:
                    ed:17:a9:b9:80:45:53:1d:24:78:c7:c4:59:1f:88:
                    60:35:a0:88:f9:d9:ff:7f:c8:61:34:e3:98:ed:02:
                    bc:f9:71:7c:99:3b:d4:7d:58:09:fa:11:b5:86:25:
                    6c:c0:68:e7:c8:82:4f:e9:b4:b5:7a:e5:45:15:48:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:CF:8D:5C:4F:07:55:0A:29:BA:16:D1:F4:51:38:20:0F:94:96
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:27:53:b3:d4:f9:02:b6:53:29:08:d8:cb:f1:4c:ab:70:40:
         9c:e6:30:84:07:67:05:7d:12:37:dc:43:31:0c:2a:5c:54:48:
         f2:cb:83:c1:95:e0:5f:09:ab:bf:f8:90:6f:5d:e2:bc:e1:b5:
         c5:a2:9b:aa:24:1d:84:03:f9:e9:be:f4:e7:bb:90:25:70:d1:
         ff:1c:40:fe:58:96:25:91:43:66:77:aa:e0:cb:65:1a:0f:78:
         9a:ca:95:c9:0d:99:49:08:a0:33:e2:43:b1:06:3e:6d:44:66:
         61:d4:88:c2:e8:b7:fe:04:32:40:9b:29:b9:bd:06:3d:3d:0a:
         fb:6c:f4:26:0a:54:56:4d:14:f9:1e:42:d5:21:25:12:28:e1:
         06:ea:44:8b:5e:3a:be:9e:d2:f3:79:09:a0:0a:ef:fa:39:d1:
         3a:81:00:b1:6a:4c:77:d4:a5:0a:5d:7c:ee:6b:24:c5:c1:95:
         0d:33:7a:01:c2:fa:8e:f3:50:6b:36:bc:70:31:a3:c3:de:fd:
         04:c5:11:1d:7d:bb:99:79:7a:c7:f4:c3:a3:63:f2:e5:27:e5:
         ac:a6:e6:9c:5c:ef:72:dd:b4:35:b6:c7:a9:ed:73:fa:28:a5:
         60:8c:8e:59:c2:13:f2:83:9f:fc:10:d2:f3:6e:94:9a:36:15:
         79:8c:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:41 2025 by rpki-client on console.sobornost.net