Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
File:                     e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json)
Hash identifier:          aMRLJ9jaotOqaVHtuGQk1uWDa9V1XbVIIsbH7zDVB6g=
Subject key identifier:   A6:8D:05:57:24:90:6D:E2:00:AA:D9:6B:6E:8F:FA:63:2C:DB:8B:D2
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
Manifest number:          0BA4
Signing time:             Sat 26 Apr 2025 18:55:33 +0000
Manifest this update:     Sat 26 Apr 2025 18:55:33 +0000
Manifest next update:     Sat 03 May 2025 18:55:33 +0000
Files and hashes:         1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: AKXjap9yBkCeEawk2LABtMPaiME/p6wX7TWY2cA4rA8=)
                          2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: 25yQyo1UNKg5eSyiIIMMirEfRLria39lDAViqcBQ5E4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: Apr 26 18:55:33 2025 GMT
            Not After : May  3 18:55:33 2025 GMT
        Subject: CN=680d2c25-f49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:bf:3c:56:5c:fe:ca:f5:12:0a:3e:e1:30:
                    94:be:78:82:ef:b5:a3:a0:86:52:21:2c:ed:91:d1:
                    48:43:52:a5:95:bc:82:c5:88:b8:0c:e1:2a:cf:38:
                    bc:15:37:fd:8d:81:92:b9:2b:c0:cd:da:ea:89:79:
                    26:ec:ed:ee:fa:5b:38:80:3c:3b:da:0a:27:ba:7a:
                    e1:a6:36:84:ac:62:41:95:d3:0f:92:27:74:0e:c2:
                    e3:fe:9f:4e:d1:dc:79:50:42:8c:1b:6d:d7:f1:fb:
                    ed:4c:9b:63:83:21:82:75:bc:9c:45:78:84:89:40:
                    c0:4b:f7:85:fe:08:35:74:41:f8:23:8b:ca:c2:85:
                    e8:5c:54:1e:eb:3b:bc:e5:72:c8:cd:0a:63:4f:a4:
                    94:b9:85:a8:3f:11:01:c2:a0:08:82:23:d4:10:c9:
                    ec:65:b5:62:1a:aa:d3:06:01:e6:17:67:1b:e1:bf:
                    2e:60:5e:be:24:e7:63:06:8c:28:f1:17:8d:f8:7f:
                    de:df:65:b7:a8:ae:49:29:77:86:ac:89:04:4a:b5:
                    02:60:d8:28:44:0d:51:ec:98:9c:0f:4b:7b:fb:c7:
                    1f:a6:5f:86:85:ed:87:db:33:56:3a:87:01:d2:92:
                    51:1c:f1:86:77:19:eb:2e:fa:5c:2d:32:86:34:7d:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8D:05:57:24:90:6D:E2:00:AA:D9:6B:6E:8F:FA:63:2C:DB:8B:D2
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:19:e1:ec:fd:b7:8d:7e:e0:9d:6e:d5:70:74:4f:58:97:7a:
         27:7b:11:79:75:49:9d:cc:bd:d0:98:4e:9b:95:28:55:f8:93:
         3e:9a:95:f1:b5:ef:74:89:98:72:d4:c8:77:9a:e5:8d:9f:e7:
         1d:b6:1d:f9:dc:50:cc:6a:e4:13:f2:7b:29:08:63:4b:07:52:
         66:f6:d3:e0:63:e0:b9:9b:68:dd:b4:c7:49:05:93:ae:e9:07:
         66:1e:e0:62:8b:f6:a3:f2:7f:18:ac:f6:89:4c:17:f0:59:af:
         71:d2:ac:69:86:12:4c:79:3c:7c:0e:3b:c7:9a:21:8e:17:7a:
         69:6d:49:f6:f8:12:69:82:2d:d4:be:72:27:1f:8e:09:f7:29:
         78:87:7b:13:91:82:59:8e:6f:11:ad:b3:3c:07:f2:5e:b0:17:
         19:d7:d7:cd:5d:34:62:9a:3e:24:a0:72:e4:1a:68:79:ef:46:
         74:77:ae:90:ee:72:ca:91:65:73:4b:d1:6e:71:b9:bb:28:f4:
         ef:4a:3e:a6:c4:97:1a:4c:e7:4d:e7:24:76:f8:de:76:e0:c4:
         94:77:85:63:e3:8d:6e:a7:ea:fb:c9:d8:e7:47:61:26:82:59:
         ba:f5:26:f9:5b:d2:a8:71:76:e1:bd:72:78:75:25:8e:c0:2c:
         bb:06:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:58 2025 by rpki-client on console.sobornost.net