Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          sKygP2x4+FEL4AqCagycaSCJaOS5GKNSDqsSQ4pifpI=
Subject key identifier:   F5:BE:F1:8F:EB:A4:A6:25:41:82:7D:C2:66:5B:EA:73:6A:9D:DE:B3
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       0374
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          0372
Signing time:             Sun 27 Apr 2025 00:34:13 +0000
Manifest this update:     Sun 27 Apr 2025 00:34:12 +0000
Manifest next update:     Sun 04 May 2025 00:34:12 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: 73PzDiy6qW/TPxUuWG+gkiWsAimPeVWOlseeFstEKlI=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: UHVSesVCfWDMX6Rqc2a1Y5ozgn2h4LiLzFeoFn9E+ys=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Apr 27 00:34:12 2025 GMT
            Not After : May  4 00:34:12 2025 GMT
        Subject: CN=680d7b85-8648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:a2:a3:c1:86:fd:fe:ea:f5:6b:a1:f8:e2:
                    67:7f:46:5f:9a:12:18:a3:af:d3:0e:92:b6:64:cb:
                    e0:b5:10:99:cd:28:62:52:63:05:41:87:dc:b6:12:
                    c1:d8:79:d7:51:39:10:00:4f:e9:21:e0:2e:78:cf:
                    30:4a:9f:8d:46:85:6f:2e:5d:c1:c3:52:8e:6f:50:
                    fd:b1:b9:86:d6:ee:3d:3c:92:ed:41:6a:ab:4e:0a:
                    b4:a3:17:77:d3:8e:f3:49:a8:2d:4a:0e:fa:8d:a0:
                    0f:49:71:5e:01:01:b9:09:53:de:21:97:4b:2f:7d:
                    49:06:cb:3e:84:99:19:a7:97:06:cd:d2:04:de:16:
                    6e:a6:d1:d1:df:68:53:da:4f:a4:54:a1:40:93:f1:
                    48:90:42:7c:d6:3c:58:19:5e:32:eb:f7:6e:0c:30:
                    ce:f9:0a:97:1e:a0:91:a6:7b:43:21:23:80:9c:ed:
                    3d:8f:f8:51:26:2c:e9:c3:25:75:3e:b6:19:6f:a0:
                    f3:89:55:f3:35:bb:be:ae:99:85:df:d7:25:91:9d:
                    02:00:10:ac:75:3b:aa:bb:52:33:3b:49:d9:5c:8c:
                    cf:2b:a2:22:36:f1:c6:bc:fd:63:8f:6f:52:a4:98:
                    a8:58:7a:be:bc:3f:0e:9c:e2:9d:a1:a8:58:47:49:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BE:F1:8F:EB:A4:A6:25:41:82:7D:C2:66:5B:EA:73:6A:9D:DE:B3
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:4d:6d:27:fe:21:f0:16:e7:2a:74:27:6e:b2:cd:b0:1a:
         a6:b7:8c:16:54:14:06:e1:d8:12:74:a8:bd:22:69:ff:8c:66:
         cb:87:44:03:62:a7:dd:b0:78:34:22:9b:7a:6e:6c:e8:b8:ce:
         ba:b3:2c:88:ce:d8:0b:7c:de:58:f1:a8:da:48:1a:57:93:b8:
         e8:77:b8:62:9f:4a:dc:62:df:67:b1:98:e7:76:66:8f:8e:5b:
         a2:26:f6:64:0f:9f:f1:f1:fb:7d:c1:d5:83:3d:43:f6:63:b0:
         e8:9a:a9:f5:06:25:66:7b:45:a8:42:84:b7:80:1d:68:9e:46:
         1a:99:a8:4d:b5:61:2d:47:eb:6a:20:9f:6c:3f:17:69:1c:6d:
         ee:f0:4a:c0:df:56:98:6e:c6:f5:ea:62:1e:b2:19:ba:9e:2b:
         92:6b:bc:e9:8e:61:ee:79:5c:ac:2e:41:2c:27:50:42:5c:29:
         6a:77:3f:f4:59:ce:a0:32:36:3e:5d:91:b2:2e:fc:41:3d:f8:
         e0:9e:ea:8b:7a:53:07:3d:98:08:e7:d4:3a:88:53:2e:d1:24:
         69:f5:5d:f5:52:f8:ab:88:82:dc:36:08:81:3b:54:9c:dd:69:
         ff:cd:6c:10:dc:f6:93:77:f6:de:80:79:4a:ab:09:87:59:bd:
         b0:6a:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net