Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File:                     aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier:          gZ3Jz8GCldLxyckNaxp0SPMJNDpleOTasSnght5gh1c=
Subject key identifier:   01:37:2A:BB:F4:41:03:C8:EA:80:71:96:D7:E0:77:47:8F:69:50:85
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number:          27
Signing time:             Wed 23 Apr 2025 06:51:31 +0000
Manifest this update:     Wed 23 Apr 2025 06:51:31 +0000
Manifest next update:     Wed 30 Apr 2025 06:51:31 +0000
Files and hashes:         1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: kaQ6r4IO+asaZ2nRItD/R4UMrIn2elvu6pO5ymsCycQ=)
                          2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=)
                          3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=)
                          4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 06:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Apr 23 06:51:31 2025 GMT
            Not After : Apr 30 06:51:31 2025 GMT
        Subject: CN=68088df3-0092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:61:b8:67:f6:e1:40:2e:58:a5:be:a2:ac:
                    75:c2:f0:b0:51:f9:23:53:39:87:78:62:55:e0:1b:
                    34:1c:51:4d:49:28:4b:af:1e:b0:b8:94:cd:84:2f:
                    8a:a3:5d:e4:38:2c:75:16:32:86:f3:1c:ed:76:ce:
                    6c:f6:71:4b:c3:f5:17:60:6a:17:c5:a2:ce:bf:85:
                    ea:23:76:6a:27:db:23:4f:b6:c4:0b:cc:5a:50:a0:
                    48:00:aa:f5:92:6f:d9:b8:b9:a1:e1:1b:89:be:ec:
                    ec:3d:c2:c4:ac:64:cd:b9:fe:5d:d0:47:4b:72:ec:
                    66:96:dc:04:81:2f:5e:51:5b:ad:67:cc:31:76:b3:
                    03:89:09:97:9d:22:4c:59:43:e2:45:34:1b:27:06:
                    cb:00:99:92:70:9a:18:a7:e1:56:41:37:02:59:5e:
                    a6:38:b6:a5:1d:5a:d9:73:67:d5:05:d4:c9:e0:0d:
                    53:b2:25:88:49:e1:24:39:ed:8a:59:f0:7e:da:94:
                    a4:cd:a7:6b:28:d6:c1:61:ea:af:ca:57:f7:a0:d2:
                    38:c2:9a:95:1e:4b:4d:0f:30:82:59:6d:c5:75:fb:
                    23:bf:77:66:42:32:ca:65:6b:9d:d7:d6:b9:59:90:
                    74:9e:08:d6:96:05:da:ea:8f:19:0c:28:f1:48:03:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:2A:BB:F4:41:03:C8:EA:80:71:96:D7:E0:77:47:8F:69:50:85
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:17:87:93:6e:42:66:70:56:21:62:5f:83:9a:67:7c:dc:a6:
         eb:84:05:9b:fe:fa:29:00:6c:3c:3b:5e:98:98:4d:9b:80:20:
         e6:a8:75:00:61:66:99:4b:fc:4e:a6:ae:71:5d:85:a3:50:86:
         de:18:51:9d:1f:e9:59:3a:e6:6e:8c:9b:5c:2d:37:d4:8e:62:
         4b:80:5f:01:27:e6:ee:38:e7:7f:25:61:a7:45:29:1e:66:6e:
         38:54:ab:98:be:e1:c4:26:1e:7b:b0:ea:53:e5:2a:9d:7b:02:
         6b:86:98:24:9a:b1:da:e4:48:53:a3:88:ba:7a:28:89:7f:97:
         cd:14:c3:1d:da:ae:a1:fc:67:24:90:38:ab:9a:3b:a0:67:1f:
         87:c8:76:18:2a:a9:cc:51:d6:ec:b1:9b:09:2c:34:43:f5:c6:
         4a:53:7e:f7:c2:9e:6d:89:90:86:41:88:49:54:d6:7b:b8:4c:
         8e:a1:75:bc:41:b1:04:aa:70:6b:f9:e1:cf:c1:04:a0:27:4a:
         24:ba:1f:a1:32:a8:f3:2e:da:00:1f:5c:c3:7b:9c:4c:40:de:
         28:84:52:50:22:5f:5c:38:58:f7:d0:a8:e2:0c:44:1f:cd:63:
         96:10:eb:3e:3c:7b:93:e8:03:77:24:f4:84:19:45:d8:f3:93:
         0c:4b:1d:4a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MEEyRTExMC8GA1UEBRMoNkEzRUY2NzE4MkRCQjBGNkNDRjNDQTQxMzc4QzAxMTk4
MDZBRTlCRDAeFw0yNTA0MjMwNjUxMzFaFw0yNTA0MzAwNjUxMzFaMBgxFjAUBgNV
BAMTDTY4MDg4ZGYzLTAwOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/mmG4Z/bhQC5Ypb6irHXC8LBR+SNTOYd4YlXgGzQcUU1JKEuvHrC4lM2EL4qj
XeQ4LHUWMobzHO12zmz2cUvD9RdgahfFos6/heojdmon2yNPtsQLzFpQoEgAqvWS
b9m4uaHhG4m+7Ow9wsSsZM25/l3QR0ty7GaW3ASBL15RW61nzDF2swOJCZedIkxZ
Q+JFNBsnBssAmZJwmhin4VZBNwJZXqY4tqUdWtlzZ9UF1MngDVOyJYhJ4SQ57YpZ
8H7alKTNp2so1sFh6q/KV/eg0jjCmpUeS00PMIJZbcV1+yO/d2ZCMspla53X1rlZ
kHSeCNaWBdrqjxkMKPFIA3+dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUATcqu/RB
A8jqgHGW1+B3R49pUIUwHwYDVR0jBBgwFoAUaj72cYLbsPbM88pBN4wBGYBq6b0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwQTJFL0M4MzZDN0IyRTkw
QjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZi
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWo3MmNZTGJzUGJNODhwQk40d0JHWUJxNmIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw
QTJFL0M4MzZDN0IyRTkwQjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1Bi
TTg4cEJONHdCR1lCcTZiMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAEXh5NuQmZwViFiX4OaZ3zcpuuEBZv++ikAbDw7XpiYTZuAIOaodQBh
ZplL/E6mrnFdhaNQht4YUZ0f6Vk65m6Mm1wtN9SOYkuAXwEn5u44538lYadFKR5m
bjhUq5i+4cQmHnuw6lPlKp17AmuGmCSasdrkSFOjiLp6KIl/l80Uwx3arqH8ZySQ
OKuaO6BnH4fIdhgqqcxR1uyxmwksNEP1xkpTfvfCnm2JkIZBiElU1nu4TI6hdbxB
sQSqcGv54c/BBKAnSiS6H6EyqPMu2gAfXMN7nExA3iiEUlAiX1w4WPfQqOIMRB/N
Y5YQ6z48e5PoA3ck9IQZRdjzkwxLHUo=
-----END CERTIFICATE-----
Generated at Wed Apr 23 09:03:16 2025 by rpki-client on console.sobornost.net