Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          FjPW/YBzXRxObQoeIId1MsGNSuYCBvZlf/DWt6l5j7I=
Subject key identifier:   98:CD:C2:70:77:00:05:39:8D:FF:73:7A:4E:6D:88:99:82:7F:F8:AD
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          A2
Signing time:             Sun 27 Apr 2025 05:02:50 +0000
Manifest this update:     Sun 27 Apr 2025 05:02:49 +0000
Manifest next update:     Sun 04 May 2025 05:02:49 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: bUmf9juugA/R/6+G9NPzllDrfGC0tvd+1iYETwab4h8=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: hRRyYKDQ+8Vd3l9feLqjU5QeeSMIphNRlrDBsDWQa3c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Apr 27 05:02:49 2025 GMT
            Not After : May  4 05:02:49 2025 GMT
        Subject: CN=680dba7a-4c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f3:b6:ec:1c:06:08:da:6e:e1:7c:ec:2b:bf:
                    01:ee:cd:f9:3d:30:6f:cf:44:87:b1:d8:7b:ed:92:
                    d1:50:01:48:38:d8:6c:32:ff:79:ec:05:00:c9:2f:
                    06:6b:15:bd:39:30:b9:2f:55:d4:69:d0:10:1c:58:
                    f1:bc:e2:f3:7c:ea:54:f9:2c:fb:0b:47:69:26:1f:
                    7f:f0:d9:4b:ba:b5:3d:36:aa:d7:83:52:32:d7:9a:
                    a9:ed:26:fe:c8:0c:14:4d:16:e5:04:83:dd:08:0d:
                    96:7f:f0:c2:12:34:2b:99:8d:de:d2:9b:98:ef:38:
                    ea:07:3a:3d:04:7a:cd:48:cb:b7:90:fd:94:f3:3f:
                    e0:9d:78:89:9e:92:44:59:4b:92:9d:d8:fd:11:5c:
                    d3:3d:0a:ee:12:5a:08:cb:1b:79:b0:53:f3:2d:14:
                    65:fc:3a:f3:69:8f:45:b0:b4:16:f8:6a:aa:54:1f:
                    2d:a3:03:65:0d:0d:96:e6:14:1b:29:a7:8a:67:0c:
                    6b:f9:29:10:bc:2f:10:ad:c4:cf:ad:fe:17:b5:3c:
                    f6:6b:bd:76:d3:60:9b:e1:5b:ec:8e:35:f2:4a:24:
                    ec:34:98:ae:67:e6:39:32:3c:66:94:e7:ca:5a:24:
                    e1:58:ae:f8:a6:86:8a:67:5b:95:67:c0:48:7e:06:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CD:C2:70:77:00:05:39:8D:FF:73:7A:4E:6D:88:99:82:7F:F8:AD
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:de:da:18:d3:b2:ba:63:68:14:95:5e:a3:02:8f:c4:ff:5b:
         a5:53:14:6d:50:21:d1:b6:b1:ce:20:57:cb:94:22:49:91:a0:
         a9:55:5d:be:5d:ec:4d:87:a7:ff:7a:c4:79:27:32:f0:47:ec:
         f0:5d:d3:69:fd:fd:ad:47:b5:77:4c:74:38:c8:91:b6:d3:b1:
         5c:b5:f2:31:98:e3:fc:46:f1:fe:e2:b9:1b:4c:da:17:13:99:
         de:6a:f0:36:40:a2:74:41:36:ad:23:2a:17:f5:eb:56:b6:83:
         27:d3:20:5a:e1:06:20:ef:da:c7:9c:fc:9a:fe:38:61:6c:e5:
         fd:2f:a7:43:72:98:e5:ea:72:2e:a9:d1:4b:52:0c:c5:29:04:
         cf:4d:47:52:de:ad:7b:f3:dc:c4:35:8a:cd:13:ec:2d:33:8a:
         62:b2:5b:a6:66:46:5a:df:d3:66:0c:b2:ce:91:ab:0f:cd:04:
         cd:ee:06:2e:23:79:d3:f5:a9:9e:d8:9f:c3:7a:f4:e8:7a:b6:
         06:ae:bd:74:15:b2:1c:ca:d3:56:2c:31:5a:03:0d:b1:4e:68:
         10:b1:a5:eb:81:15:f9:06:84:b5:8b:48:03:f4:90:20:de:f0:
         bc:35:4d:05:6c:ea:ba:80:2b:03:89:d5:f3:2f:86:e3:87:5c:
         23:85:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net