Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
File:                     6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json)
Hash identifier:          bYsFgO0J6UjO7yl6AklutMh4dPeEEutsAV4YsQAkIgU=
Subject key identifier:   DC:B7:48:0A:CF:7F:AE:5E:EC:27:5D:FB:FA:37:AA:7B:5D:F6:87:F6
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0B22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
Manifest number:          0B03
Signing time:             Mon 28 Apr 2025 19:38:40 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:39 +0000
Manifest next update:     Mon 05 May 2025 19:38:39 +0000
Files and hashes:         1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: YCt5Byh5LUyV/9E6ZQEDLBS/+WMzslXjwUMHKkjzWBA=)
                          2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=)
                          3: 23BA9D7CBEEB11EDA7945F4BC4F9AE02.roa (hash: SZF4jNnIB2QVKz5/EX+jPuidzyWfheujHP0W7HxZhfM=)
                          4: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: Q55EbY5POWYTdePCItnDLlFfKKISUoO3fBrl7W8p8yg=)
                          5: A39B24D2975511EF85448840C4F9AE02.roa (hash: BIsgdAgqtk3wodS0abcXx+V3UWlTiBSPXxRaU3Y5Enw=)
                          6: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: WPJAjv2UMHwWfs/KA/8g2VypUekjjpz/btCbDPwTPLs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2850 (0xb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Apr 28 19:38:39 2025 GMT
            Not After : May  5 19:38:39 2025 GMT
        Subject: CN=680fd93f-a15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:e5:ea:49:41:1a:23:b2:86:e4:c9:92:0c:
                    9b:75:38:47:79:4c:59:16:96:96:05:d4:5e:76:21:
                    a4:ee:5e:4c:5a:45:39:dc:01:ef:f7:d2:bd:9c:67:
                    30:c8:01:cc:ae:1a:43:32:3d:d8:5a:6a:bd:54:24:
                    12:40:06:15:16:4d:28:b2:6d:8e:d4:25:a1:38:24:
                    04:91:35:c1:5f:f7:7c:e2:17:7e:6c:d4:e1:47:ec:
                    fd:82:b6:da:08:f6:0a:ed:01:e7:73:9a:5d:c6:be:
                    64:60:d6:5c:8a:52:70:f0:86:35:b0:05:a6:d2:68:
                    17:e1:4a:bf:cc:10:47:a5:94:a0:45:33:60:52:3e:
                    2c:77:b5:e8:40:33:26:81:66:f8:24:e8:1d:38:a5:
                    5e:1a:fb:ad:85:6b:3e:16:5c:d0:92:6f:eb:dc:34:
                    09:16:a6:8f:dd:41:ee:08:40:3a:06:0c:fe:ad:fa:
                    11:79:1c:ab:6e:74:01:ec:a7:51:99:39:4a:a9:61:
                    33:09:41:78:9d:04:7b:42:8a:fd:ca:f1:a9:d1:bb:
                    a1:45:1b:16:a1:54:63:0b:1c:8a:b6:75:57:d8:74:
                    c2:48:df:3f:70:00:5b:45:57:ed:9d:b4:ab:7c:06:
                    1d:2a:1e:ca:7f:63:4d:09:62:76:93:09:65:e0:d2:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B7:48:0A:CF:7F:AE:5E:EC:27:5D:FB:FA:37:AA:7B:5D:F6:87:F6
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:71:28:f7:6b:ff:f0:c2:44:d5:84:67:95:9c:ec:16:65:5e:
         43:81:15:57:16:fe:8f:f5:20:6a:7d:32:af:91:ba:f4:f9:41:
         9f:f6:35:bf:fe:9c:f0:f0:4f:07:6b:98:c6:e3:c7:a0:28:63:
         0d:a3:06:3c:39:10:e7:32:32:74:5b:d5:7c:0b:2b:9a:0c:6b:
         83:c3:86:20:d9:64:9e:dc:e4:c6:c5:1a:69:9e:50:b0:d6:1b:
         3e:67:7c:69:79:1f:a5:86:a5:dc:c4:55:5e:b1:ca:c5:83:cd:
         18:12:a7:73:59:91:cf:e4:5e:62:dc:81:41:71:86:f3:82:ed:
         fd:95:aa:c8:e9:8d:d8:ef:91:34:ee:23:2d:a5:e4:ac:62:2e:
         7f:d7:00:33:25:a5:1d:4f:19:81:fc:93:b1:cb:ff:0a:d9:c0:
         5b:0e:e5:a4:91:b9:2e:40:d1:9e:8f:c4:1e:f5:ab:e6:62:0f:
         fd:d6:b2:a4:eb:ce:d0:a5:c4:9a:99:74:65:6a:cc:7f:7e:22:
         4f:22:82:68:ef:74:71:f9:4d:0e:bb:ce:e5:b6:41:cb:42:72:
         3c:d8:bb:c7:ce:ec:3b:51:b8:8c:ad:c2:b7:1b:12:b5:5b:f7:
         01:99:5d:61:a7:d5:e5:7d:9f:0d:ee:90:15:33:fb:0b:6e:9b:
         97:d7:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:41 2025 by rpki-client on console.sobornost.net