Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
File:                     FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json)
Hash identifier:          A+rI4umt/2RQr9WHTwICBKQBAVHEGYtI2hxXgG/JRCc=
Subject key identifier:   80:28:8B:20:75:20:F3:98:67:13:35:35:B3:59:B3:94:C6:75:7C:DD
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Certificate issuer:       /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
Manifest number:          05D0
Signing time:             Sat 26 Apr 2025 22:42:32 +0000
Manifest this update:     Sat 26 Apr 2025 22:42:31 +0000
Manifest next update:     Sat 03 May 2025 22:42:31 +0000
Files and hashes:         1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: dhKdNOiRtFoaMjU6ZqpUr0JveLHIXWUuu1AUdpcJ9ho=)
                          2: 62A74238F77711ECB847DF59C4F9AE02.roa (hash: 6NdpyGpyyLoYdKu6Nb7ZVSWNHzCDx7e5IsoyvgK7mq8=)
                          3: 1EB401948C6511EF881C050EC4F9AE02.roa (hash: 7C+LAYCC66gUOAU+HwT+tfX4EWextGNzWYx6BmysCZA=)
                          4: F4E815CC699611EE81E3E33CC4F9AE02.roa (hash: plWOD3DLVqnkQtuQl4y0tsk6pTGSRdQR9cDYcE3hB9Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
        Validity
            Not Before: Apr 26 22:42:31 2025 GMT
            Not After : May  3 22:42:31 2025 GMT
        Subject: CN=680d6157-d034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:57:6c:d9:b9:43:d5:14:ba:5e:30:b7:a9:
                    e7:d9:ae:94:16:c3:9c:64:96:2d:08:12:3e:fe:28:
                    53:d0:b0:dd:9d:3a:39:0a:d4:5d:04:a9:41:d8:6a:
                    6c:92:8a:87:0e:18:57:1c:72:a1:5f:ce:9a:bc:f4:
                    87:ec:20:1b:ba:fc:82:af:54:47:14:bb:5b:26:7a:
                    8b:2a:2a:61:b3:dd:bb:c2:ac:f5:a9:d1:91:9c:a0:
                    ee:34:f5:e6:1e:38:ee:02:bc:bf:52:c9:f9:24:dd:
                    af:20:66:03:52:56:50:a4:5b:f0:84:59:d6:f9:43:
                    48:98:0c:9f:45:c4:c2:89:1d:7a:f3:c0:66:f2:cd:
                    f8:14:01:9a:6a:5d:9f:92:cb:00:dc:b5:e5:e0:c5:
                    ba:c3:5f:9a:ad:cd:de:7f:2f:4c:6e:e0:c3:e3:b8:
                    7b:38:a5:3a:d8:c7:82:4a:f3:a5:a5:4e:93:40:f5:
                    56:c2:f2:46:3c:41:74:c8:5e:f8:0f:89:a3:fe:44:
                    19:ea:41:1a:e6:71:56:a9:a7:7d:b7:12:a8:e1:d1:
                    b0:7d:66:c7:db:b0:f9:d3:1f:f0:eb:ff:d2:38:8f:
                    24:60:3d:cc:0c:b5:c1:4c:86:95:fe:61:c9:a4:58:
                    b0:39:80:bb:a5:d5:64:b7:fa:d5:16:9e:57:39:7a:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:28:8B:20:75:20:F3:98:67:13:35:35:B3:59:B3:94:C6:75:7C:DD
            X509v3 Authority Key Identifier:
                keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:53:dd:2c:c1:70:61:bf:f8:22:42:33:a9:14:e4:1d:71:60:
         cb:3e:d1:18:42:25:9b:e0:64:76:14:ff:89:7f:e4:4e:24:0e:
         cd:16:58:b8:c9:1b:53:84:1a:a5:bb:e8:ab:3b:7e:57:51:ef:
         08:56:f7:73:c0:63:37:d2:0f:9a:9a:af:4e:17:a8:5a:f6:64:
         f8:5a:8b:a6:51:af:06:c9:11:5a:61:e1:ee:d8:0b:14:59:47:
         59:ea:87:3d:7a:f9:a3:10:bf:71:d6:30:3d:f1:86:af:e1:86:
         2b:ad:a5:2d:0c:1c:84:9d:93:1b:1e:7b:2c:98:8a:98:75:72:
         b5:68:74:5f:b7:ac:cf:fb:ad:99:1c:a4:c9:fc:e3:f0:dd:f7:
         74:10:90:97:42:9f:f0:2a:83:93:dd:f0:13:32:13:b1:42:fe:
         89:31:27:41:ce:0f:b5:b5:03:78:cc:3f:6d:c9:e2:d2:1f:cd:
         0d:21:86:d8:a5:97:cd:f7:d4:61:63:2b:43:48:03:eb:e3:87:
         22:d6:70:1a:1e:59:91:62:8e:1b:69:5a:fb:d3:46:52:a0:06:
         cf:96:95:ae:c9:e6:a1:76:c7:48:bc:4a:01:87:c9:d6:63:53:
         68:3a:a7:82:11:b1:dc:51:e8:7f:89:c5:70:8d:42:55:cd:1b:
         11:fd:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net