Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File:                     Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier:          t9/OstqouSSOxijR0Apq5Oj0lva4uQUUtHNhm8PjmHk=
Subject key identifier:   47:67:0E:AC:A8:53:D1:4C:27:05:D9:19:30:D1:D2:2B:2D:59:40:23
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer:       /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial:       2902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number:          28E2
Signing time:             Mon 28 Apr 2025 15:42:40 +0000
Manifest this update:     Mon 28 Apr 2025 15:42:39 +0000
Manifest next update:     Mon 05 May 2025 15:42:39 +0000
Files and hashes:         1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: QoRrS1sHls9eRBTSHE6G+ZmzDObT0pss46/dJv+q/SY=)
                          2: F4246CDA561811E98A165872C4F9AE02.roa (hash: C/PaFQfpTy7SRBE+0XzPzL+bck/ugVag2KSCjWGbACs=)
                          3: 5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa (hash: NPaRLQzlfeRDFfVjFZGdCoMjhFrE57rsZhCE/YcIOww=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 15:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10498 (0x2902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
        Validity
            Not Before: Apr 28 15:42:39 2025 GMT
            Not After : May  5 15:42:39 2025 GMT
        Subject: CN=680fa1ef-4cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:cc:a9:5a:57:20:cd:7a:7a:b6:9d:63:29:
                    88:94:24:5a:e2:41:b7:bc:38:6f:7a:0a:98:39:51:
                    a6:79:31:c1:e5:b6:11:9d:74:01:ee:74:6e:10:85:
                    08:36:17:42:44:80:df:3e:f9:9a:86:dd:98:c5:7a:
                    89:51:d2:6f:7b:54:28:65:6f:a0:58:6a:d9:69:17:
                    ed:6a:26:2b:b1:92:d9:fc:ed:d9:be:47:bb:eb:ce:
                    e3:56:fa:4c:1a:fa:12:1c:e0:42:4b:bf:d3:06:21:
                    ec:0d:13:d4:2e:7c:31:19:bf:90:52:21:94:33:a2:
                    b5:ba:47:2c:74:ea:bc:95:9c:15:c0:3f:8b:05:ae:
                    85:0b:34:a6:e9:99:ef:1c:45:70:04:86:86:16:75:
                    d6:14:39:54:7a:15:fe:f8:c5:27:c6:e1:93:05:0a:
                    35:83:b6:03:f6:cc:7b:78:b9:c4:13:30:42:6c:f3:
                    2e:f9:5a:1e:60:07:cd:dd:32:96:f0:e6:7a:c1:f8:
                    44:02:93:f9:dc:b4:44:3b:d6:bf:7a:23:6b:7f:c1:
                    50:11:40:83:d0:e1:a0:81:fc:ed:61:6c:1f:74:91:
                    47:63:cf:c2:62:21:21:d6:27:cd:70:5b:b4:0b:4d:
                    86:76:47:5d:e1:e5:ff:d3:1e:6d:0f:e0:4c:fc:01:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:67:0E:AC:A8:53:D1:4C:27:05:D9:19:30:D1:D2:2B:2D:59:40:23
            X509v3 Authority Key Identifier:
                keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fc:e1:ae:76:67:72:db:a7:fc:2b:3b:77:61:2e:40:9f:fa:
         b8:4c:54:f2:d4:d5:04:bb:97:fd:31:58:95:f8:4d:c3:d6:82:
         69:2c:a5:d6:fb:58:32:d8:b8:df:a5:72:7a:f8:d9:3f:ee:19:
         7a:36:77:b9:17:28:42:b9:8a:b0:58:70:a4:e3:19:3c:4a:0b:
         73:d5:27:bb:0f:9a:11:d5:57:5f:0c:e2:3f:73:0e:4f:77:50:
         38:12:d0:90:61:6a:ae:e9:5d:ee:be:f4:e8:8f:29:fa:ff:07:
         00:42:4d:ff:05:0a:5e:0f:f9:e7:7f:93:cc:f8:b6:86:f8:df:
         5f:ee:3e:ab:af:67:22:3e:04:4d:d6:4b:dd:8f:b2:f1:7a:c1:
         8c:3c:23:5c:b5:07:ea:4f:7c:07:58:44:e8:1b:7e:d2:03:82:
         4a:13:9b:91:95:2a:b3:79:a3:e7:fc:37:86:16:15:aa:d2:36:
         51:e2:3b:6c:25:c3:9e:03:91:ac:7d:f3:d7:91:6f:e9:93:5d:
         c5:50:e5:e3:13:2c:f3:e0:15:5a:11:48:cf:3c:c6:61:1e:c0:
         3b:1b:b8:d1:b4:d0:e8:8a:33:63:1b:bf:23:05:3b:87:c3:e3:
         2a:58:36:f7:55:ae:f4:6b:d6:9b:e9:6b:aa:b1:19:65:4b:9b:
         81:78:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:46:00 2025 by rpki-client on console.sobornost.net