Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
File:                     _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json)
Hash identifier:          ++b+RI7vS8PKFn5Wj7eFUreTqwsFhTqljGvVamI+7ms=
Subject key identifier:   03:9F:50:50:7F:F5:BC:EA:D9:C4:82:8A:F2:6D:17:25:2F:D6:74:29
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Certificate issuer:       /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
Manifest number:          05F1
Signing time:             Sat 26 Apr 2025 22:47:21 +0000
Manifest this update:     Sat 26 Apr 2025 22:47:20 +0000
Manifest next update:     Sat 03 May 2025 22:47:20 +0000
Files and hashes:         1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: lTFy12xc/4fUM+x6EpTCMF/ynJShsG1y1ys5I6lQmfo=)
                          2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: aiFrMbTQ8pa6qGrU9w8Y+h6k5VVyo8+mDWmigq+L7zE=)
                          3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=)
                          4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=)
                          5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
                          rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
        Validity
            Not Before: Apr 26 22:47:20 2025 GMT
            Not After : May  3 22:47:20 2025 GMT
        Subject: CN=680d6279-9ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fb:55:4a:22:8c:f5:63:01:83:b0:79:cd:87:
                    55:34:ff:60:0d:ab:b7:fd:89:95:e9:a0:10:08:90:
                    40:34:52:a8:d3:ac:27:f5:37:97:48:05:6f:d0:c4:
                    c5:45:c6:b5:6f:ee:5b:53:54:8b:e5:6c:03:94:dc:
                    9a:89:b9:44:94:f2:ad:30:04:ca:37:1f:63:90:fc:
                    00:9a:86:ba:ea:1f:7a:38:1c:86:70:59:3e:32:ac:
                    28:ac:9e:b2:42:ef:55:e1:25:e7:f7:9c:7c:46:07:
                    58:66:ba:4d:0d:bb:02:b1:86:6c:3e:91:84:69:72:
                    d6:90:9e:7a:f6:78:17:59:c0:61:93:20:07:72:34:
                    2f:ed:35:09:5d:8b:6c:f8:66:bc:a2:fc:ca:ab:ad:
                    ae:10:d7:ea:ca:e0:a0:5e:a7:e4:fe:67:d8:e3:4e:
                    3b:6e:2a:e7:e4:91:19:6f:79:18:82:ee:c6:8d:b5:
                    e1:f2:c1:26:b3:53:c6:38:a1:13:ea:36:47:fa:b7:
                    45:3e:35:68:e1:9d:09:27:f3:2d:17:54:e1:1f:11:
                    bc:93:5f:ab:d0:d2:16:fe:4a:84:21:53:0a:d9:dd:
                    98:81:a4:99:2a:04:f9:c8:6e:cc:7c:a2:f1:d4:60:
                    60:3e:c4:3d:d5:46:98:d3:de:e3:82:58:d3:be:21:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:50:50:7F:F5:BC:EA:D9:C4:82:8A:F2:6D:17:25:2F:D6:74:29
            X509v3 Authority Key Identifier:
                keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:bf:77:8f:73:f3:5f:b5:3b:58:b8:bb:9f:3b:8b:a3:80:54:
         aa:56:3e:8e:89:ae:58:e4:51:9e:c3:1b:b3:e1:16:85:d2:64:
         c9:2c:7b:f7:f5:7c:96:7b:c6:6f:b7:12:8b:cc:24:1c:2b:e3:
         b0:43:4c:91:9d:e3:c3:5a:4a:e5:a5:be:31:ca:de:bf:45:d1:
         e3:eb:16:e4:33:86:b1:a3:e1:08:26:03:37:88:39:47:76:d5:
         d8:b0:0d:5d:41:64:07:93:bd:88:30:af:d4:1b:ca:e6:75:a3:
         72:98:6a:bd:41:68:fe:d6:26:06:d4:f2:48:6d:91:2d:21:13:
         8f:8c:55:05:1d:e9:e8:34:45:b6:9d:67:bf:e9:d7:e0:5b:9e:
         d5:59:d4:02:5e:4a:3b:dd:9a:04:35:0e:4b:3b:38:89:a7:9a:
         c1:63:56:4b:b8:86:22:ef:2d:e4:50:d6:ad:95:67:84:2f:b1:
         a3:8f:ab:55:1d:e3:35:19:9d:44:35:a4:22:82:31:92:03:c6:
         74:99:c0:b7:41:23:d6:fd:04:37:3d:90:72:cb:74:d7:3b:f1:
         7a:6a:13:12:3a:44:04:d4:17:59:d6:6f:ff:1c:cc:65:ba:2a:
         08:2d:1c:b3:fa:19:17:36:dc:10:2d:8d:2c:a9:14:f6:c8:ec:
         e9:f9:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net