Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File:                     mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier:          j0wINOgWkdA/DOGXuiwM62RY7+v25QEsAALbu3DCIAU=
Subject key identifier:   08:7D:71:80:F6:15:E6:CA:BF:35:BD:6C:6A:19:03:16:F2:C3:12:58
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer:       /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number:          01C5
Signing time:             Thu 24 Apr 2025 16:06:26 +0000
Manifest this update:     Thu 24 Apr 2025 16:06:25 +0000
Manifest next update:     Thu 01 May 2025 16:06:25 +0000
Files and hashes:         1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: X20/MKA3uJ+ykd7CqRaq45KQsv1UM0MQVR0zkvzR7kE=)
                          2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: lu38CDRBmX2eL86FuDGblRO37V7hVT/nMCfbmUIJkQk=)
                          3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: UFLmIYqMMQZsSlXO+J3Nx0+Pb9WqTG32RlxuAiHOUdE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
        Validity
            Not Before: Apr 24 16:06:25 2025 GMT
            Not After : May  1 16:06:25 2025 GMT
        Subject: CN=680a6182-abdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:e8:77:0b:c7:90:a2:f3:67:04:40:14:5c:
                    04:a8:4f:2f:ae:65:b8:4f:c4:76:7b:de:6c:5c:43:
                    c8:84:fd:e2:30:dd:ae:36:40:16:d8:2c:af:ad:cc:
                    37:28:ca:d6:b2:dc:43:e0:db:7e:5a:91:46:0e:06:
                    d7:8b:15:e8:00:7a:3e:b6:39:68:4b:56:45:5b:c5:
                    ca:1a:96:99:ac:31:41:30:8b:89:81:19:92:54:23:
                    d4:d3:a5:b9:26:96:d7:a8:b9:42:e1:56:8b:56:03:
                    7f:b1:a6:38:ea:23:76:ad:5d:72:4e:d3:39:4e:3e:
                    34:6f:47:fd:46:ba:46:12:39:bb:5c:7e:05:66:5d:
                    c6:ff:a4:90:7a:9c:ba:60:a9:73:f3:24:00:4f:2d:
                    20:5b:1e:15:45:53:5d:09:6f:13:b1:b0:66:1c:c4:
                    4c:76:ad:d7:65:2b:f0:26:fd:46:55:e0:55:7f:01:
                    fb:d0:ed:5e:c7:55:84:a5:13:03:d6:8a:c3:9b:01:
                    86:b4:7a:18:f8:c7:0a:51:5e:b2:fa:e6:4e:4c:ef:
                    ac:0f:6f:60:c1:99:25:99:92:15:5f:71:7d:13:ad:
                    45:dc:16:03:c3:91:64:ff:57:6c:3c:d4:a3:2d:b0:
                    2a:52:14:59:ae:e7:28:22:09:80:11:2e:68:86:0a:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7D:71:80:F6:15:E6:CA:BF:35:BD:6C:6A:19:03:16:F2:C3:12:58
            X509v3 Authority Key Identifier:
                keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:5c:f9:31:ff:ff:7a:49:5e:1c:62:ca:db:50:7b:aa:d8:63:
         cb:31:73:35:28:4a:cf:61:ae:c9:2d:9c:a3:b9:ba:47:88:e5:
         ed:2b:cf:cf:51:d0:67:af:c6:92:cc:d5:9c:cf:d0:fb:1c:d7:
         ef:6d:d9:22:5c:f1:db:f4:b4:73:07:4b:8a:a3:48:77:de:46:
         eb:2f:1c:fb:70:d3:43:92:f6:b7:e7:54:03:b9:d2:39:1a:a5:
         2d:76:1e:d9:85:93:68:1d:38:e9:f1:d2:cd:7f:e1:12:d2:af:
         95:78:f1:f6:ae:3f:67:c5:ec:94:a1:63:7c:d8:d0:a9:50:0f:
         e4:e0:c0:bd:53:83:9a:d8:79:9f:04:ce:e8:cf:a8:34:98:e7:
         54:0d:20:90:55:51:b9:6b:54:66:1b:e5:68:b8:7f:4c:10:a1:
         07:1f:8f:d0:c6:18:b9:8a:d8:05:84:8e:fa:62:73:c2:bf:fc:
         57:da:fc:90:00:1e:af:17:e9:3d:7a:b7:c0:f1:28:b5:77:92:
         c5:eb:d3:53:44:55:dd:25:16:7f:92:be:e1:ae:65:bd:14:bc:
         1f:b8:b2:4a:70:63:c2:fd:a6:eb:ab:be:2f:41:66:55:e4:98:
         b4:ae:61:45:e5:e5:d9:45:74:a5:68:71:1b:f9:b2:4e:15:bd:
         1d:89:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:09:17 2025 by rpki-client on console.sobornost.net