Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File:                     E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier:          CTWDnoipSaDuCiTVl5LtfS26csVhZT6vnlXkJDa0xHI=
Subject key identifier:   B1:04:69:36:57:2E:54:34:25:EB:08:B9:1B:F8:72:67:63:6C:8B:E3
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number:          0461
Signing time:             Sat 26 Apr 2025 23:48:17 +0000
Manifest this update:     Sat 26 Apr 2025 23:48:17 +0000
Manifest next update:     Sat 03 May 2025 23:48:17 +0000
Files and hashes:         1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: dbFIi9cPfiOnjgE14n0Y5KnfNTKCGHK7s0ToFbSkS/o=)
                          2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=)
                          3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Apr 26 23:48:17 2025 GMT
            Not After : May  3 23:48:17 2025 GMT
        Subject: CN=680d70c1-8ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:b8:b9:a5:84:bc:d3:9c:26:42:91:9e:b6:
                    cf:9c:dd:7e:c2:fb:35:48:39:ec:fa:fb:99:8d:13:
                    25:ab:3f:1d:86:69:d2:3c:a6:fc:1c:45:8f:e9:e3:
                    79:e2:b7:52:24:7e:32:37:29:8c:c6:b6:36:e4:02:
                    2d:af:c0:8a:20:58:16:95:ff:af:08:9e:fc:b8:53:
                    03:e6:72:05:16:07:e6:8a:9d:17:ed:a6:00:3b:8c:
                    a9:86:41:b4:b3:08:fe:82:33:bf:41:d9:c0:92:77:
                    1f:34:1f:8c:59:02:cf:39:7a:4c:bf:d4:f3:f2:e5:
                    ae:12:b6:a6:25:0b:ea:d8:9e:31:17:ab:75:58:40:
                    da:08:2f:6d:02:1d:ed:ed:1d:37:2c:c9:4e:58:8b:
                    95:40:e7:09:a1:82:3d:a2:d4:93:c5:a7:97:b0:f2:
                    9d:18:1f:54:c1:c1:58:65:a2:48:e5:65:0b:38:b0:
                    f6:4f:1f:fe:68:63:a2:d0:ed:af:b0:35:a2:30:61:
                    99:23:30:44:ab:b3:25:2e:a1:22:6a:08:37:46:bc:
                    f0:1a:4e:99:f1:1a:b4:d9:87:a8:bd:b8:a3:2f:90:
                    72:e7:66:e2:c0:3a:b3:ca:d8:55:6f:9c:cb:f4:22:
                    eb:02:ec:98:a3:be:2b:a8:fb:63:09:d4:ff:f3:0a:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:69:36:57:2E:54:34:25:EB:08:B9:1B:F8:72:67:63:6C:8B:E3
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:cb:05:5f:14:e3:9a:c1:a0:03:f4:b6:fb:73:3a:50:bb:07:
         06:5d:ae:4f:28:d7:73:80:90:5c:84:d3:10:d4:e7:6a:2e:37:
         fe:5b:b8:34:81:69:37:92:27:12:35:b4:0a:26:6f:1c:e3:fd:
         a9:5b:81:f7:97:76:a6:19:35:f1:51:7d:a8:0d:81:88:9b:d8:
         ff:bd:36:58:33:15:3a:72:13:71:e4:08:fc:d6:e4:2e:cd:bf:
         2b:43:0e:2e:42:0d:1e:00:1f:81:47:83:77:d1:c0:24:0c:b4:
         7f:b2:3b:e5:d1:22:ea:15:2d:8c:72:2e:e5:08:a8:8d:3e:76:
         45:9b:14:c9:71:5d:45:4b:84:c1:e0:76:44:95:a4:8a:9c:94:
         73:47:6a:95:d6:c5:16:6b:f0:54:b0:50:e9:0c:9d:cb:ee:ab:
         bb:81:3f:aa:12:e1:be:82:8f:9a:bd:f1:3f:3f:fe:33:46:24:
         e9:d0:a6:66:74:59:ff:e2:7f:b4:49:0d:a1:4b:7a:b3:25:e6:
         10:e5:20:2c:ca:bd:56:f2:fc:05:74:ce:ea:6b:79:93:a6:0c:
         68:3a:27:9f:05:2e:61:b3:be:3e:51:c0:df:e7:fe:24:23:5b:
         b9:35:87:dc:cd:74:e1:fd:7a:9a:a0:b4:44:4b:35:5f:5c:52:
         10:9a:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:03 2025 by rpki-client on console.sobornost.net