Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
File:                     OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json)
Hash identifier:          neYNXaSZku2TDkd3TNra1bLAYqIyvT0SqYcHlcfvsaU=
Subject key identifier:   68:0F:26:B3:EA:5A:C6:3E:D7:21:0A:66:31:BB:9F:82:E2:EE:77:4E
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Certificate issuer:       /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial:       05FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
Manifest number:          05F4
Signing time:             Tue 22 Apr 2025 22:48:23 +0000
Manifest this update:     Tue 22 Apr 2025 22:48:23 +0000
Manifest next update:     Tue 29 Apr 2025 22:48:23 +0000
Files and hashes:         1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: hnNqe0z6n7yC5HiHV6bKNy97SCt7Y5+YOq0XEn3opfk=)
                          2: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: Pa24EqnhzVLdBNd9p4j/m3vhajKpO1KOBKzuyf2oDyI=)
                          3: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: rRKFhbIBmbzLdYOr5BLZyHQoz/TkKPZba2YaKMN0mo0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 22:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
        Validity
            Not Before: Apr 22 22:48:23 2025 GMT
            Not After : Apr 29 22:48:23 2025 GMT
        Subject: CN=68081cb7-0fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:22:ef:1a:7e:de:c1:9b:40:07:15:0c:45:
                    ef:44:8a:7e:15:91:dc:dc:49:bf:f4:c6:c5:07:07:
                    85:a7:cc:99:c7:c4:88:9f:cf:96:ba:91:db:7f:9d:
                    03:52:0f:d1:c6:70:11:22:d8:1f:ab:95:63:6e:3f:
                    8a:58:de:b4:10:f0:ce:f2:64:04:79:f3:e5:4a:0c:
                    64:56:39:4d:e3:1a:3f:6c:3d:d9:fe:8f:8a:2d:ae:
                    04:a4:d4:09:4e:c1:33:28:52:24:a3:1a:f3:60:2d:
                    ab:f2:50:52:d1:79:05:dc:37:1a:56:f6:21:06:92:
                    9f:98:6b:93:74:0a:f2:de:91:87:3e:51:1f:d3:da:
                    dd:9a:99:3b:37:d2:14:14:b5:6a:f1:4c:dd:88:2d:
                    4a:85:14:dc:8e:32:04:72:7a:6a:d8:4e:50:13:82:
                    26:0f:5a:43:fd:69:07:21:9d:78:92:7b:56:9f:0a:
                    63:14:c2:fc:39:6c:7b:a2:1f:ca:5d:96:c7:ce:00:
                    04:c7:92:1f:04:71:65:cb:2f:19:2b:4f:72:d1:ba:
                    c0:52:82:17:20:ac:16:61:1d:b9:76:71:58:04:f0:
                    ba:2e:e1:9d:9a:2a:24:15:c0:9e:62:1f:9d:68:43:
                    fe:2c:04:32:ce:2e:7d:c4:26:5b:f7:9b:54:fb:23:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0F:26:B3:EA:5A:C6:3E:D7:21:0A:66:31:BB:9F:82:E2:EE:77:4E
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:e3:44:cb:44:09:cb:23:51:57:d1:e8:ad:55:2f:0a:cb:
         4f:d2:4c:cb:07:b8:ae:84:0f:12:20:99:19:a0:58:07:f4:73:
         b8:61:4f:8f:0e:a3:b7:23:c6:c6:fd:08:36:4a:8a:38:f9:d3:
         2d:1c:a3:15:15:4f:8b:7c:9d:0e:2c:49:1c:c7:1f:84:f4:3d:
         33:e9:ac:82:2d:89:6e:ed:1d:52:dc:73:27:5f:00:0f:4d:72:
         e8:1a:86:ce:99:c7:eb:66:46:a3:22:83:95:e3:06:48:cf:2e:
         2e:df:12:17:11:d9:56:b5:f7:85:18:ac:95:f6:6f:49:2c:8d:
         bc:e7:f4:bf:4c:f8:98:f3:33:8f:a3:c7:08:c9:80:50:39:34:
         26:0d:bf:13:e9:97:f8:85:ce:44:60:a2:be:93:74:38:9b:c2:
         6d:4a:3a:3b:37:13:0c:52:01:08:1a:97:df:d4:5d:17:02:11:
         c0:32:d6:ec:2f:72:74:0c:37:13:18:26:2c:ed:19:de:ad:59:
         39:ce:d0:27:52:ab:b9:fe:34:26:dd:3a:ca:86:e7:49:6f:00:
         0d:e3:27:de:dc:b8:86:99:d5:fb:00:4f:7a:fb:a1:05:68:5a:
         31:7a:1a:35:a5:07:26:2c:ed:52:a5:c5:b3:78:f8:a5:95:82:
         7d:c2:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:15:27 2025 by rpki-client on console.sobornost.net