Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
File:                     sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json)
Hash identifier:          irVmi4u61J5y0WzxjiyH2EcuzT3xt2Gsv8dZnELYbAA=
Subject key identifier:   19:5C:1B:FA:BB:89:5D:92:ED:40:99:14:25:BB:31:F8:E1:52:38:C4
Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
Certificate issuer:       /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
Manifest number:          AE
Signing time:             Sun 27 Apr 2025 04:55:14 +0000
Manifest this update:     Sun 27 Apr 2025 04:55:13 +0000
Manifest next update:     Sun 04 May 2025 04:55:13 +0000
Files and hashes:         1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: 21lKJedSmws5BNeM0Bh7m9sDii9tbs/CdMXwRtUIX/U=)
                          2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: +50v3mlEKF+ZCfC1CHUDd+fzqudaC4LTsu2ANTG7KU4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9F6, serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
        Validity
            Not Before: Apr 27 04:55:13 2025 GMT
            Not After : May  4 04:55:13 2025 GMT
        Subject: CN=680db8b1-03f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:73:a9:34:0d:4b:22:7b:d1:e4:9f:0b:87:
                    79:f6:c2:0b:a0:84:54:79:84:93:c2:d3:97:c5:83:
                    d8:75:24:8f:27:e3:5d:be:29:8e:de:e1:f6:a4:f8:
                    f7:f2:a4:4a:e9:95:59:34:dd:82:9e:56:9e:bc:de:
                    2e:48:b8:8c:20:f4:fe:70:2c:27:1d:e0:fe:74:62:
                    ba:d3:e3:55:c8:2e:4e:72:8a:63:58:0e:19:e5:c7:
                    11:80:da:88:5f:c7:ac:ab:3d:89:ba:2f:52:69:76:
                    e7:c2:45:0f:e4:c0:e3:b4:dc:b3:cc:d2:41:0f:68:
                    c9:b8:0e:f4:87:39:aa:ea:ac:ce:5c:73:92:b5:19:
                    c7:2a:48:5c:11:7c:6e:91:15:11:5e:65:fd:9f:f5:
                    6a:13:ac:ec:e8:08:15:f3:08:10:b8:ac:07:d1:c7:
                    fc:6d:ec:01:90:e4:c5:33:f9:9a:d1:94:e0:4b:e4:
                    b3:dc:89:ba:f3:50:ee:ae:34:aa:88:31:97:a9:5d:
                    f6:1f:12:e7:e9:a0:f6:9e:12:e6:1d:01:64:bf:82:
                    5b:01:b1:6b:ca:d2:73:ef:89:d0:e4:38:a6:02:00:
                    bd:0f:c7:30:42:6b:f3:11:69:b8:c4:b7:84:ce:61:
                    e0:8e:cd:44:72:1c:a9:ae:7e:92:cf:0d:e2:9d:1e:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:1B:FA:BB:89:5D:92:ED:40:99:14:25:BB:31:F8:E1:52:38:C4
            X509v3 Authority Key Identifier:
                keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ad:a9:b2:dd:15:29:dd:f2:ec:38:7d:79:c1:3c:49:b0:e3:
         28:38:39:74:33:ad:f5:ee:28:e5:96:38:5f:db:28:4e:b6:b6:
         da:39:df:5b:e7:6b:d2:2b:fd:b8:21:16:6b:4a:58:7d:16:24:
         8e:89:79:85:03:58:5d:d4:35:37:ac:3d:ad:0d:39:64:30:a0:
         4a:75:dd:3a:96:be:76:dc:36:89:c8:92:ae:cb:38:f8:ed:cc:
         02:5c:94:b3:f2:d1:a8:b7:99:29:71:55:e5:53:47:a3:f6:96:
         80:f4:9e:1b:82:6c:8b:6f:38:f9:1a:42:0f:7f:2c:c9:5b:b6:
         52:f2:7f:e1:f4:1e:8f:02:74:4c:6e:e6:d8:45:7b:8b:e5:81:
         4b:ff:54:c4:b0:c4:8b:ee:e0:ce:e4:fb:5c:47:99:c8:70:55:
         e3:de:53:eb:5d:c8:bf:ac:8d:70:54:2d:f3:1b:3a:12:c4:cb:
         b2:b3:0f:e9:19:51:c2:ef:91:0d:c1:45:d9:17:1a:8d:0e:ca:
         4c:b5:da:44:db:70:86:8a:cd:cd:0a:3b:db:9a:6d:4a:25:50:
         25:ba:9a:da:8f:09:13:ae:37:54:0a:97:cf:29:e0:40:09:11:
         4d:6d:b8:10:ae:e1:b4:11:b7:28:10:25:fc:ce:17:22:29:9d:
         7d:55:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net