Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
File:                     r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json)
Hash identifier:          mk1pRC5qWOjZI5LTaub/dRdEichszA+M56DJDcYs0BY=
Subject key identifier:   F5:18:36:69:75:BA:15:01:FF:47:AF:E9:47:B7:60:DD:DD:6A:4A:2D
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       03DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
Manifest number:          03CB
Signing time:             Sun 27 Apr 2025 00:20:57 +0000
Manifest this update:     Sun 27 Apr 2025 00:20:56 +0000
Manifest next update:     Sun 04 May 2025 00:20:56 +0000
Files and hashes:         1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: vScjXhHrmnodYpUShtCFuc6gmC7uvUdO0rsBgIzCTVM=)
                          2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=)
                          3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: BndO95FjlN4yoYJHwmdg6jMh7CCU5xFJrJ+5TfJ2qvA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Apr 27 00:20:56 2025 GMT
            Not After : May  4 00:20:56 2025 GMT
        Subject: CN=680d7868-a12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:7b:eb:9e:ac:44:1c:67:31:3c:28:25:78:72:
                    80:e5:51:81:03:65:21:5f:b6:7a:41:9b:14:70:fd:
                    2e:12:ff:3b:35:0a:2a:d5:b4:73:2f:ae:04:16:0f:
                    8b:2c:80:a5:21:3b:d0:5e:fa:d7:22:aa:46:50:7e:
                    a1:16:f8:7d:8f:a7:b1:ab:c2:b7:6f:61:4d:df:36:
                    a4:07:3c:ea:ed:89:de:d3:02:d0:58:56:81:2d:2b:
                    05:e7:98:3c:ce:10:d7:29:f2:f1:0b:38:74:63:22:
                    a0:84:04:20:22:2f:59:07:b4:d0:b1:17:48:53:55:
                    6c:21:89:3c:06:63:56:a5:3d:41:a5:16:4c:75:b5:
                    1e:a8:11:6d:27:f7:6b:c6:10:e5:b6:f0:64:ba:38:
                    02:2f:23:70:fe:2c:e4:12:b8:7f:2e:6f:21:7c:f4:
                    b7:dd:84:cc:4f:ce:cb:6f:03:76:ff:f4:8e:21:5b:
                    e9:9c:88:90:19:ed:60:06:38:1a:e0:28:fc:49:70:
                    7c:a8:c3:84:75:69:f9:06:d9:49:d8:67:02:f7:8e:
                    9e:f9:d4:d2:5d:ed:4f:4b:1e:c6:2c:21:b8:07:1a:
                    eb:de:26:f5:d6:d9:56:1f:0c:42:91:b0:2a:01:b4:
                    0f:33:cf:bd:51:ba:72:11:d6:0f:27:77:0a:0b:76:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:18:36:69:75:BA:15:01:FF:47:AF:E9:47:B7:60:DD:DD:6A:4A:2D
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:9b:b1:42:65:00:98:1a:01:8f:57:0c:93:6f:f6:bd:37:
         56:d8:52:9c:f4:60:8a:3d:9c:57:72:e8:f2:b1:1f:82:09:e5:
         df:94:a4:b8:ce:a8:97:33:ef:e7:a4:1d:10:38:97:02:e9:00:
         b4:0a:99:53:66:97:b2:a2:16:40:ef:ab:d3:7e:1f:61:91:5b:
         67:12:34:51:43:36:ec:53:f5:fb:38:7b:60:e7:30:8e:5f:50:
         13:57:54:e8:d2:bc:6a:51:f2:b3:80:9d:6a:25:3d:d3:11:77:
         ec:f2:9b:53:34:d4:a3:3f:68:b2:73:ff:d6:46:7f:d5:61:9d:
         3b:f9:37:26:a8:55:ec:e3:d4:ff:b2:51:e8:0e:c2:da:3d:98:
         6e:62:d9:bb:91:6f:d5:35:8c:64:9b:a9:08:b3:c9:b6:23:99:
         8d:33:87:3a:85:91:8c:1c:e6:58:2b:6a:9e:d1:95:ac:24:ca:
         75:7a:e8:84:7f:96:5b:3a:72:ef:96:7f:d8:2e:66:ec:3c:90:
         d7:6c:9c:ea:4d:b2:88:27:0a:e5:8b:42:8b:3f:29:f8:d1:e1:
         5b:89:48:8e:f8:ba:61:ca:84:93:57:08:56:cb:7f:be:c7:05:
         72:2e:77:f0:25:37:28:f0:3b:01:90:4c:f0:f3:f2:16:26:df:
         ce:de:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net