Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File:                     zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier:          7+8FR0vsxAXyzC9sVFNDnJ3ry2PN6prXWrYvzEW60YE=
Subject key identifier:   37:05:3F:04:4F:E6:83:ED:77:00:8D:69:2C:72:E4:FE:D0:D1:83:44
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer:       /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number:          80
Signing time:             Sun 27 Apr 2025 05:30:13 +0000
Manifest this update:     Sun 27 Apr 2025 05:30:13 +0000
Manifest next update:     Sun 04 May 2025 05:30:13 +0000
Files and hashes:         1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: hQ/EYp4W/GwF2m1WApdAANcFmpY8UnP9ASTgUbWDOdw=)
                          2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: u4ruZ96aOsEF+VWmoS7WaQkE4RPkVRrBuBKptWViuMM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
        Validity
            Not Before: Apr 27 05:30:13 2025 GMT
            Not After : May  4 05:30:13 2025 GMT
        Subject: CN=680dc0e5-49c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:1d:ee:be:bc:7a:10:44:07:79:a9:ea:27:
                    db:b2:73:43:43:fc:66:1f:54:54:ec:ca:6b:83:9c:
                    67:61:ad:11:7e:ff:9d:72:64:b3:b9:09:12:5f:ba:
                    14:9f:98:09:21:ad:ee:c1:59:7d:7c:6e:05:9e:85:
                    c0:ff:ac:7d:7e:e2:fd:20:95:46:4a:d4:5d:9c:20:
                    90:5d:cc:d8:df:92:ed:7f:51:cb:0f:84:9c:bc:81:
                    9c:38:53:ff:d1:d2:6c:01:2b:21:0a:33:12:1d:65:
                    18:c5:4e:aa:a0:9e:f0:42:74:42:71:46:80:a2:a9:
                    13:7b:e6:db:a3:da:b3:3a:ca:ec:fb:1c:e1:cb:e1:
                    bd:6e:09:23:d5:ce:c8:74:e8:dd:d0:da:03:ad:8f:
                    0d:e3:5e:58:12:5e:55:10:e2:ae:4d:8c:76:49:84:
                    98:bc:66:74:9f:e1:52:25:5e:fa:f6:32:88:99:8d:
                    60:f6:bf:8b:ed:0a:6b:ad:de:38:ec:14:45:0a:6c:
                    5a:fe:49:4f:a2:11:30:21:1d:38:60:00:86:5a:ef:
                    56:b0:e0:72:4f:09:20:a7:8b:ae:36:6f:2a:fe:03:
                    84:1b:f3:83:11:b0:bd:6f:9a:2e:52:5a:73:74:1a:
                    e8:9a:b6:83:f2:ec:b6:d6:bf:a9:ba:e6:9e:03:e5:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:3F:04:4F:E6:83:ED:77:00:8D:69:2C:72:E4:FE:D0:D1:83:44
            X509v3 Authority Key Identifier:
                keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:56:31:05:f7:b0:16:be:4a:16:24:fe:37:b2:4a:5b:8e:e4:
         e4:eb:9c:49:96:dc:ac:b3:c5:42:8e:61:fb:5e:3e:f9:67:9e:
         6a:f4:14:1a:b3:55:8e:0a:72:47:a3:b5:02:c1:95:15:e7:ef:
         0c:09:1b:9f:c5:3b:cd:d0:16:fe:78:b4:94:39:b6:c4:36:c1:
         1d:7c:d6:d2:d9:41:9c:06:28:4d:64:5f:eb:b1:c4:f3:72:50:
         b2:f1:f3:a4:09:0a:b6:ba:85:85:cb:c4:19:7b:0b:a3:b1:91:
         fa:ac:48:11:1f:57:74:7e:6e:f4:3d:25:8a:45:eb:b3:fd:42:
         69:91:6f:1d:71:97:f9:ba:6b:b9:80:38:42:50:44:88:0a:cb:
         73:33:0f:55:7a:d0:4f:2b:7d:6c:83:44:4a:a0:07:3a:e7:a7:
         d1:c5:a9:8c:63:24:25:3f:2f:02:e2:ca:e7:65:e1:cb:73:c3:
         04:cb:aa:3c:6d:ed:d1:93:04:6f:5e:32:b4:d3:43:33:b8:eb:
         d4:3b:ad:74:49:c7:83:81:d0:37:0c:7b:a3:ac:71:55:e7:e9:
         f4:7d:cc:b3:c3:f5:29:58:5a:29:2c:9e:0b:cd:7b:a4:15:d0:
         57:dc:4a:11:7c:4a:2d:f3:d6:94:bb:9d:26:14:0f:f7:24:ca:
         08:94:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net