Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          UMJFEM6c8p4kmVF5whkvy8rYnzvvhkeE+b06nSEx+QA=
Subject key identifier:   E2:32:1A:1B:7D:FF:FE:D9:03:E6:CE:82:DF:D8:2E:79:FE:8E:94:C3
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       09F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          09EF
Signing time:             Mon 28 Apr 2025 20:18:35 +0000
Manifest this update:     Mon 28 Apr 2025 20:18:35 +0000
Manifest next update:     Mon 05 May 2025 20:18:35 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: Qp8416NC4WMcgFW7HWJuCVPRTmrGRzFux37QEvgOfZE=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: LQT0TO6GObYdNEXY2zITFA+60OyJn4ApFTpeHBpwqn0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553 (0x9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Apr 28 20:18:35 2025 GMT
            Not After : May  5 20:18:35 2025 GMT
        Subject: CN=680fe29b-da8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:a5:93:d7:a7:b2:b1:8f:71:64:88:d8:58:
                    a7:34:46:2e:a0:66:59:87:89:bc:5b:71:bd:fb:ff:
                    0f:22:43:99:2c:17:8b:e5:d6:10:43:42:56:a0:eb:
                    25:6b:44:51:32:72:c5:19:44:b9:51:56:9b:bd:e9:
                    6f:74:ef:2c:bb:6b:2f:1b:09:3c:cd:b9:88:61:ed:
                    f5:28:35:fd:c0:b5:f5:2d:42:db:28:c2:9b:93:aa:
                    22:a5:a6:ef:ef:35:0f:77:5d:c9:81:82:a3:88:3c:
                    30:36:42:74:bd:ca:b3:78:3e:25:40:74:5b:4f:3f:
                    c8:c9:87:4e:19:af:c8:85:52:0b:bf:86:fb:98:b1:
                    2a:04:16:93:20:3e:72:4d:51:e8:6e:d7:27:43:9d:
                    f5:3e:58:55:1c:13:dd:96:d1:7d:9d:9a:dd:8a:8d:
                    ce:c6:d9:dd:37:d7:08:7d:0f:31:bd:bd:c2:2f:c1:
                    43:35:99:43:ab:90:37:78:d8:11:e3:2a:d9:2b:53:
                    e6:d5:95:a6:64:d8:1d:3a:18:8f:17:be:47:4e:11:
                    4d:9e:c3:d9:b4:e4:be:67:96:2b:72:2b:0b:14:19:
                    26:0b:ca:e5:9a:1b:8d:51:dd:bf:6f:f4:c2:3a:18:
                    d5:3e:02:7b:06:08:70:cc:d4:2a:fc:11:e4:6b:e1:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:1A:1B:7D:FF:FE:D9:03:E6:CE:82:DF:D8:2E:79:FE:8E:94:C3
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:db:8f:e1:fc:36:cf:4d:ba:40:76:3e:fe:33:60:27:30:
         a5:2a:fb:54:51:4a:8b:25:20:10:28:c8:6d:c0:04:8b:a2:85:
         c8:e1:ef:62:ad:7e:25:80:49:93:7e:5a:e8:58:1d:8d:7b:2a:
         80:5e:7e:33:ae:f5:6a:0e:32:53:07:ed:3f:d8:78:2c:d8:10:
         3c:b0:9b:22:93:51:f5:bd:04:4b:7a:15:f9:a2:14:be:c6:ec:
         80:dd:1e:1a:5b:28:02:ce:96:ec:9c:e5:3d:02:fb:9e:52:ac:
         67:92:b8:b4:d4:32:f4:29:3d:fa:57:e9:59:7c:2a:2d:df:49:
         b0:0b:8e:c8:d4:cb:b8:22:e3:44:df:1e:21:72:24:96:fe:ba:
         74:44:2f:e8:4f:45:a5:e3:dc:99:a4:1d:14:f3:1b:0b:a2:21:
         e4:bb:ff:4a:b3:c9:b6:11:78:c2:42:d0:2e:0a:df:0d:18:80:
         b6:3e:e3:70:72:a6:ce:fb:c8:a8:5d:a3:6b:de:6e:5e:9d:71:
         66:c7:fb:95:e4:e5:ee:fa:5a:fc:09:49:01:e4:66:88:0d:98:
         27:0b:b5:7f:bd:67:e6:b7:0b:77:9e:f2:34:9e:85:b1:0e:4b:
         4d:61:12:6d:ae:72:a3:d6:de:66:81:a1:39:45:1e:d7:4b:8b:
         ca:0d:28:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY2QzUxMTAvBgNVBAUTKEZFRjEzQUI4NTJCODkyQUJBMjhCN0Y0QjI1MjU3MDg5
OTY0RDc2NkIwHhcNMjUwNDI4MjAxODM1WhcNMjUwNTA1MjAxODM1WjAYMRYwFAYD
VQQDEw02ODBmZTI5Yi1kYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yClk9ensrGPcWSI2FinNEYuoGZZh4m8W3G9+/8PIkOZLBeL5dYQQ0JWoOsl
a0RRMnLFGUS5UVabvelvdO8su2svGwk8zbmIYe31KDX9wLX1LULbKMKbk6oipabv
7zUPd13JgYKjiDwwNkJ0vcqzeD4lQHRbTz/IyYdOGa/IhVILv4b7mLEqBBaTID5y
TVHobtcnQ531PlhVHBPdltF9nZrdio3OxtndN9cIfQ8xvb3CL8FDNZlDq5A3eNgR
4yrZK1Pm1ZWmZNgdOhiPF75HThFNnsPZtOS+Z5YrcisLFBkmC8rlmhuNUd2/b/TC
OhjVPgJ7BghwzNQq/BHka+FzVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIyGht9
//7ZA+bOgt/YLnn+jpTDMB8GA1UdIwQYMBaAFP7xOrhSuJKroot/SyUlcImWTXZr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjZDNS9BMkNEMzU0RTc3
RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtxdWlpMzlMSlNWd2laWk5k
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192RTZ1Rks0a3F1aWkzOUxKU1Z3aVpaTmRtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjZDNS9BMkNEMzU0RTc3RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtx
dWlpMzlMSlNWd2laWk5kbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXmtuP4fw2z026QHY+/jNgJzClKvtUUUqLJSAQKMhtwASLooXI4e9i
rX4lgEmTflroWB2NeyqAXn4zrvVqDjJTB+0/2Hgs2BA8sJsik1H1vQRLehX5ohS+
xuyA3R4aWygCzpbsnOU9AvueUqxnkri01DL0KT36V+lZfCot30mwC47I1Mu4IuNE
3x4hciSW/rp0RC/oT0Wl49yZpB0U8xsLoiHku/9Ks8m2EXjCQtAuCt8NGIC2PuNw
cqbO+8ioXaNr3m5enXFmx/uV5OXu+lr8CUkB5GaIDZgnC7V/vWfmtwt3nvI0noWx
DktNYRJtrnKj1t5mgaE5RR7XS4vKDSiw
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:50 2025 by rpki-client on console.sobornost.net