Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File:                     7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier:          qoQuwGV+gJT+gV1mJOiJVnuOBwX0aJ2Sn/K9R1dBo24=
Subject key identifier:   E0:A2:57:7F:B4:91:D4:CD:F2:AE:A9:BC:B1:AA:69:A4:CB:3F:BA:B5
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer:       /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number:          01C4
Signing time:             Sun 27 Apr 2025 02:07:21 +0000
Manifest this update:     Sun 27 Apr 2025 02:07:21 +0000
Manifest next update:     Sun 04 May 2025 02:07:21 +0000
Files and hashes:         1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: gqavTmq7QPpBvn+oz8+Me5F/qjqqWjjV7g/+yIL/NQc=)
                          2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
        Validity
            Not Before: Apr 27 02:07:21 2025 GMT
            Not After : May  4 02:07:21 2025 GMT
        Subject: CN=680d9159-3982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:f0:b8:d0:79:e2:bd:56:72:65:c4:14:4d:
                    bb:69:b5:95:e8:c7:e6:86:1d:6a:93:7e:21:aa:dd:
                    20:6d:32:3f:5e:1a:a9:d2:05:50:55:19:23:b7:08:
                    8d:27:af:67:5c:e9:52:b9:dc:a0:80:37:f0:41:0e:
                    61:0a:6f:6b:cd:19:89:83:eb:45:e2:ac:32:2c:c1:
                    70:0f:0c:65:e0:34:6d:49:2c:89:5b:3c:4b:6c:ff:
                    0f:83:8c:65:d1:f4:ba:74:5f:90:2d:b4:70:c0:7d:
                    16:a6:96:04:66:73:05:b8:35:54:7b:44:51:87:51:
                    f5:ad:d6:73:65:50:47:27:8d:ba:6b:bd:7f:0a:cd:
                    a5:82:ab:58:03:05:88:a8:12:35:7f:9b:62:81:8b:
                    de:c1:5e:b2:32:aa:cf:c9:ae:28:e8:ed:0b:48:d0:
                    5d:e4:2c:51:16:91:b7:1a:d8:39:8f:d1:09:76:7e:
                    f3:a7:5d:a1:79:d1:b6:ce:87:70:43:ed:6f:d7:16:
                    46:26:22:1a:91:b6:7b:f8:ab:f1:45:f5:0b:86:0e:
                    ac:64:07:39:67:c9:03:a9:13:2d:57:d9:8b:16:77:
                    d3:20:5f:31:71:82:ad:0c:a2:c1:ff:2e:94:65:0a:
                    48:c5:b1:df:3d:9d:64:13:bc:09:54:35:8b:e6:af:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:57:7F:B4:91:D4:CD:F2:AE:A9:BC:B1:AA:69:A4:CB:3F:BA:B5
            X509v3 Authority Key Identifier:
                keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:73:9d:9c:82:76:95:ce:3e:aa:fc:7b:75:72:f3:f2:28:16:
         6c:a7:6c:ec:35:33:6e:e0:93:7f:1d:15:79:de:dc:eb:11:6a:
         52:8d:d9:bc:60:30:8c:4c:92:31:4a:c5:32:e7:15:6c:74:99:
         28:e3:4a:a9:c3:fb:71:2c:a6:50:a9:e6:06:d5:91:7a:57:18:
         73:a7:7b:29:7c:ba:6e:0a:23:bb:1d:0f:89:c0:a4:e3:b7:6a:
         d7:0b:83:27:ba:61:6c:01:b1:3d:50:69:08:b9:61:4d:c9:5c:
         6c:ec:62:ea:70:85:2f:62:4e:81:44:7e:dd:f1:5d:53:22:ab:
         c5:2a:03:89:1f:d0:8e:65:73:55:50:2e:39:c6:cc:00:8d:87:
         d1:34:92:4d:2e:71:e0:9e:02:f7:f9:60:d8:0e:97:a2:cd:03:
         19:1b:f5:c6:cb:5b:cf:19:6b:4a:b6:67:71:38:d2:5e:ae:d3:
         65:58:93:fe:56:1c:e8:4e:ad:8b:71:8b:cf:b5:e6:8f:18:76:
         08:18:e0:97:77:94:df:3c:60:54:a8:12:cb:93:bd:e8:cc:0b:
         12:9d:54:76:22:48:b8:23:34:97:47:10:ac:96:0e:2e:93:31:
         84:2d:ab:b3:f0:9b:61:23:57:24:62:0b:b8:63:41:59:ba:0c:
         f6:3f:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net