Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
File:                     y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json)
Hash identifier:          B+VuO1qh9srdHsSU06HEfDF/WBSKnUgwX2LQzoSxsQY=
Subject key identifier:   3E:00:51:3B:20:E0:02:62:80:6F:4F:2C:21:C5:47:A3:56:96:63:07
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Certificate issuer:       /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial:       035E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
Manifest number:          035A
Signing time:             Sun 27 Apr 2025 00:37:29 +0000
Manifest this update:     Sun 27 Apr 2025 00:37:29 +0000
Manifest next update:     Sun 04 May 2025 00:37:29 +0000
Files and hashes:         1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: ZQAjzV0p0Jq1G8h+JkFhxgt3//ITyGNjFKas6jO8pAE=)
                          2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
        Validity
            Not Before: Apr 27 00:37:29 2025 GMT
            Not After : May  4 00:37:29 2025 GMT
        Subject: CN=680d7c49-a489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:86:f8:97:40:9b:9c:8e:bc:df:6d:6b:3e:83:
                    6e:e5:a3:3b:4e:1f:4e:ff:10:cf:8b:5b:a0:2a:88:
                    55:11:a9:83:87:d5:21:14:6a:91:30:7a:1d:cb:0f:
                    2b:cf:cb:39:57:8e:16:ae:99:c5:fa:73:1f:7e:56:
                    cc:4a:4b:36:5e:dd:9d:03:89:a5:65:c4:59:f4:86:
                    45:c7:4e:35:1e:6e:88:e0:ce:4b:71:2b:80:30:66:
                    4b:5e:f0:90:1f:c1:50:78:a1:eb:2d:dc:1f:0e:67:
                    7c:d8:b5:2a:e6:fe:5d:3c:46:fe:ee:2b:2e:ed:64:
                    aa:1d:56:c8:94:20:13:38:0a:60:ce:3f:66:33:5b:
                    14:87:f9:93:5f:41:7c:96:8f:19:5f:19:99:94:53:
                    db:3b:89:78:d3:5f:47:3a:07:b4:4c:b3:00:1d:f4:
                    d2:1c:6b:75:26:c7:2a:31:ca:69:b1:a4:be:47:00:
                    46:c8:0f:6b:d7:1c:a0:31:30:76:04:ef:04:21:df:
                    c0:8a:84:1c:59:45:57:af:7c:1f:09:75:ee:30:12:
                    02:46:6e:0b:73:7e:b3:e8:ea:6a:86:9f:4b:85:aa:
                    24:52:57:1a:4e:fa:b0:a2:59:46:5b:89:2b:ee:88:
                    65:a3:f0:75:5d:c7:07:a5:40:71:94:53:7e:37:55:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:00:51:3B:20:E0:02:62:80:6F:4F:2C:21:C5:47:A3:56:96:63:07
            X509v3 Authority Key Identifier:
                keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:92:d5:f6:2b:c7:27:18:91:97:6a:c9:9b:40:76:8b:de:d1:
         60:9d:75:b3:8c:09:fb:47:1e:cd:bc:2b:8a:8d:a8:4e:49:4d:
         d8:84:80:ef:34:77:6d:7a:5a:7c:5b:b3:2e:a5:91:ce:ae:e9:
         27:17:5d:a5:8e:be:4a:60:11:69:19:c4:a7:83:ce:39:34:64:
         09:0c:2f:16:3b:28:61:5e:ea:29:8d:8a:4b:5b:60:dc:30:d8:
         f4:59:26:e6:80:fe:c4:01:72:4f:a4:1f:d1:04:99:09:27:8d:
         fa:7f:5b:1c:01:96:85:88:88:33:e1:73:48:31:c7:ef:cf:f9:
         12:cd:0d:d8:4e:e3:87:24:b9:03:a3:8f:20:07:6d:83:f2:01:
         47:ae:f5:2b:5d:fb:ef:67:ec:14:e3:d7:80:b2:cd:36:51:21:
         25:90:9c:4e:f1:ed:77:3c:71:79:c7:72:85:1a:cb:0f:f1:4b:
         eb:5b:8d:da:ac:e8:5a:0d:ae:06:63:8e:39:6e:1b:da:11:16:
         ac:0b:74:d2:17:77:27:01:b0:74:71:f6:4a:2b:7d:1d:59:18:
         1d:24:bc:54:d7:05:03:e0:21:1a:80:93:8f:9a:7f:69:01:1a:
         3a:52:9d:f7:ab:a4:fd:8f:c7:85:78:0d:45:03:b2:e8:b7:36:
         81:9a:8f:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG
NUQzMEYxRjIwHhcNMjUwNDI3MDAzNzI5WhcNMjUwNTA0MDAzNzI5WjAYMRYwFAYD
VQQDEw02ODBkN2M0OS1hNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA34b4l0CbnI68321rPoNu5aM7Th9O/xDPi1ugKohVEamDh9UhFGqRMHodyw8r
z8s5V44WrpnF+nMfflbMSks2Xt2dA4mlZcRZ9IZFx041Hm6I4M5LcSuAMGZLXvCQ
H8FQeKHrLdwfDmd82LUq5v5dPEb+7isu7WSqHVbIlCATOApgzj9mM1sUh/mTX0F8
lo8ZXxmZlFPbO4l4019HOge0TLMAHfTSHGt1JscqMcppsaS+RwBGyA9r1xygMTB2
BO8EId/AioQcWUVXr3wfCXXuMBICRm4Lc36z6Opqhp9LhaokUlcaTvqwollGW4kr
7ohlo/B1XccHpUBxlFN+N1V34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4AUTsg
4AJigG9PLCHFR6NWlmMHMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF
NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG
WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfktX2K8cnGJGXasmbQHaL3tFgnXWzjAn7Rx7NvCuKjahOSU3YhIDv
NHdtelp8W7MupZHOruknF12ljr5KYBFpGcSng845NGQJDC8WOyhhXuopjYpLW2Dc
MNj0WSbmgP7EAXJPpB/RBJkJJ436f1scAZaFiIgz4XNIMcfvz/kSzQ3YTuOHJLkD
o48gB22D8gFHrvUrXfvvZ+wU49eAss02USElkJxO8e13PHF5x3KFGssP8UvrW43a
rOhaDa4GY445bhvaERasC3TSF3cnAbB0cfZKK30dWRgdJLxU1wUD4CEagJOPmn9p
ARo6Up33q6T9j8eFeA1FA7LotzaBmo8T
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net