Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
File:                     n9LoZrHrgid6tvVi_jLgg1mzAWU.mft (raw, json)
Hash identifier:          Tus/aZp+K+JuM2jUDXNjdjduep8wxn7lHwpnVWTus54=
Subject key identifier:   15:F0:BF:0E:5D:B9:F2:E9:F7:92:35:2B:0F:71:AF:A1:76:3B:F0:32
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
Manifest number:          0667
Signing time:             Thu 24 Apr 2025 22:17:07 +0000
Manifest this update:     Thu 24 Apr 2025 22:17:07 +0000
Manifest next update:     Thu 01 May 2025 22:17:07 +0000
Files and hashes:         1: n9LoZrHrgid6tvVi_jLgg1mzAWU.crl (hash: KT6N8LI72uTh8pqtlTvVOOW3TEhj26Gujmu1smDd+SQ=)
                          2: BF351C380A2111EEA26EAE0EC4F9AE02.roa (hash: oGuqbCREFm9ZWSmRoFzBXwWMbym/4RjEQVLDxXxyOlo=)
                          3: 6C42C95C0A0411EE9FEEAB44C4F9AE02.roa (hash: 2EoXxsF3YeIcHrteSRJc8SmsPXHgCaJXfP147EXJ8V8=)
                          4: 6D39AFB00A0411EE9FEEAB44C4F9AE02.roa (hash: mK4z59iph2yMURpRXdd3+cDRQXC8EuVVACLhc5J4EWo=)
                          5: 3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa (hash: sivEYBO7PXdxBzs49Sa2/GKGpQYDM3gFjYXpi1+OrJA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E, serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: Apr 24 22:17:07 2025 GMT
            Not After : May  1 22:17:07 2025 GMT
        Subject: CN=680ab863-08a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:55:e5:a8:1b:8f:42:97:fc:8c:65:cf:96:
                    0a:25:07:81:51:ae:88:a1:32:f4:9b:fd:45:c8:e4:
                    0f:0f:97:b3:0a:5a:3d:e1:88:d6:fa:1b:c9:83:8e:
                    9d:04:f9:39:06:e7:6d:07:b3:7a:7c:92:7f:83:d4:
                    33:88:b3:e2:ed:2e:03:e8:39:01:cc:4b:6f:26:2c:
                    e0:36:d5:62:f2:a6:7e:ff:a7:39:00:bf:db:2c:03:
                    4b:e1:af:0c:11:b7:8e:e3:3f:60:68:35:64:9c:66:
                    0c:12:55:7f:15:c6:41:d6:d7:33:7a:98:82:e6:54:
                    24:14:ee:b2:24:0b:56:c8:22:d2:f7:65:96:c0:91:
                    f2:5e:ac:b1:6a:bf:73:37:a4:8b:be:c9:e8:d1:ff:
                    1f:69:02:d3:5d:98:f9:d0:82:ed:e7:ca:17:82:c5:
                    cb:e9:51:7b:c9:c6:a3:cb:14:04:5b:76:06:26:e5:
                    9a:3b:cd:8b:7e:82:9a:b5:48:99:f7:88:84:ca:19:
                    3c:9e:35:94:39:e4:c0:ee:90:20:28:0f:fe:f2:8a:
                    80:41:89:bc:b4:ac:2c:8f:c2:26:92:94:81:e3:36:
                    af:ee:15:ac:0e:54:bd:9a:62:c4:98:44:50:52:54:
                    ee:47:6f:e4:88:1e:1a:9e:f9:19:dc:ff:c6:33:3f:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F0:BF:0E:5D:B9:F2:E9:F7:92:35:2B:0F:71:AF:A1:76:3B:F0:32
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:60:e6:bf:0f:df:37:b5:4c:e9:47:b7:ce:62:09:26:7c:
         47:97:6e:f1:64:37:37:8b:fc:9c:04:27:bd:8b:ed:8f:8c:e3:
         3a:d4:b1:86:b1:f9:cf:63:95:50:d3:75:b6:f8:4f:a6:1a:d6:
         2a:db:49:84:47:12:d4:37:c5:ee:f9:4e:f7:c5:23:b6:f5:e5:
         80:e9:67:55:e7:3b:4a:45:41:a1:be:71:0d:24:88:cd:27:bf:
         00:65:1b:23:61:f8:a0:66:dd:24:55:b9:f2:18:c8:f1:ee:63:
         73:ed:32:24:c1:62:5b:b6:63:68:48:36:50:77:a2:a3:03:e2:
         74:f3:c0:1a:35:42:33:a5:8b:41:15:18:b8:95:c9:7b:08:9f:
         d5:fc:6c:8c:b1:6d:9a:98:64:53:9d:16:5d:32:6f:40:66:27:
         78:cc:57:35:2f:00:5f:cb:37:a0:06:56:96:54:a9:bc:49:62:
         41:72:be:25:f2:7d:6d:84:57:db:08:19:5f:e8:a8:84:5f:e7:
         02:68:94:65:39:36:1d:3d:24:c1:e3:43:75:26:0e:a2:b9:3c:
         df:73:ae:b3:36:e2:76:e9:ca:29:4a:06:44:82:1a:5f:2c:c2:
         66:35:c6:95:23:95:ce:8a:a5:64:61:e3:e4:56:cf:a9:ef:01:
         34:30:dc:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdDMEUxMTAvBgNVBAUTKDlGRDJFODY2QjFFQjgyMjc3QUI2RjU2MkZFMzJFMDgz
NTlCMzAxNjUwHhcNMjUwNDI0MjIxNzA3WhcNMjUwNTAxMjIxNzA3WjAYMRYwFAYD
VQQDEw02ODBhYjg2My0wOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2vFV5agbj0KX/Ixlz5YKJQeBUa6IoTL0m/1FyOQPD5ezClo94YjW+hvJg46d
BPk5BudtB7N6fJJ/g9QziLPi7S4D6DkBzEtvJizgNtVi8qZ+/6c5AL/bLANL4a8M
EbeO4z9gaDVknGYMElV/FcZB1tczepiC5lQkFO6yJAtWyCLS92WWwJHyXqyxar9z
N6SLvsno0f8faQLTXZj50ILt58oXgsXL6VF7ycajyxQEW3YGJuWaO82LfoKatUiZ
94iEyhk8njWUOeTA7pAgKA/+8oqAQYm8tKwsj8ImkpSB4zav7hWsDlS9mmLEmERQ
UlTuR2/kiB4anvkZ3P/GMz+eMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXwvw5d
ufLp95I1Kw9xr6F2O/AyMB8GA1UdIwQYMBaAFJ/S6Gax64Inerb1Yv4y4INZswFl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0MwRS9FRTU5RTdGNDgw
RjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdpZDZ0dlZpX2pMZ2cxbXpB
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL245TG9ackhyZ2lkNnR2VmlfakxnZzFtekFXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0MwRS9FRTU5RTdGNDgwRjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdp
ZDZ0dlZpX2pMZ2cxbXpBV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAW2GDmvw/fN7VM6Ue3zmIJJnxHl27xZDc3i/ycBCe9i+2PjOM61LGG
sfnPY5VQ03W2+E+mGtYq20mERxLUN8Xu+U73xSO29eWA6WdV5ztKRUGhvnENJIjN
J78AZRsjYfigZt0kVbnyGMjx7mNz7TIkwWJbtmNoSDZQd6KjA+J088AaNUIzpYtB
FRi4lcl7CJ/V/GyMsW2amGRTnRZdMm9AZid4zFc1LwBfyzegBlaWVKm8SWJBcr4l
8n1thFfbCBlf6KiEX+cCaJRlOTYdPSTB40N1Jg6iuTzfc66zNuJ26copSgZEghpf
LMJmNcaVI5XOiqVkYePkVs+p7wE0MNyb
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:00 2025 by rpki-client on console.sobornost.net