Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
File:                     5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft (raw, json)
Hash identifier:          Sw67oh5K117n203ytlnsOBh5qa+PAxGttJ3qiCGAv7s=
Subject key identifier:   16:1B:D0:87:E7:E4:9A:9B:56:E1:52:78:70:19:AF:4A:3C:04:70:D8
Authority key identifier: E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
Certificate issuer:       /CN=A91B9B0D/serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Certificate serial:       0642
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
Manifest number:          063D
Signing time:             Sat 26 Apr 2025 22:16:08 +0000
Manifest this update:     Sat 26 Apr 2025 22:16:08 +0000
Manifest next update:     Sat 03 May 2025 22:16:08 +0000
Files and hashes:         1: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl (hash: qQ7WuFDL5SOqbAxOjO3ZrDVrgZU0bRvc0fufVNgvZvU=)
                          2: 3F9CDA68179911EDB9008D18C4F9AE02.roa (hash: uQ87OwRIbPff2rIgxwDqjjJe9H/t71HNB3Wpu5Q8ifI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl
                          rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9B0D, serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
        Validity
            Not Before: Apr 26 22:16:08 2025 GMT
            Not After : May  3 22:16:08 2025 GMT
        Subject: CN=680d5b28-49a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:b6:e0:e3:f0:26:3b:d6:e3:d5:55:ca:4c:
                    e1:c2:17:19:fb:8a:25:6e:ec:93:18:8c:73:84:72:
                    fb:cc:ec:5e:56:06:0e:c0:3d:4c:52:a5:c3:95:fc:
                    de:71:cb:a1:e2:39:dc:f4:2a:da:1f:7a:c9:cc:ba:
                    ee:14:c0:73:f2:d2:93:4e:08:ee:37:7f:52:4d:1f:
                    a3:5f:b4:59:d6:0a:bb:40:e5:db:2b:32:6d:f1:f9:
                    d7:c6:e9:65:d8:db:f1:94:2f:38:39:2a:93:0c:4d:
                    88:9b:8e:49:dd:31:44:62:43:d9:bf:e3:a4:48:b9:
                    7d:05:da:96:42:21:1e:16:9b:d0:b8:c2:72:fc:9a:
                    83:80:fc:31:c0:bf:c3:03:1e:fb:f5:2f:3a:6d:92:
                    fc:22:a1:42:65:18:61:76:cb:91:33:3a:79:52:a7:
                    0f:dc:28:b5:4b:e2:04:67:08:cb:ea:0e:3d:bd:af:
                    e3:20:dc:29:f8:aa:52:97:ec:a3:12:14:40:16:51:
                    71:62:a2:f5:72:90:4e:d1:7d:71:a4:36:fe:af:8e:
                    78:03:ee:23:84:b9:6d:5e:1c:62:15:76:af:b1:7f:
                    f6:5c:12:5e:5e:66:81:e0:d1:fe:87:d3:92:ad:49:
                    ce:bd:d5:ea:2b:39:91:7a:9e:af:af:38:4c:9f:b5:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1B:D0:87:E7:E4:9A:9B:56:E1:52:78:70:19:AF:4A:3C:04:70:D8
            X509v3 Authority Key Identifier:
                keyid:E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:01:71:62:d9:64:c0:29:04:7c:e9:5c:49:3f:23:a6:ba:9b:
         df:13:2f:8b:6f:e1:0b:ad:61:be:9b:e9:ba:11:82:2e:3a:0d:
         8d:51:65:c5:f5:72:ee:6d:59:1c:6c:37:55:6a:63:3c:a0:41:
         9c:82:01:15:f5:1c:94:84:0f:9a:dc:09:3c:55:d1:55:0f:dd:
         38:10:8d:61:53:72:dc:fe:09:fb:15:c2:a1:7b:97:85:2b:d0:
         d6:ec:90:58:a0:37:4a:d9:97:d2:99:0e:5b:10:50:92:82:7b:
         a2:aa:ff:97:cf:31:85:fe:49:e3:0f:06:e2:7e:41:56:d2:c5:
         40:94:37:42:cf:38:7c:f8:c7:ce:e1:6e:a0:1c:82:1f:94:c4:
         e6:bf:fb:dd:76:49:9a:b6:0c:01:22:fd:17:d2:f1:3b:a3:df:
         a6:23:fd:a3:da:c7:3a:99:97:93:1b:7e:7b:31:0f:46:76:c1:
         45:92:14:cf:6f:08:73:94:1b:7d:8c:52:f3:28:87:ef:9e:86:
         5b:b0:21:76:56:f2:22:47:7a:e3:eb:68:ad:7d:a2:22:8b:5d:
         b8:70:68:f8:6c:62:f5:65:91:68:f2:91:9e:5f:04:92:e8:61:
         c2:58:bb:63:52:7b:90:02:73:96:21:39:a1:47:1b:b4:f6:f7:
         e4:18:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net