Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
File:                     72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json)
Hash identifier:          u8xF7202/OITfz6woi9Kie3V6OMsfQp+MIgNydCIfKw=
Subject key identifier:   E5:6F:27:BB:66:7E:26:94:05:E9:AD:13:96:2D:0F:14:84:D3:05:BD
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Certificate issuer:       /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial:       04A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
Manifest number:          049E
Signing time:             Sat 26 Apr 2025 23:38:02 +0000
Manifest this update:     Sat 26 Apr 2025 23:38:02 +0000
Manifest next update:     Sat 03 May 2025 23:38:02 +0000
Files and hashes:         1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: Lzf4DHh4RL3j9LBwsTf6MIceEDCP6H7pbq8u3g98NWE=)
                          2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: 99qqJ/9zYRnGxyVxwuHlA7p9+YSeHXLL4eIfJ57Oqyk=)
                          3: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: itQJmN/dVP+mV48MgGkgS4f24QJYRTaFn3QelUYBhJw=)
                          4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: gELAt9yiLPHGU77JxUo41MHMLLX1cjc6sNjKaC37Byk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
        Validity
            Not Before: Apr 26 23:38:02 2025 GMT
            Not After : May  3 23:38:02 2025 GMT
        Subject: CN=680d6e5a-2879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:77:5e:7e:93:d4:9d:83:f4:fd:f5:a4:ce:
                    45:6a:4a:9f:e3:67:da:1c:fc:2b:08:9e:6e:92:08:
                    d5:69:8f:de:7c:43:5a:c8:3a:e5:51:ce:2b:73:cd:
                    1a:ec:62:ef:a0:5a:84:f6:3d:0d:df:ea:ba:6c:2a:
                    22:32:0e:15:69:a1:25:35:34:6f:56:df:bf:89:82:
                    ff:0c:bc:ab:fb:5c:45:27:82:1f:9e:e9:33:9e:a3:
                    d8:fb:a3:a6:87:3f:d3:2a:9f:33:6f:a0:6b:3a:7a:
                    12:11:71:42:22:ce:39:2f:68:38:23:ab:d5:15:2f:
                    80:7c:56:ad:14:37:bf:94:ba:99:7b:03:1f:19:2f:
                    b6:75:8d:a7:26:21:c8:90:b1:c9:55:c0:fa:9a:2e:
                    8e:aa:db:46:ce:ad:f1:38:e7:9c:21:70:2e:39:32:
                    9a:75:92:e5:25:64:3f:f7:50:8e:05:0f:d5:27:66:
                    d0:5e:31:44:c0:cb:fe:92:d2:47:35:df:0f:d2:8f:
                    42:d6:1e:e9:9b:67:bf:db:37:ac:cc:f4:ab:b4:a8:
                    ce:e3:2f:96:79:5c:f5:d7:c3:42:b0:97:c2:ac:96:
                    22:d4:2c:7a:a8:d9:de:9c:ad:7e:e7:32:fc:a9:88:
                    20:65:a8:5d:32:83:11:e1:c1:2b:19:f3:a7:02:62:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:27:BB:66:7E:26:94:05:E9:AD:13:96:2D:0F:14:84:D3:05:BD
            X509v3 Authority Key Identifier:
                keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:96:dc:80:24:0b:2c:50:f6:4c:4c:a6:99:ca:9c:7f:01:00:
         6a:ac:a2:b8:67:31:df:79:75:b3:b6:9d:43:af:88:a4:14:1e:
         b6:93:b1:a7:93:ed:4b:b1:2d:36:da:98:db:68:00:94:f0:62:
         d1:eb:f7:60:3e:03:9d:5f:d1:ab:7f:00:d6:35:bb:d4:77:7a:
         68:f2:65:24:11:95:42:06:46:e3:d7:74:e3:44:b3:ed:38:4e:
         1a:11:15:12:8a:f4:6a:e5:36:49:c2:1e:9b:09:28:93:39:f7:
         21:32:e9:19:a0:01:f3:3c:a9:48:1a:5f:9d:b5:29:9b:fa:de:
         43:b7:00:9b:46:71:97:b0:7f:06:38:6c:fd:30:44:aa:4f:20:
         25:9a:00:55:48:ff:57:cd:5c:4d:af:83:a6:27:26:0d:45:d9:
         40:c7:6a:64:dc:27:63:a9:cb:e8:5d:cf:4d:02:e8:4d:0e:f4:
         1d:5e:86:a8:b6:71:55:07:1e:4d:12:ba:2f:e6:77:a6:5c:80:
         e1:db:af:23:a3:09:a3:eb:4c:0c:95:ce:07:af:64:43:7b:0f:
         c9:35:06:ad:eb:aa:70:99:64:a8:0f:46:9f:44:3f:7f:b7:44:
         ad:a2:23:e3:7d:42:fd:0b:bc:4c:d5:ed:b4:a4:a6:fe:97:f3:
         e5:f0:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net