Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          6J6bA8codF5WI0s5QKJ2JWO2bPXOlOBR4PC15MaPUlg=
Subject key identifier:   12:97:D4:13:3A:16:7D:B0:18:D9:F3:D3:F8:3E:2D:D5:78:7A:CE:29
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1B84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1B6D
Signing time:             Sat 26 Apr 2025 16:14:43 +0000
Manifest this update:     Sat 26 Apr 2025 16:14:43 +0000
Manifest next update:     Sat 03 May 2025 16:14:43 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: d9sDXW2UJLm8NBi5y6HEqaHoIAJmcb5KeNUZMgPk0+U=)
                          2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=)
                          3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7044 (0x1b84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Apr 26 16:14:43 2025 GMT
            Not After : May  3 16:14:43 2025 GMT
        Subject: CN=680d0673-4da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:95:b6:4f:0a:fd:34:11:44:ae:af:82:b9:
                    17:2e:6e:19:83:63:c1:3f:6d:9c:a0:23:95:a6:2b:
                    b5:8a:31:ba:d2:56:52:25:d2:e0:a6:7a:49:81:13:
                    b4:0f:b9:e3:d1:48:34:2a:44:66:bb:7a:24:22:5f:
                    b5:0c:da:cd:19:ab:41:fd:b2:16:03:81:79:e3:d0:
                    ff:d9:76:8c:b0:bd:a6:c4:37:6c:aa:89:48:3c:af:
                    d2:45:9d:22:b3:9d:de:17:66:ed:4a:51:98:f4:cf:
                    aa:09:5c:eb:2f:21:e4:78:43:9f:0b:ae:80:3d:e1:
                    3e:61:bc:3d:4e:60:46:6a:4d:06:b4:e7:ea:c5:4f:
                    eb:dd:80:9d:64:50:70:8f:75:80:17:91:33:30:fc:
                    59:7d:91:bd:5e:15:3b:c6:26:de:ab:10:2d:e2:2b:
                    a3:1b:a6:31:02:a8:b1:99:27:66:a0:02:51:28:4f:
                    b0:c8:18:b5:45:3a:29:e4:6d:b5:fb:17:11:8d:fc:
                    19:20:58:7e:cd:4a:9c:82:dc:73:0f:b7:80:47:88:
                    16:89:e3:b8:8a:8c:f6:d3:02:cd:1d:de:05:52:fa:
                    e9:0a:f2:59:48:a1:30:10:a4:98:63:b3:44:ac:18:
                    ff:bb:ff:cc:33:1f:18:05:1e:ed:e0:c4:30:7c:e0:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:97:D4:13:3A:16:7D:B0:18:D9:F3:D3:F8:3E:2D:D5:78:7A:CE:29
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:4e:25:4f:91:d0:2d:df:dc:f6:7d:9c:18:b6:b0:49:bd:
         3e:a7:90:b1:2d:17:17:1c:c1:b7:f9:6c:51:d3:9e:dd:6f:9c:
         80:22:d2:2b:2f:09:e9:0b:70:90:40:25:af:56:aa:44:41:54:
         28:4e:67:19:97:3a:76:13:3b:6e:06:10:c4:d5:07:33:d2:cc:
         d0:c9:6d:6f:69:ab:37:34:5b:82:c3:01:b9:8f:e4:43:bb:e3:
         a2:19:99:80:48:0f:4f:7c:65:30:7c:f1:2d:d1:6a:0c:1f:c3:
         9e:00:e0:d7:e3:d2:f4:d4:3d:72:fb:08:cd:98:7a:8a:80:df:
         32:32:1f:2d:31:0f:85:70:82:85:4c:5e:92:e5:32:5b:9c:4d:
         41:52:30:c4:27:a8:87:60:3f:d6:5f:95:82:43:6c:dc:9f:fc:
         84:d6:20:72:82:2c:c7:2e:dd:0d:d4:b0:86:c8:ed:ba:1c:bd:
         32:83:25:28:cb:26:1a:4e:32:e9:e1:39:9d:e6:ac:62:06:31:
         95:1a:35:ef:5a:b2:e7:05:0d:5d:18:18:11:22:f9:87:c5:aa:
         8d:b9:cd:07:a8:85:9c:fc:0d:a2:dc:7b:64:70:73:b0:1f:aa:
         e4:c8:9f:4b:8f:72:da:9e:fd:37:f0:b0:76:ae:cc:b0:b5:d9:
         12:96:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:31 2025 by rpki-client on console.sobornost.net