Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
File:                     FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft (raw, json)
Hash identifier:          1dwcPYE+JSlPYWpbhRd2l4EJSogXqpI6xT/9RsOOdRM=
Subject key identifier:   BE:96:68:0A:74:FC:81:7F:BA:42:64:75:1E:64:27:C9:95:5C:A7:60
Authority key identifier: 14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
Certificate issuer:       /CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
Manifest number:          018E
Signing time:             Sun 27 Apr 2025 02:31:13 +0000
Manifest this update:     Sun 27 Apr 2025 02:31:12 +0000
Manifest next update:     Sun 04 May 2025 02:31:12 +0000
Files and hashes:         1: FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl (hash: IRy/ebovIlhsvXa/Nsi1AXxcSl9CasTYbIe0fsvtnLg=)
                          2: AD633F28C2C611ED86556036C4F9AE02.roa (hash: MS7NWq0UAnEQeKvAZaw7UobWiB8w/tScY/6YvlxdzAc=)
                          3: ACA62AC8C2C611ED86556036C4F9AE02.roa (hash: 75H6iOtyKg/g21bWinoaWQqrg0ybarH3XmE2m+ZDXWE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl
                          rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB80, serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
        Validity
            Not Before: Apr 27 02:31:12 2025 GMT
            Not After : May  4 02:31:12 2025 GMT
        Subject: CN=680d96f0-5ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:48:6e:31:9e:a5:b0:21:62:c0:0e:75:0e:
                    76:d5:54:a1:20:6b:fe:c9:63:14:9e:ea:b6:68:1a:
                    2e:7b:0a:7c:18:00:db:b9:df:58:55:b7:41:4f:71:
                    23:5e:32:47:05:db:d1:b9:26:59:ae:21:52:d9:e1:
                    bf:14:b3:a7:eb:a1:1a:cd:95:8e:29:f7:f8:b5:c1:
                    f9:55:26:2b:ae:1b:f6:b6:5d:7d:1f:18:1b:69:e1:
                    56:1c:6c:7d:54:34:f8:75:25:fd:1f:e1:d8:91:c3:
                    70:30:1f:c6:9f:5b:03:8a:95:0d:c6:0f:4f:34:ee:
                    a8:61:29:9d:58:b2:5f:f1:f4:9e:52:a0:12:46:54:
                    fa:bb:09:84:4f:b2:4a:a6:1b:fd:c7:50:8b:9f:21:
                    04:8a:43:90:c3:4c:b5:c2:74:b8:f6:1c:2d:5d:d8:
                    31:17:99:19:d5:33:84:18:0e:56:5e:1b:09:b4:02:
                    32:61:26:57:a3:36:f8:38:dd:9f:be:c0:c6:a6:66:
                    bd:c7:ef:57:4f:a1:21:8c:24:f2:cb:4e:79:b1:79:
                    27:15:03:10:44:bd:37:51:50:1c:69:7c:58:9c:4e:
                    26:94:a3:c5:2a:c7:28:0b:41:a8:2e:01:c1:4a:4e:
                    1b:04:d0:eb:e6:02:fb:af:ea:13:a8:15:a6:0d:61:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:68:0A:74:FC:81:7F:BA:42:64:75:1E:64:27:C9:95:5C:A7:60
            X509v3 Authority Key Identifier:
                keyid:14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6e:d5:c9:47:4d:29:50:14:4c:d1:d0:1f:75:14:e0:c3:a2:
         c7:53:ca:9a:c3:17:d7:15:f5:a8:7f:1d:a0:03:8d:cf:e3:8f:
         05:c2:00:3c:d5:a9:79:8e:88:3b:46:a0:a6:40:8d:09:86:ea:
         0e:c6:46:b7:84:b2:ba:89:8b:bd:fd:2a:49:1b:0c:9c:4a:fc:
         1d:23:2c:25:c9:6d:eb:98:73:20:1c:68:70:0a:36:95:cb:2b:
         a6:02:24:db:7d:c1:6a:7d:8b:2c:41:01:39:7d:f3:c3:b5:cc:
         0f:9d:bf:9f:c4:be:f0:a4:68:9e:45:a0:d1:4e:7d:98:e8:c8:
         63:e1:ce:1f:26:36:45:c6:f6:d5:df:e6:96:5c:8e:ab:99:fb:
         56:17:60:de:e2:8d:69:dc:ee:ae:80:70:56:c8:6e:2f:3b:0d:
         24:a1:5b:bb:85:52:f5:da:01:92:dc:46:dd:a4:a6:d4:cd:fe:
         7d:99:c7:b2:69:0f:2b:4a:c4:fb:a5:88:81:d5:89:9a:b8:ab:
         ec:1d:49:75:23:7a:be:a6:ce:ef:10:0b:5c:fb:e1:71:e8:76:
         8d:db:dd:66:54:86:ff:5b:0a:3e:1d:fc:3d:9f:f6:01:0d:35:
         1d:5b:bd:77:b8:e3:77:a9:a6:0c:a1:54:ad:6b:72:d1:ca:8c:
         bb:4c:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net