Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File:                     T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier:          5fSyDwVHqpyhPKRsYMXvKCoGDhbWTOyzvIuF2Y5R+Qk=
Subject key identifier:   44:E7:E6:EC:C1:FE:51:AD:AC:F6:19:48:19:C2:69:54:3A:26:53:2D
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer:       /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number:          019E
Signing time:             Sun 27 Apr 2025 02:24:26 +0000
Manifest this update:     Sun 27 Apr 2025 02:24:25 +0000
Manifest next update:     Sun 04 May 2025 02:24:25 +0000
Files and hashes:         1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: omOehGt9WolldAeF1Khujy/Uay4/ZH8hR5SvLkYV30c=)
                          2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=)
                          3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=)
                          4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
                          rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
        Validity
            Not Before: Apr 27 02:24:25 2025 GMT
            Not After : May  4 02:24:25 2025 GMT
        Subject: CN=680d9559-d64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e8:b5:3a:ab:e0:48:9a:b5:da:b4:d8:38:e6:
                    0f:1f:f2:a5:92:1c:89:46:f5:ad:cf:63:d0:33:7f:
                    01:ff:f5:e7:d9:45:ae:08:95:e4:04:8e:17:89:5b:
                    b3:6e:8a:f1:08:8a:97:2b:6b:5b:69:3d:36:49:8c:
                    02:b1:bb:57:d9:6f:16:49:4c:82:51:f2:31:d8:dd:
                    30:6d:5a:db:9d:16:ed:28:88:e8:a2:81:00:23:ad:
                    7c:53:28:40:9e:cc:8e:cd:ff:3f:bf:db:c8:f5:6c:
                    80:85:4e:61:54:59:08:00:1f:1d:83:25:dc:2b:0f:
                    5b:35:9d:58:aa:76:a1:54:ba:8f:6d:eb:15:6a:47:
                    36:8e:d7:0c:b4:b2:0b:91:6a:f6:a7:52:5a:77:84:
                    ef:f6:31:54:0a:21:c7:36:d0:81:7a:ae:8f:51:ad:
                    08:f8:53:ef:51:4f:ed:ce:1b:89:fe:a1:cc:ce:d1:
                    66:7b:ff:b0:a9:86:03:c2:b7:81:05:59:03:e2:fa:
                    7e:37:93:d4:25:00:2e:15:c9:7d:86:47:e4:88:b1:
                    17:34:8d:25:a7:da:c5:6e:48:d9:17:7a:d2:7d:f3:
                    36:46:12:cb:47:2a:42:99:b7:bb:0b:73:0d:31:61:
                    40:29:65:60:94:0a:08:02:99:fd:65:b1:6f:cc:ab:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:E6:EC:C1:FE:51:AD:AC:F6:19:48:19:C2:69:54:3A:26:53:2D
            X509v3 Authority Key Identifier:
                keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:3d:0d:8e:2c:62:3f:37:39:60:c3:d5:ff:cb:38:03:82:
         7e:cb:59:ed:25:94:bd:e9:c1:28:4a:ab:7f:01:83:2d:0f:6f:
         cc:29:97:5f:b0:14:61:d9:08:a9:26:63:ac:f0:60:d0:f2:cb:
         51:f2:8d:fa:95:30:18:99:5d:ae:d5:94:6f:ea:86:0d:ce:f2:
         45:55:9c:58:d5:09:0d:25:14:e4:3b:fc:12:f3:53:2a:53:1e:
         92:f5:52:83:ed:5a:a6:77:e2:d8:09:9b:20:d9:fb:4f:a3:b5:
         7d:a9:11:bb:b8:69:14:0b:a6:2f:54:c9:92:2b:35:0f:a1:27:
         b2:8b:12:4f:6f:0a:bc:99:e3:11:41:00:ae:18:28:de:ee:00:
         66:f6:4e:bb:68:ab:f8:73:77:a4:ad:01:3b:e2:49:68:2b:6b:
         a4:7c:5e:6e:e0:9a:31:d4:73:34:43:45:85:4f:e2:ea:52:b5:
         4d:32:4c:b8:6e:a2:eb:e8:1a:bb:b3:0b:18:c0:f5:ee:c1:ae:
         b8:e5:28:2a:87:59:fa:13:97:09:e9:69:7d:c7:9c:bf:dd:58:
         37:12:e2:75:c6:3a:33:2a:66:ab:7c:17:0c:79:c1:c5:ce:1f:
         56:da:33:00:f2:a8:90:1f:98:aa:1e:e4:1a:66:64:cc:52:b2:
         ff:5d:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net