Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File:                     N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier:          TmiDgzR9wmtv3iukhf6qlpGy9lgaJu9o1mTSU/HW+IQ=
Subject key identifier:   63:42:45:25:FE:BD:EF:DF:D0:9C:EF:F9:CD:FD:AA:48:1D:64:75:F7
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0E06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number:          0DCC
Signing time:             Mon 28 Apr 2025 18:09:06 +0000
Manifest this update:     Mon 28 Apr 2025 18:09:05 +0000
Manifest next update:     Mon 05 May 2025 18:09:05 +0000
Files and hashes:         1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: U8rlTyS/zRbvzU4EalZ38uVa7ji1kri+fSorT74t3Ok=)
                          2: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: XXEtd4acA5WN5nQ55u0c/6B2fLJ5iEmhPHp1iyDBTHg=)
                          3: 0EB7AAC0F32211EEA6B7BD5CC4F9AE02.roa (hash: F3ruMwZ8Zkd7JvEXX/ban+THiOr2874j2Qf3JBG20Oc=)
                          4: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: c5cKsH/wywjFJuntQ2zEXHvdACLKbLED/IyUky+0prg=)
                          5: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: hz9U6Vrjf2uu8O9hhyxsvGgsibbnQkjfxQGCzPSoo1E=)
                          6: 2D6E9D74F5DA11EEA64D3F7DC4F9AE02.roa (hash: fPCtXIFdgFLuZAHIhoHiaIFtzRJQc1tSW5oOJQOgGHI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3590 (0xe06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Apr 28 18:09:05 2025 GMT
            Not After : May  5 18:09:05 2025 GMT
        Subject: CN=680fc441-0314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:69:4f:77:3e:b9:4e:85:b3:f1:04:00:c2:
                    13:eb:13:c7:a0:e1:22:93:4b:23:6e:6f:0e:a4:0a:
                    b1:79:62:41:35:ce:9c:b1:03:1c:03:cf:6c:c7:03:
                    b6:21:06:c1:04:54:2c:d9:de:b1:d0:6f:9d:3d:51:
                    77:63:83:10:a6:bf:08:3e:14:54:b3:de:c6:e4:1e:
                    97:88:8f:00:4a:62:63:3a:f0:28:ef:82:1e:ce:72:
                    de:0f:4e:25:2d:12:be:f6:c6:1e:b1:c7:77:44:e3:
                    41:08:bc:8f:08:db:2a:02:d4:63:41:ea:cd:5a:d3:
                    b3:f9:ea:18:8b:26:81:3f:cd:41:99:49:fc:e2:a7:
                    1a:04:18:d1:1e:03:64:35:50:d8:f1:83:4b:dc:fd:
                    a2:ca:f1:01:c3:fd:c2:31:6a:06:68:8a:63:54:14:
                    ee:83:f0:f6:03:73:bf:e2:df:5f:f4:49:aa:bb:86:
                    d9:71:c8:86:29:ec:ab:d5:8e:5d:bb:58:53:72:e0:
                    44:50:a4:35:6d:0b:dc:18:52:78:3b:3c:46:f2:96:
                    45:36:b5:24:82:9e:8c:fd:95:af:4e:96:a7:63:f7:
                    7b:c9:a8:99:e1:bd:8d:f6:79:55:2b:1b:1d:7e:ee:
                    e5:ef:4c:31:08:ca:52:67:a0:c8:2a:84:5e:97:93:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:42:45:25:FE:BD:EF:DF:D0:9C:EF:F9:CD:FD:AA:48:1D:64:75:F7
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bd:ef:1f:df:3e:18:f8:a8:ae:c6:73:b1:b2:0f:7b:5e:1f:
         40:1a:ba:d2:a2:af:20:b4:b2:30:d7:61:88:72:2e:2a:01:45:
         eb:76:7e:31:e4:37:39:b7:f9:f7:7b:05:be:cb:f6:36:95:cc:
         9f:80:21:5b:96:d4:fe:6e:94:bc:4b:d5:c2:55:25:d7:c4:a8:
         c2:38:fb:7c:1d:0e:73:64:4c:3a:52:fd:77:99:ef:76:2e:da:
         6b:c0:d9:af:9f:36:28:72:7c:40:08:79:95:c3:e0:3b:7e:da:
         0b:f6:9d:eb:a6:53:0b:67:95:36:3d:67:33:e2:46:7a:10:bc:
         6a:a0:ba:93:73:4b:d7:52:24:77:c7:22:23:b7:8b:dc:6c:d8:
         94:34:fc:f9:5a:90:5a:85:31:eb:70:97:8b:42:c8:55:ac:ef:
         88:3b:92:b1:4c:60:49:ff:fc:ae:e4:6c:ba:41:aa:a8:a1:2e:
         fc:7e:77:48:80:1a:b8:ab:d3:d5:f5:5a:cd:e7:16:ea:e3:31:
         7e:5e:7a:a1:56:8a:56:64:f2:d1:25:0a:7c:b6:c5:b1:50:90:
         4a:8e:29:9e:2b:e0:be:3a:38:74:54:01:17:9a:7e:0f:af:35:
         25:93:49:56:d3:27:49:d0:e1:6e:eb:38:39:ef:6a:39:29:ab:
         dc:f3:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:56 2025 by rpki-client on console.sobornost.net