Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File:                     2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier:          rJhC6dUQt+Io1mmyn1SYHrbuLlZY7MeoyNH1V1RYlnc=
Subject key identifier:   CE:F8:99:C4:C9:63:2A:2D:CA:D2:C3:38:51:5D:AD:C9:5D:76:FB:E2
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer:       /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number:          C0
Signing time:             Sun 27 Apr 2025 04:44:53 +0000
Manifest this update:     Sun 27 Apr 2025 04:44:52 +0000
Manifest next update:     Sun 04 May 2025 04:44:52 +0000
Files and hashes:         1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: /kOIdJFdcOo5DDyvrbu/vWiZolnS0hIFeuHamfTRTfU=)
                          2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: F6IB2oLxhpfXXQwj/Kl3IJNncyOBKEOTP7G3C5XwQrk=)
                          3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: yyKQJp3Cor943Y25Ya+6ME8Xl4xDZuaYL1jQZ9UiIZI=)
                          4: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: kGlkPBXGhK2HbK8wICTx12rG9bb9NpN/Iy7FI3DGEGY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
        Validity
            Not Before: Apr 27 04:44:52 2025 GMT
            Not After : May  4 04:44:52 2025 GMT
        Subject: CN=680db644-ef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:07:2a:f3:6f:ce:36:5a:d8:68:04:d4:8d:
                    84:55:88:c9:b4:19:21:fe:e1:5b:59:8a:15:8d:49:
                    25:86:b0:98:65:ac:71:0c:6f:36:2d:86:11:b9:3a:
                    db:8c:41:7b:77:c4:25:ba:3b:7b:96:01:0f:8b:f8:
                    7f:25:d8:20:fc:0b:3b:4c:a9:17:88:8f:46:0f:e2:
                    1e:df:70:55:3d:7b:98:33:c7:78:1a:a8:f2:80:50:
                    50:36:1c:87:65:c7:0e:e7:8a:68:f7:63:ea:5d:2a:
                    1c:bf:09:36:87:e4:a5:a4:5b:c6:4b:f5:86:2d:61:
                    07:05:15:38:37:1c:f5:8c:e3:7a:9a:22:ef:c9:35:
                    d8:aa:1c:0b:95:86:cf:a2:12:5f:0c:4a:f2:a5:2e:
                    57:7c:ff:86:4f:0b:53:3a:74:8a:a2:f0:34:0e:e7:
                    a0:79:36:1c:66:92:50:8d:de:0a:c7:b8:1a:c2:23:
                    20:2b:27:2c:23:77:22:be:1c:a4:7a:fc:01:ed:a8:
                    0e:61:cf:50:23:e3:f3:be:28:80:65:0f:a8:59:92:
                    b3:9a:db:af:f2:04:f7:47:70:20:79:1b:c6:01:03:
                    44:fa:aa:e2:98:57:f6:ec:0a:13:87:30:3e:c4:19:
                    5b:78:c1:a4:25:85:f3:97:49:cc:c0:f0:67:cc:59:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F8:99:C4:C9:63:2A:2D:CA:D2:C3:38:51:5D:AD:C9:5D:76:FB:E2
            X509v3 Authority Key Identifier:
                keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:29:e6:eb:36:1c:62:da:4f:fd:24:99:87:f6:34:9a:80:2a:
         7b:ab:27:41:d6:c1:b9:07:77:c4:d7:6d:57:dc:d8:df:71:33:
         ce:e3:32:d6:76:11:47:fd:11:3d:a0:a9:ed:9f:0f:41:b4:e3:
         64:ec:09:c2:7c:b7:f4:b3:b5:c0:05:04:e0:58:1e:f5:11:b0:
         4f:62:62:0f:da:b9:e1:49:3b:4d:4e:96:16:d4:4d:79:6c:a0:
         56:a2:10:c8:90:ca:19:51:f6:70:9e:60:38:23:a6:00:51:01:
         37:8b:b2:7b:5c:a3:79:a8:80:dc:7b:e9:91:33:b6:12:73:8e:
         0d:84:2c:18:bd:a7:4e:60:b6:1c:fb:19:1d:ed:90:a1:96:36:
         7a:e3:42:24:4b:6b:3e:0c:cb:12:76:57:41:4a:6d:43:54:cc:
         ce:ce:63:58:84:5b:1d:fb:36:49:29:fe:9e:56:88:c7:77:85:
         7c:8b:3f:93:57:3a:cb:7e:d0:7a:11:9b:c8:da:a3:e0:c2:3a:
         b7:8b:03:83:b1:be:2f:f9:be:05:f9:d9:ef:d8:65:01:60:55:
         b5:58:b3:06:98:e5:92:62:34:e8:ed:ee:10:5e:8e:df:55:21:
         37:e7:76:85:2a:a1:c4:45:0b:1f:a5:c0:f6:bd:39:08:17:63:
         d9:85:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net