Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
File:                     gopH06xuawNgEcIzIxcKlzG60iQ.mft (raw, json)
Hash identifier:          m0Z8VReknk6UJNLHFxqXQjICGEDlDZiK4v/Q0/3pjP4=
Subject key identifier:   7F:B4:55:CE:89:29:36:C5:0A:B8:25:B9:C5:13:34:DD:E5:6F:4A:FD
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
Manifest number:          7E
Signing time:             Sun 27 Apr 2025 05:49:05 +0000
Manifest this update:     Sun 27 Apr 2025 05:49:05 +0000
Manifest next update:     Sun 04 May 2025 05:49:05 +0000
Files and hashes:         1: gopH06xuawNgEcIzIxcKlzG60iQ.crl (hash: vwgwsFoz0VeMT0AcoA8mjkvbOc8gsKJI3X6+9lZUb8k=)
                          2: 18A198D6087811F0B8AC634AC4F9AE02.roa (hash: oqinOi8moaoFqyCfzBAbwlb1e686lLvKeGMVa6JkZPQ=)
                          3: D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (hash: 919/QrkbKK7KbwR685ZBie0PZUotLL4IkEQTf5I8BR0=)
                          4: CA79E350BF6D11EF9730D429C4F9AE02.roa (hash: mcdJMOUjsrYKOdvCk8ygrPicEK3lHYQ2f0C8eBymCfE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Apr 27 05:49:05 2025 GMT
            Not After : May  4 05:49:05 2025 GMT
        Subject: CN=680dc551-ee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:7b:01:74:af:3d:90:04:fc:fd:39:c9:c8:
                    4b:d5:93:84:1e:68:41:bf:32:8d:64:77:ab:3d:6e:
                    7e:5a:73:98:86:2a:0e:ee:bd:76:4e:0a:76:0a:81:
                    0e:23:16:44:d7:91:f5:c6:18:57:65:d8:0f:6d:74:
                    d7:27:dc:2f:32:e5:75:3e:fb:d1:d7:67:98:f4:2b:
                    1a:2e:0e:4f:6e:29:f9:0d:24:d9:bf:6a:e3:1a:75:
                    c1:79:b4:08:c8:8b:fc:02:37:8c:00:07:0b:52:b8:
                    d9:bd:69:3a:11:6b:60:30:29:a4:9b:39:79:cc:a0:
                    2a:90:37:2c:ac:b5:91:1d:47:ce:d8:01:38:dd:80:
                    93:f2:14:c3:06:fb:87:36:d0:a7:c4:50:aa:f6:8b:
                    f7:40:76:7c:89:b7:d6:26:c0:c6:93:42:8a:27:8e:
                    14:dd:4c:e3:a6:94:61:26:8b:ab:4b:12:5d:d3:a4:
                    8a:d6:f8:a7:7e:28:c7:1c:af:5b:1c:b4:c3:26:81:
                    ae:62:df:a6:91:d1:d4:bc:cb:85:c1:43:ea:2b:55:
                    91:98:35:cf:35:96:c4:ec:e2:46:ce:82:68:60:79:
                    47:8b:2e:59:94:04:ec:29:cf:fd:3b:bd:1a:ea:4d:
                    1c:42:d0:b9:b7:65:9e:7b:bd:b4:a1:8d:f8:35:56:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:55:CE:89:29:36:C5:0A:B8:25:B9:C5:13:34:DD:E5:6F:4A:FD
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b1:b2:19:78:4e:0d:9b:e5:d8:af:88:04:43:57:b7:0a:27:
         b5:d7:8e:85:b2:ad:39:7b:b3:89:64:d2:fc:80:1c:76:8c:7a:
         3d:a1:54:7c:ff:6e:93:38:2e:7a:9c:76:a6:88:b9:f4:79:28:
         77:36:8a:3c:0a:95:41:84:8b:b9:cd:d0:19:2a:a4:d4:87:45:
         cf:0d:e8:12:49:1c:22:91:20:19:d6:d0:0b:2c:a1:f5:cb:d0:
         ff:70:58:21:5f:d9:3a:c7:44:0b:3a:e7:94:b3:14:47:e9:d9:
         05:68:d4:47:f5:da:e8:92:9c:8a:35:32:a4:67:de:e3:c8:fc:
         6e:12:0c:7a:d9:0c:20:84:a9:ef:e5:6e:d6:cc:ca:38:d8:5d:
         39:bc:24:13:83:4f:42:3d:a0:60:f4:05:2e:85:d3:88:55:81:
         84:15:1a:e2:75:38:46:bb:2f:a1:f3:7c:96:b6:fb:3e:b0:c2:
         f7:66:e6:1d:68:6b:79:2c:87:77:8b:6a:53:f8:5c:e3:cd:fe:
         70:87:58:92:c1:6b:2a:3d:4d:f0:c1:61:11:55:0e:dc:5d:39:
         d5:7c:f8:80:68:ea:60:55:33:70:fb:fe:c5:26:3c:04:82:cb:
         41:90:74:de:b1:93:8f:33:e5:fb:89:90:b3:fc:b5:ca:d7:6e:
         ee:15:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net