Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
File:                     w0Ozu4On4j-tla-NIytSBSoP3nI.mft (raw, json)
Hash identifier:          8VETbXvzc+Ty3CKfw6GcuFW3ijTnzIxlE7CUBJ0yDCU=
Subject key identifier:   3A:71:0E:00:8F:45:FC:F1:6C:00:78:0A:32:ED:DF:4F:C3:FF:2D:37
Authority key identifier: C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72
Certificate issuer:       /CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
Certificate serial:       098C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
Manifest number:          0971
Signing time:             Sat 26 Apr 2025 19:58:20 +0000
Manifest this update:     Sat 26 Apr 2025 19:58:20 +0000
Manifest next update:     Sat 03 May 2025 19:58:20 +0000
Files and hashes:         1: w0Ozu4On4j-tla-NIytSBSoP3nI.crl (hash: 2Bm/Gf3ygA50/rx4TQhyc5CWvYuenfOmeolluDoVlTI=)
                          2: 8A480EFE80EE11EBA01B8C79C4F9AE02.roa (hash: nGCSzyeCGWb2by2Ok6xODoRNUK8MF0tF735aj9iyb9Y=)
                          3: 63FE6F90232411EB87A6CB0DC4F9AE02.roa (hash: MFp+TQFdjUkWq8YrpZoPX+xKXmHG4qHFMaA4FACPOxE=)
                          4: 023564E6D5BE11ECA8BE4666C4F9AE02.roa (hash: wHZWRXwKbEVincv7YJ3e25Slz3Zw4ni306PAKoBPm2o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl
                          rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C66B7, serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
        Validity
            Not Before: Apr 26 19:58:20 2025 GMT
            Not After : May  3 19:58:20 2025 GMT
        Subject: CN=680d3adc-4b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:eb:0f:d2:f4:af:eb:cf:55:fe:d7:82:51:
                    94:b2:11:65:96:9d:b6:2d:d0:3d:6f:1b:5b:8e:52:
                    6c:00:44:a6:39:5f:ba:ba:f6:ca:3b:46:24:52:1e:
                    a1:07:0c:43:41:99:71:25:42:c3:5d:dd:26:7d:21:
                    4f:77:63:c6:27:5c:fc:f2:1e:75:24:78:fc:9d:0d:
                    67:80:9a:f8:f8:a1:21:60:8f:b1:3b:47:67:98:8d:
                    3f:c9:13:ef:64:34:e0:c7:b6:22:b2:46:6b:9e:29:
                    45:e5:f8:59:8e:99:c3:16:20:3c:0f:6a:19:3c:4a:
                    53:55:46:8c:d4:71:f6:52:29:79:f8:f0:e5:6c:04:
                    86:98:e9:61:1f:93:cd:8a:57:2c:b6:d5:23:6c:95:
                    86:36:dd:67:d1:b8:d8:c9:e0:3c:54:f1:9a:40:19:
                    cf:b7:d3:c6:17:e2:a7:6f:b9:c1:21:91:35:55:96:
                    3a:d4:38:0a:bd:f1:b7:cf:f9:1b:f6:e7:62:55:ef:
                    6b:e4:c8:a1:d8:29:a3:c0:c7:24:0b:66:fc:02:7b:
                    8d:41:d5:3a:8e:e9:d3:79:0b:c0:90:dd:59:a1:d8:
                    1c:87:c3:7b:bb:e7:76:61:5f:92:b5:9b:05:d6:75:
                    95:b3:a6:10:1d:62:52:45:6d:3c:2f:e8:e9:16:8d:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:71:0E:00:8F:45:FC:F1:6C:00:78:0A:32:ED:DF:4F:C3:FF:2D:37
            X509v3 Authority Key Identifier:
                keyid:C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a9:97:b7:af:88:e7:c2:f5:a6:e3:1b:70:40:ae:4f:12:7e:
         c0:82:02:94:da:db:3e:7b:15:63:f5:c3:37:94:f9:28:47:5b:
         6b:8b:11:6f:9f:8c:96:5a:5f:19:b1:34:88:09:ab:87:df:0e:
         a8:a5:d9:20:01:42:e7:59:02:9f:03:20:0a:39:69:c9:5b:85:
         62:64:fe:0a:76:b8:f4:1f:fd:0e:49:90:59:6f:96:ed:4b:09:
         65:4b:75:85:f0:64:53:59:9e:27:2a:94:82:23:f8:6d:11:63:
         a9:fe:60:77:ca:17:c2:b9:28:b5:58:30:db:ac:4c:1e:3f:85:
         fe:19:28:0c:7a:7a:25:70:35:2a:67:ef:a5:28:bc:f5:97:c2:
         e4:30:93:50:14:b0:eb:69:ae:54:0c:fb:ba:3e:ef:97:7e:f2:
         79:74:87:9b:4e:9d:68:99:ab:72:c9:be:e5:ed:9d:4b:b9:5c:
         b9:cf:9e:f6:9f:23:2d:b4:f8:b6:d1:2f:8f:67:76:c6:dc:57:
         78:ce:1a:c1:22:1f:51:23:ad:45:34:c0:91:5b:c7:39:d7:3e:
         54:be:16:47:5f:1a:02:89:6b:5c:37:1e:bd:42:be:49:3d:f7:
         74:2e:6a:9c:c2:03:00:39:97:da:fe:f2:43:d6:68:65:da:54:
         cd:8c:51:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net