Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File:                     zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier:          Ot1xsnrpF21rkR8VCkpXRH7+23cgOehVzgoilXUxvgI=
Subject key identifier:   DE:77:84:35:9B:9C:FB:2E:F3:8A:31:72:BF:0F:E6:70:FD:70:60:C4
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer:       /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial:       080F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number:          0804
Signing time:             Sat 26 Apr 2025 20:35:57 +0000
Manifest this update:     Sat 26 Apr 2025 20:35:56 +0000
Manifest next update:     Sat 03 May 2025 20:35:56 +0000
Files and hashes:         1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: F9BjtxJxmWsTtTrTg+/ZDevKrvyEV7sDdMANkveP3Vc=)
                          2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8=)
                          3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: 1CIYo//bwjYUMyQBStYQUQ8rbC/A2KlKjD1S8BvGyiU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
                          rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
        Validity
            Not Before: Apr 26 20:35:56 2025 GMT
            Not After : May  3 20:35:56 2025 GMT
        Subject: CN=680d43ac-31eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:09:06:cc:10:60:de:f6:bb:7f:cc:80:22:89:
                    ae:e9:69:bf:80:d0:1c:c6:de:65:0b:1d:23:48:77:
                    28:56:71:ae:87:f7:b3:61:2f:15:83:5f:f4:1e:3e:
                    a1:98:58:fd:74:76:9f:d9:e9:cb:b9:47:45:9b:38:
                    02:99:39:71:df:51:1d:d5:1f:c9:89:b5:9b:f6:d9:
                    fc:0a:68:fd:1e:9d:d1:98:a5:fc:3c:b5:31:e9:98:
                    50:4c:11:9d:5a:08:88:24:0b:e6:1b:d1:1a:40:55:
                    37:6c:59:e9:57:07:ef:37:12:e9:d1:94:11:18:83:
                    3c:7f:55:dd:c3:d0:89:72:d5:b7:ba:36:b7:00:1b:
                    df:62:b6:78:bc:dc:f9:dd:d3:23:5d:37:c5:fa:8f:
                    1f:14:6f:3f:91:4b:8f:99:7b:af:ac:31:8f:87:e2:
                    cd:a5:28:c7:d7:93:d1:51:38:4d:9f:a3:dd:57:80:
                    88:93:e0:41:39:1b:77:96:11:64:e8:f8:2b:43:28:
                    55:1f:86:3c:2a:6c:1b:1b:b7:4a:c4:66:a9:12:09:
                    d1:cf:fe:2d:93:a1:d8:4f:ed:be:e0:38:40:7e:ba:
                    17:4e:92:84:a1:5b:9f:6c:c7:10:9a:4c:60:31:79:
                    88:08:80:c9:86:08:d8:fb:82:77:5c:63:61:9a:34:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:77:84:35:9B:9C:FB:2E:F3:8A:31:72:BF:0F:E6:70:FD:70:60:C4
            X509v3 Authority Key Identifier:
                keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:f7:65:ba:1a:04:5a:46:a5:f4:87:43:84:1f:6a:c8:eb:
         ce:2c:23:2b:34:df:a9:64:76:42:39:b1:42:82:f5:99:35:48:
         e0:b9:57:3a:f9:e9:60:86:c4:3b:8f:3f:26:1d:59:c5:5c:45:
         13:cc:7b:a5:13:56:4a:a0:fd:b3:00:06:0b:96:4b:da:b9:89:
         2a:d9:b9:b4:e0:cb:35:36:89:08:0b:38:7f:8f:e2:1c:44:f0:
         98:97:63:83:0e:5c:b3:c1:31:61:aa:f5:13:bd:51:d4:ac:b4:
         55:1d:7d:16:81:86:3d:19:55:78:84:e8:a4:e5:e6:e8:96:32:
         d8:0e:c7:6e:24:e6:70:ae:c0:b6:ea:43:5c:0b:06:ce:c8:26:
         c6:85:c8:a7:e5:b5:8f:fc:5f:7d:66:7e:04:a6:7e:f3:76:7d:
         d2:d8:88:98:a2:38:9f:38:57:4b:06:9c:cb:c0:73:46:39:42:
         de:c6:87:22:fd:8d:85:69:44:6b:62:42:17:11:7e:de:c9:3a:
         5c:01:ab:cd:fa:53:7c:6c:7a:76:e8:63:4b:eb:64:ef:1b:ea:
         bc:e3:4d:a3:b0:10:a5:fa:21:b1:3f:87:fa:85:05:71:34:c2:
         58:1a:2e:68:55:45:c4:03:66:e6:49:c0:b0:2c:5f:ba:02:92:
         59:28:46:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net