Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
File:                     E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json)
Hash identifier:          Vg9opEjr/xRx0+ElNEAOZZlambSXtDoM3Es3/bru8jI=
Subject key identifier:   E8:6B:B1:BF:0F:E5:FC:E0:2C:65:DA:F5:C0:83:6F:D2:30:43:C8:1C
Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
Certificate issuer:       /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57
Certificate serial:       24F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
Manifest number:          24F3
Signing time:             Thu 24 Apr 2025 14:46:25 +0000
Manifest this update:     Thu 24 Apr 2025 14:46:24 +0000
Manifest next update:     Thu 01 May 2025 14:46:24 +0000
Files and hashes:         1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: OlJ5tfla/BBVu5leRAFhgPiu9hfQ5V6GuNG8fi5qJZM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9459 (0x24f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57
        Validity
            Not Before: Apr 24 14:46:24 2025 GMT
            Not After : May  1 14:46:24 2025 GMT
        Subject: CN=680a4ec1-a99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:c4:9b:31:0e:0c:27:c6:9b:3a:ec:06:c5:
                    c0:48:22:e7:31:b1:54:41:1e:1e:16:12:c7:43:c0:
                    1b:ca:a1:c0:9f:7e:ce:b2:76:3c:56:45:81:3e:02:
                    32:56:70:07:32:56:21:91:6c:36:74:e2:e1:dc:2c:
                    2d:6d:37:fc:49:2f:ea:fa:20:e1:f3:2d:1e:fd:af:
                    15:3c:e8:27:89:34:e7:9a:dd:02:76:ce:07:aa:ee:
                    49:1e:67:d2:c6:cb:ae:15:3b:8a:f8:18:fa:84:64:
                    d5:66:e3:9d:38:ed:8f:86:4d:54:9f:d9:61:46:d4:
                    a0:49:15:10:6f:db:74:21:58:60:5d:a4:c4:b7:6f:
                    d6:e7:e9:a3:c4:ee:9a:eb:bd:53:3d:3e:03:db:d9:
                    46:75:c6:72:d9:bd:a1:28:07:39:01:a2:dc:9c:9d:
                    3d:46:29:c1:df:19:d4:59:b6:2b:5f:98:7d:b0:6f:
                    2d:17:89:25:ba:0e:a1:77:d6:61:a5:c6:2a:d7:c5:
                    99:9f:a4:9a:72:68:a4:49:1d:8e:e7:18:9d:04:c9:
                    9d:bf:d4:0c:e4:4c:c8:c8:e7:7f:42:b0:83:94:db:
                    5d:2a:1e:62:90:6d:fc:d4:b3:93:d6:54:b2:ba:ab:
                    6c:0c:f3:e6:bb:08:0f:e4:f0:08:1d:8e:47:e0:79:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6B:B1:BF:0F:E5:FC:E0:2C:65:DA:F5:C0:83:6F:D2:30:43:C8:1C
            X509v3 Authority Key Identifier:
                keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:da:bd:b1:14:80:9c:f1:3e:2e:14:0e:9b:56:b8:ba:78:1f:
         09:b3:9f:f4:ad:e4:26:ce:15:7f:80:56:71:1c:5c:a4:1e:c4:
         88:01:6c:df:49:e2:02:c1:40:a9:62:01:82:82:f1:78:56:37:
         5f:95:0e:0f:19:f1:64:61:84:7e:1b:38:f0:5e:5a:1b:31:15:
         d9:5b:fa:c7:54:91:dd:87:69:11:3c:9b:d3:b1:1f:e0:8e:9a:
         81:43:65:86:ee:b4:74:a2:ca:94:a7:69:58:d8:7b:7b:4b:93:
         47:eb:3e:fa:0e:54:26:55:13:e4:3b:9c:19:f7:31:8b:08:27:
         61:7d:de:74:99:c4:a4:61:90:bd:2a:e0:26:4d:eb:6d:09:85:
         6b:95:49:74:c0:19:d4:4b:7f:bc:67:09:3f:ed:5e:ff:cf:f8:
         4c:4a:f0:72:63:5a:0a:40:84:aa:b5:a5:17:8e:37:94:fd:d0:
         cb:02:b9:95:eb:a1:cf:6f:85:e5:a1:41:10:2a:31:12:aa:ba:
         1a:2f:ae:b6:04:ff:1b:ec:46:ff:8a:f3:6e:63:ed:4e:25:17:
         b8:e8:77:2c:98:4b:e7:4c:cb:a9:80:9e:3d:58:70:c6:5d:8f:
         ec:ba:7b:47:e2:d9:73:3c:d7:f0:9a:ed:dd:5c:99:bf:3e:12:
         ed:6f:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:09:22 2025 by rpki-client on console.sobornost.net