Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File:                     ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier:          xR0nWwPuKAk0JleFkhx/kjFv36lPSsa5TJH3uB3SiG0=
Subject key identifier:   FA:D8:15:95:CD:FF:17:F2:73:13:B5:06:7C:6D:A9:88:DF:8D:07:F2
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer:       /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number:          82
Signing time:             Sat 26 Apr 2025 21:49:14 +0000
Manifest this update:     Sat 26 Apr 2025 21:49:13 +0000
Manifest next update:     Sat 03 May 2025 21:49:13 +0000
Files and hashes:         1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: vH5cmas4Gsjyjsd2GnFLDq9eMWugeTn2HCxNCx2wm4g=)
                          2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: g+wT6Ez1r4BofdZFTdTULjIDgwJ9CgK12xlHp/5Bj2s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 21:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
        Validity
            Not Before: Apr 26 21:49:13 2025 GMT
            Not After : May  3 21:49:13 2025 GMT
        Subject: CN=680d54da-43e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:a1:46:dd:50:3d:3b:06:64:d4:d1:f1:24:
                    b0:f4:c0:04:1e:40:40:2d:57:ef:9b:92:bc:e3:90:
                    94:69:e0:c7:54:20:98:7d:9a:e8:b4:f8:79:6f:fa:
                    40:8d:37:99:9b:1d:82:76:82:f6:12:ea:b8:b9:a3:
                    fa:34:9a:10:9f:61:5a:9c:59:d0:7c:d1:fe:3a:29:
                    4f:23:02:7a:99:87:d4:af:de:0b:e5:bd:ad:12:97:
                    ba:4d:e3:9d:72:44:a5:88:d2:01:10:fa:44:4e:ae:
                    5d:b3:1a:fd:65:24:79:ec:44:23:25:19:40:dc:d1:
                    ed:ae:35:ca:0b:0e:4b:8a:b9:9e:ad:30:aa:92:83:
                    d9:5c:cb:da:e5:eb:68:86:48:93:2f:49:c0:7c:7e:
                    8e:f1:27:d3:32:a0:39:a9:c2:90:59:b6:be:2c:ae:
                    1f:26:35:a5:d6:bb:30:9d:8f:16:16:9c:77:7a:46:
                    1e:1f:73:c4:cb:f6:ed:c0:46:b3:aa:1c:af:9e:5b:
                    cd:b4:c5:93:84:c2:a8:55:df:b2:65:ce:fb:36:8b:
                    27:72:fa:27:51:c7:75:bc:04:f3:ff:78:df:d6:89:
                    d0:1e:0e:93:fb:96:55:2d:0d:96:d2:0e:2c:6e:8d:
                    10:29:87:1b:67:0c:ae:72:45:1b:74:ed:13:6a:6d:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:15:95:CD:FF:17:F2:73:13:B5:06:7C:6D:A9:88:DF:8D:07:F2
            X509v3 Authority Key Identifier:
                keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:28:ac:0c:8f:10:af:71:7e:be:97:47:e9:b6:82:2a:e0:d7:
         53:c8:7f:75:b5:f5:0f:36:c0:da:e5:96:8e:2a:85:76:3b:c5:
         89:2c:20:02:37:35:3b:c0:77:2e:7d:97:c8:a9:cf:c5:e3:a1:
         b8:e3:d9:13:f6:1c:1f:a3:14:2b:48:ac:30:7a:e0:27:c5:27:
         fb:c4:43:67:6b:4b:89:90:44:77:c4:67:40:25:b4:8d:a3:5c:
         0a:08:77:57:27:58:fc:76:f3:a2:b4:07:84:a0:4c:c2:99:23:
         b1:ea:c1:08:da:20:f7:7e:e1:af:7a:26:61:da:79:d5:ad:1f:
         f8:36:39:c2:0a:2d:32:44:6d:3c:ee:12:3c:32:5a:3e:d9:61:
         42:e9:d1:b4:b3:77:29:48:6c:76:41:71:aa:96:f9:23:88:50:
         9e:86:77:21:e6:d6:74:4c:81:cf:93:44:53:43:05:c6:82:08:
         c4:f7:97:8e:99:74:a3:e3:b6:42:32:a0:1b:54:20:1b:9e:44:
         fa:e2:17:d5:0e:77:2d:f9:db:b7:05:7c:9f:9a:d5:52:60:69:
         70:03:f9:dd:dd:54:cf:cb:bc:90:03:43:f8:91:ec:69:89:b7:
         42:de:8a:cf:86:fe:42:ac:f3:af:79:8b:2e:2e:2d:a3:e7:a2:
         f5:61:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net