Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File:                     Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier:          0ODyzf33DR9zTmO+ZBjjqShUC0BZHEnCNOVLvLf2tUI=
Subject key identifier:   68:72:1E:D9:C1:FF:DE:00:31:D3:D0:11:E5:16:EF:EF:C0:63:BB:FF
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       058F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number:          0578
Signing time:             Sat 26 Apr 2025 22:57:10 +0000
Manifest this update:     Sat 26 Apr 2025 22:57:10 +0000
Manifest next update:     Sat 03 May 2025 22:57:10 +0000
Files and hashes:         1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: vIUFrovs7frcYOrCq8In832FWCX/+44UQJTYF89YDkM=)
                          2: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: F+eusEd7GL0ODjW6lYLQdd8QnZrTI3K+yhDDHvuA9Zk=)
                          3: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: j1jidqxJCotjIETFLxyNEiGFOvwt1GdIG0ZptBesQUc=)
                          4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: ZuWliTIGvlhIvvjXehnw9RrKZY3Tr7AfPlrqcRHIwUM=)
                          5: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: i+5d2nxoXTBSkmi7U0mLeacCYMyYuYpYdzVQzCXwi0M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Apr 26 22:57:10 2025 GMT
            Not After : May  3 22:57:10 2025 GMT
        Subject: CN=680d64c6-4bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:45:f3:ae:84:a0:46:f3:10:18:df:d1:0b:
                    37:eb:a9:e5:a1:91:fe:25:b0:d5:8d:a9:ea:9b:59:
                    df:64:15:88:f4:5b:15:58:37:f8:d5:63:47:3a:20:
                    7b:84:19:76:4e:27:03:da:19:a7:df:3d:31:ba:56:
                    a3:f7:06:de:08:3a:39:a2:9c:d5:35:a8:40:98:6b:
                    a5:28:74:e6:41:fc:25:a9:29:d2:5e:9f:61:22:6c:
                    e4:5e:4a:6e:19:0e:06:c5:c7:36:7d:47:f4:2b:e2:
                    4e:6a:32:63:87:45:ff:7e:50:f4:73:21:2c:13:26:
                    29:42:59:10:81:f5:4c:1c:0b:ca:c0:e8:c6:e1:22:
                    49:05:82:9d:67:e8:37:e1:1a:8c:f3:f3:90:b0:1b:
                    db:ae:a7:d4:02:47:ef:df:ac:27:50:db:30:6d:ee:
                    85:21:be:50:78:c0:fe:64:32:36:3b:3e:f1:67:51:
                    d8:a9:df:01:3c:83:2d:df:e9:8e:8b:3f:7a:19:15:
                    9f:b4:73:3f:55:8c:ba:c2:0e:18:5d:19:de:bd:53:
                    ec:82:9f:75:b0:02:32:b5:2b:16:95:f3:bb:36:68:
                    87:30:da:f5:e4:b4:d2:6e:06:fd:db:a8:0d:11:fc:
                    14:b5:56:aa:f0:97:b6:9c:f5:57:dc:a8:27:8c:2d:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:72:1E:D9:C1:FF:DE:00:31:D3:D0:11:E5:16:EF:EF:C0:63:BB:FF
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:fd:7d:22:c4:31:6e:b0:47:ab:62:10:50:77:d2:1b:44:
         24:8d:1c:c8:68:49:6b:a4:af:c0:28:84:2b:9d:10:6a:7c:60:
         de:1e:40:9f:e7:f8:6c:3d:d0:24:2d:3a:b0:b1:1d:d2:a2:42:
         99:be:e5:6e:95:c5:8c:56:6b:4e:9e:fe:e6:6f:d7:10:91:ab:
         96:1b:01:af:42:e9:47:a1:8c:7b:55:1b:de:31:bf:b9:6e:53:
         9f:cd:50:c1:e1:48:04:10:a8:d0:28:80:8f:44:70:c2:60:7a:
         60:91:c7:41:7f:53:8a:ae:06:50:53:38:d6:df:fb:ba:36:03:
         67:e9:bf:6a:00:da:be:21:bf:37:8b:31:a0:a2:8f:cd:97:2b:
         33:1c:74:4a:6f:68:52:3a:75:00:2f:c7:1a:45:13:6e:06:81:
         d4:a9:d5:6c:b6:be:e4:f9:e4:04:68:9a:b4:ef:34:bc:2e:f7:
         2c:48:5c:f0:d2:39:4e:5b:84:44:0e:3f:af:59:52:0f:19:db:
         d6:c9:03:32:d1:d8:bc:36:91:21:67:70:0d:66:cf:c9:67:c5:
         34:c8:26:99:af:b7:aa:6c:00:74:0d:58:ed:c6:fd:b8:e1:f1:
         58:44:b1:37:ac:57:b0:6b:e4:19:67:30:fb:8f:58:a4:9c:ef:
         11:e0:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net