Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          8pDO8fvKeasbOAgp72GAcI7eVQ5uI5+1ZwCHu9KZvcI=
Subject key identifier:   65:DF:E7:04:5E:EF:3A:80:0E:BE:01:85:F8:26:1C:B3:EA:83:01:0A
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       066C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          065D
Signing time:             Sat 26 Apr 2025 22:06:35 +0000
Manifest this update:     Sat 26 Apr 2025 22:06:35 +0000
Manifest next update:     Sat 03 May 2025 22:06:35 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: 8zOlOC1uZRSMqhtxyNrJlSI5JPvNG2Hmg4fbjMnphP8=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: wvKmIi2++zbJbE9MCN6birY4f8q7zR7YkJ8AOwoHL0c=)
                          3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: enNVOzFUB83x7iJjfLJWQJYDSM1EIlchFYs8Y1Lu3uk=)
                          4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: GKP5taJaLT0/BVslpBvisPkis2pdFhShqf+TdK4IIA0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Apr 26 22:06:35 2025 GMT
            Not After : May  3 22:06:35 2025 GMT
        Subject: CN=680d58eb-2563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:cd:18:13:86:8d:6e:3e:2d:c7:2f:31:a0:
                    98:87:1d:2a:b1:a0:79:a2:71:dd:78:6b:aa:19:7e:
                    fd:19:72:cb:29:aa:8d:04:0b:08:e7:66:46:e4:af:
                    d2:10:e5:26:62:72:1e:f7:2f:f9:47:da:2b:0e:f0:
                    b5:01:66:63:fa:f8:5c:be:35:d3:d6:e7:96:cf:bb:
                    30:14:30:c7:7e:43:59:a0:27:94:a9:f6:19:e0:66:
                    9c:77:a3:db:3e:79:92:86:6c:21:9b:2b:7e:6f:51:
                    a6:c6:01:1c:f9:e8:7e:8e:c4:e3:8e:d6:af:39:56:
                    8b:51:50:3d:08:2a:63:6f:8b:be:fd:86:2b:64:3e:
                    0f:13:d7:00:ef:db:f4:db:81:8b:e4:72:07:78:40:
                    cc:47:35:fa:2e:b4:f7:26:85:29:d1:27:48:8b:5c:
                    d2:e8:c1:4c:06:b4:1c:bf:18:dc:71:67:d8:77:47:
                    25:eb:e8:9e:b8:23:60:c2:77:39:66:a1:d2:7d:c9:
                    7c:74:66:60:d7:5b:e4:34:f4:be:9e:7c:42:34:67:
                    cf:00:97:49:d0:f0:17:01:d7:51:24:b2:21:32:dd:
                    a7:f2:2f:0b:f2:22:bd:67:c5:2b:ea:30:78:db:2a:
                    f0:2c:86:d8:e8:fb:50:28:3d:e9:4b:c5:b8:d2:1e:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:E7:04:5E:EF:3A:80:0E:BE:01:85:F8:26:1C:B3:EA:83:01:0A
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:81:cf:ef:f1:e7:c8:1f:4d:45:89:53:f5:7f:cf:55:54:82:
         80:96:cf:77:fb:30:0b:70:f3:96:1b:da:41:16:65:3f:a2:ce:
         c0:1a:4b:52:44:61:53:ca:5b:dd:b8:2a:51:aa:2e:e7:29:16:
         6f:9f:df:f2:21:c8:ab:ea:ee:28:59:c1:ea:3c:b1:90:8b:aa:
         68:83:a7:bc:de:ff:21:38:c0:44:a9:95:63:ad:12:63:6b:47:
         44:a0:4a:72:b5:e6:1b:f4:13:1f:c1:94:ad:08:1a:18:53:d0:
         e0:65:31:b1:a4:11:32:09:32:e2:ea:1d:cd:6e:1b:cb:db:9f:
         e6:bb:38:40:a1:c2:73:9e:0d:5c:08:a8:13:fe:fb:6b:fa:e9:
         93:81:e2:25:3c:89:b1:fc:4f:07:d4:53:fe:1b:9e:28:f1:4c:
         55:33:8f:73:35:54:b4:76:19:3c:51:87:3c:d9:d0:4f:38:59:
         fc:3f:06:92:4e:65:a9:6b:50:dc:76:db:57:67:43:14:3c:36:
         fc:4c:e3:74:f9:b5:37:10:de:6d:5b:43:b9:17:18:7a:4d:49:
         44:36:43:08:96:4e:64:54:51:fe:01:67:f5:cd:ac:ce:10:04:
         c2:47:4c:be:15:c4:3f:6a:4f:b8:e4:33:cf:9b:c0:b6:e1:83:
         1d:9e:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net