Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
File:                     5jRJcTfNjgmazQdoyBzzu0QmUbo.mft (raw, json)
Hash identifier:          ZK+EOga71I1mFkX904kHnuwBofHOEvinxrol2qkSwJE=
Subject key identifier:   D7:13:6D:2E:19:DD:E7:CF:D2:39:4F:C6:EA:8D:57:DB:DE:3E:F9:83
Authority key identifier: E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA
Certificate issuer:       /CN=A91CF064/serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
Manifest number:          92
Signing time:             Sun 27 Apr 2025 05:14:17 +0000
Manifest this update:     Sun 27 Apr 2025 05:14:17 +0000
Manifest next update:     Sun 04 May 2025 05:14:17 +0000
Files and hashes:         1: 5jRJcTfNjgmazQdoyBzzu0QmUbo.crl (hash: +FzolEZuiOvSDXjMSBezn+p3GF/6Bv4cecs6LpCKPtA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
        Validity
            Not Before: Apr 27 05:14:17 2025 GMT
            Not After : May  4 05:14:17 2025 GMT
        Subject: CN=680dbd29-60c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:87:72:e9:30:e7:8f:99:3c:06:df:74:27:
                    a6:8b:3d:d2:8d:49:40:64:d3:dd:71:66:f6:bb:93:
                    c2:bc:c1:40:b8:00:1f:5c:ac:9b:ee:b5:78:2b:5c:
                    7b:47:f1:32:2e:73:ff:44:7c:4e:99:17:f7:50:ff:
                    ee:d6:2d:8b:db:25:a6:44:db:31:f1:9c:57:02:9e:
                    c0:37:54:53:5e:dc:79:ef:67:cf:ba:93:ee:84:6c:
                    41:fe:0e:ee:db:03:f1:8e:2d:90:41:65:29:57:02:
                    90:2d:b8:f2:ca:e0:c9:9a:d7:3e:62:29:b2:71:ef:
                    83:cd:ef:39:7f:fd:6d:8a:3e:92:37:98:7b:1e:78:
                    a9:0a:f5:9c:74:d5:25:2c:c1:22:e4:c4:cc:3c:14:
                    49:dc:58:9b:4f:ec:9a:42:f1:03:14:e9:14:1a:cc:
                    0d:ee:5e:d8:24:03:77:7f:fa:e4:c4:99:5c:39:47:
                    14:b5:11:0a:c3:c8:ae:e8:0d:4d:53:92:34:5c:24:
                    c0:2b:4a:a8:5b:65:7a:61:2b:5f:f6:b0:6e:79:cc:
                    e3:87:bc:be:c1:d0:c4:ea:c3:a3:ec:26:ff:16:17:
                    d6:b8:87:44:9c:27:44:fc:48:2c:b1:5a:3d:f2:9d:
                    39:c9:d1:06:55:4b:53:ae:00:41:d7:96:1f:79:7b:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:6D:2E:19:DD:E7:CF:D2:39:4F:C6:EA:8D:57:DB:DE:3E:F9:83
            X509v3 Authority Key Identifier:
                keyid:E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:24:4c:17:8c:a6:c9:fc:16:2b:50:7e:5b:f9:1d:51:7b:27:
         42:22:38:30:01:5c:f3:c8:cc:52:63:24:79:9a:0d:8c:cf:a3:
         63:ae:f3:ba:e8:8e:7f:16:12:a8:0f:65:fa:d1:0f:e7:7e:ec:
         f3:09:3a:21:c1:83:2c:cf:41:fb:58:a7:3c:55:5d:0c:97:aa:
         3b:93:8b:7a:9b:b0:63:c6:da:6e:87:c9:21:df:b4:01:ad:d9:
         99:48:d9:24:05:5e:2f:61:93:65:80:7d:07:12:56:5f:e7:f7:
         5e:6c:6b:eb:d5:6c:63:65:df:0b:54:b7:01:a5:a2:33:02:22:
         80:b7:f9:a3:9e:3e:30:e8:f5:b6:8a:17:d9:d3:a3:ad:8b:db:
         fb:f9:02:c4:5d:90:50:91:5e:45:5e:f3:8d:6c:ff:48:d1:33:
         3f:67:b3:7a:92:ae:69:32:f8:13:ea:61:a2:18:93:8f:52:3b:
         64:e7:3f:00:a6:c6:c0:35:a2:fc:3e:e6:91:ea:da:93:ed:19:
         e3:97:e5:82:58:47:1f:4d:15:12:28:b0:90:57:85:2b:b1:4c:
         66:80:e5:aa:07:b0:d5:6c:42:0a:8a:62:1f:4d:21:b3:b9:7a:
         03:fc:4a:59:7a:b0:21:fc:80:09:37:25:e6:51:9e:6b:cd:71:
         37:dd:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net