Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File:                     ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier:          MhuKzRq1Muu353NWdoU8DXOq2wgBKGCO415wqW1RvMA=
Subject key identifier:   A4:EE:BB:DF:20:1D:EA:9A:AB:CA:8F:7A:1D:97:20:2E:A3:5E:0B:96
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       0344
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number:          0332
Signing time:             Sun 27 Apr 2025 00:44:15 +0000
Manifest this update:     Sun 27 Apr 2025 00:44:15 +0000
Manifest next update:     Sun 04 May 2025 00:44:14 +0000
Files and hashes:         1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: 2nC6QtleYAFGe8rdT0silhlTh5KN/Ynnl2iEweqiiRA=)
                          2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=)
                          3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=)
                          4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=)
                          5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=)
                          6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Apr 27 00:44:15 2025 GMT
            Not After : May  4 00:44:14 2025 GMT
        Subject: CN=680d7ddf-7b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:28:1c:fb:4e:d8:f4:0e:38:96:c1:44:c6:
                    cc:27:57:ed:6a:8b:83:9f:0d:22:2e:e5:bd:41:6c:
                    42:f2:8b:9e:e7:e8:03:1c:74:85:88:a4:8b:43:88:
                    78:1c:db:26:5d:7f:fd:e8:fd:82:7a:05:3a:33:8c:
                    4c:0a:fd:73:78:af:9f:d9:e0:a5:22:f5:84:b6:68:
                    4d:53:48:e4:14:99:4e:6d:e7:89:93:24:75:2e:b4:
                    ce:ee:82:48:91:45:81:8d:5a:05:49:31:d4:31:3f:
                    6f:9a:3a:4a:ec:8a:ad:36:0a:bc:4d:f4:c2:cc:3b:
                    cc:8f:3d:0d:d1:3d:e4:c7:a4:69:20:43:dc:0b:2c:
                    10:63:90:4b:09:03:22:5f:3e:55:a2:14:cf:6a:c5:
                    59:51:95:4d:6e:84:31:15:fe:72:0a:c0:2b:0b:b7:
                    1b:94:f1:24:a7:ce:dd:e9:1f:4a:d0:66:c4:3e:9a:
                    45:45:b0:8d:85:04:b6:fa:f2:4f:1c:07:ec:09:24:
                    3d:e5:bb:25:f4:f1:1f:b9:d9:14:42:b0:61:a2:1f:
                    39:75:d7:53:9d:ea:66:37:7a:02:e2:52:13:00:43:
                    6a:34:40:ad:a7:ab:de:8e:f3:7c:55:a7:e7:1d:3e:
                    32:2a:35:2b:8c:5c:42:86:1e:a4:54:67:06:c3:8a:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EE:BB:DF:20:1D:EA:9A:AB:CA:8F:7A:1D:97:20:2E:A3:5E:0B:96
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:e5:70:63:78:c7:e8:15:b9:c1:b9:ed:eb:ca:92:49:37:
         4e:ce:db:8a:aa:43:da:9a:d6:86:e3:89:be:59:86:8c:47:48:
         ba:bf:26:87:3a:c5:32:52:26:46:bd:12:b5:ef:47:b9:ac:ae:
         f0:12:58:e6:be:e9:5b:ee:8f:f1:5f:a4:53:91:22:84:87:fd:
         84:ff:5a:82:37:bc:b9:80:b6:9c:c3:52:0c:8a:fe:6b:ab:0a:
         03:4c:cd:fe:f7:23:a7:6e:b4:63:61:43:14:43:50:3d:50:1f:
         1b:9a:e5:e6:6b:0a:1c:8b:05:74:a5:73:0c:1e:42:79:bf:4b:
         93:0a:dd:7d:50:75:63:05:ff:69:0f:25:ad:e8:2b:95:d0:8e:
         ec:4b:60:9f:0e:c3:b5:57:73:3d:68:63:18:22:c8:5c:b4:ad:
         13:bf:aa:12:fb:09:08:b5:f9:3d:6e:5e:e0:32:6a:01:fc:1b:
         b0:91:95:38:be:13:1a:d8:7a:77:9f:2d:d1:6f:eb:af:2e:b1:
         5c:df:8d:54:fe:33:a5:cc:58:38:9e:50:f8:02:58:99:e4:71:
         cc:4c:b6:5a:ed:79:9d:25:e1:62:46:80:43:d9:45:e0:fd:9e:
         2b:69:ac:e3:5f:5a:56:23:df:ef:09:d4:dd:88:25:a8:4c:ae:
         32:1b:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net