Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          AvfA7ZtfFtkif7h/2gLVn3go1JZd7PISOpiB5Y7JgJQ=
Subject key identifier:   7A:26:81:00:AD:EA:A2:09:47:76:47:19:68:21:E6:5B:F8:C7:15:9C
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          0308
Signing time:             Sun 27 Apr 2025 00:53:05 +0000
Manifest this update:     Sun 27 Apr 2025 00:53:04 +0000
Manifest next update:     Sun 04 May 2025 00:53:04 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: Ds2peCGy6vgSgVwQrNS4nLYTPUgjDKe7fXgra+7SKLM=)
                          2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
                          3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: Apr 27 00:53:04 2025 GMT
            Not After : May  4 00:53:04 2025 GMT
        Subject: CN=680d7ff1-a256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:67:70:26:86:fe:20:62:6d:9a:e2:66:11:
                    4b:9e:65:06:54:65:8d:d7:fa:0f:e8:ef:33:4a:3c:
                    42:b5:55:aa:65:2a:8c:a9:99:81:c6:6f:bf:d7:61:
                    1b:fc:b5:cc:3c:95:97:75:5d:62:2d:64:53:f0:75:
                    32:45:f5:b9:6d:c3:ff:89:7e:52:a5:57:ce:ba:1b:
                    1c:ac:d7:ed:9b:dc:13:36:ef:4a:08:4d:b3:d6:81:
                    30:28:e1:bf:55:ac:7b:05:d4:f6:68:3d:5a:71:8d:
                    f3:de:65:8c:7d:c5:b0:48:75:ee:ea:ac:3c:80:81:
                    39:c9:cd:c3:4f:3b:86:dd:2d:94:ff:1d:e9:cb:5d:
                    4e:b0:c0:6e:bd:7a:04:04:ae:d9:31:ff:92:b0:54:
                    37:a7:99:14:e9:aa:78:c2:94:08:b8:77:f2:9c:33:
                    9e:43:9a:ea:28:ec:52:bf:c7:a4:e2:2e:39:db:3a:
                    7e:2a:0c:57:b2:9e:c1:7f:3e:8e:b4:47:ab:18:59:
                    26:73:24:eb:a7:4b:36:28:c5:23:ac:9a:9b:33:74:
                    11:01:43:4e:f6:74:06:1f:c5:46:98:c0:e7:4b:35:
                    e3:9e:7c:75:8c:2c:d7:ad:db:d7:05:df:fa:9a:b4:
                    04:18:1a:49:d9:d0:b9:ae:ce:76:1a:a4:8b:2f:91:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:26:81:00:AD:EA:A2:09:47:76:47:19:68:21:E6:5B:F8:C7:15:9C
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:74:30:1f:89:90:21:b0:19:d7:c9:ca:70:45:8b:5f:25:60:
         bd:13:80:39:ce:72:34:13:60:87:b2:34:a3:d0:a8:28:b4:f9:
         8c:da:d9:f5:cd:4a:1d:0d:e9:db:7a:31:52:3a:ea:da:fd:5f:
         74:30:96:df:af:16:f6:dc:32:83:14:73:75:2a:5a:2c:d1:df:
         86:22:5d:fe:57:cc:d9:fc:d5:ec:18:22:45:91:0c:06:c0:49:
         29:cb:00:51:35:1e:1d:6a:84:f4:bf:ab:7a:dd:ca:80:2d:b0:
         bc:e1:ab:e2:3e:ef:99:d1:b9:be:21:a1:13:41:44:68:27:ff:
         b5:17:b0:95:9d:e6:ef:37:ba:da:8b:ad:b8:4d:3f:d1:ce:0a:
         15:c7:15:34:ca:71:21:a2:82:c4:20:ec:90:78:50:0c:23:df:
         94:71:99:da:1c:83:75:7e:14:5e:bb:9e:1b:ad:d4:b6:16:1d:
         bb:17:c4:9f:e1:c5:6a:75:ce:d5:55:52:73:01:20:02:8b:0c:
         6d:88:42:c9:c4:d7:80:63:81:06:a8:93:78:21:3b:63:85:e4:
         eb:41:dc:a6:45:6c:5b:fe:7d:59:8f:9b:14:8d:38:e8:e0:cb:
         16:95:e9:5e:7d:1f:ed:41:0e:c0:bf:93:5e:dc:34:e8:ca:4f:
         34:14:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net