Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
File:                     awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json)
Hash identifier:          F+oYLK4tmEQWmZNj31BxYFFe1zag3eLGjFl29Rk4zp0=
Subject key identifier:   A6:42:2E:BA:04:15:D3:59:F0:B5:DB:E1:A2:ED:7D:FC:E6:10:94:4D
Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
Certificate issuer:       /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
Manifest number:          70
Signing time:             Sun 27 Apr 2025 05:42:51 +0000
Manifest this update:     Sun 27 Apr 2025 05:42:51 +0000
Manifest next update:     Sun 04 May 2025 05:42:51 +0000
Files and hashes:         1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: pvnCqoTN0DC1R5OJjcUKn3ng/qxkGNMzO4AuKukdAdE=)
                          2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: r6WIlbiy+lDO4CO1ktSRKcgbqSLB19B4thVbY1+vaPg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
        Validity
            Not Before: Apr 27 05:42:51 2025 GMT
            Not After : May  4 05:42:51 2025 GMT
        Subject: CN=680dc3db-da3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:65:1d:24:cf:aa:22:d1:91:f0:a6:1b:f5:
                    09:3b:96:d8:87:16:9a:df:f8:15:38:38:6e:71:c7:
                    75:d1:90:ac:7d:82:e3:92:15:2a:d7:fc:a3:2f:37:
                    4c:c3:6c:b7:7c:5b:4a:8c:25:ea:c1:34:1a:67:79:
                    38:86:ad:15:71:07:c9:32:44:ba:2b:74:53:35:93:
                    cd:f9:3b:ff:59:5f:95:d9:25:80:a5:12:40:94:07:
                    50:34:95:ff:c1:df:0e:0f:e5:6f:39:11:01:c9:14:
                    90:c5:5a:b4:49:5b:4c:58:5a:48:f0:15:d7:8f:0c:
                    99:c3:30:23:0f:29:67:ee:1c:34:9c:d5:8b:c7:5e:
                    82:7c:fa:b7:88:2f:78:7b:5e:b7:7f:e1:be:9f:76:
                    e5:47:83:35:f0:f2:50:26:ff:ab:ca:ed:c7:a6:6e:
                    61:42:42:fb:7c:84:d8:1d:9a:e6:df:01:8f:28:e0:
                    52:5f:8d:a0:f8:79:85:e5:2f:09:67:c1:ae:ee:b6:
                    78:62:98:64:78:d4:50:5b:b3:ed:dc:83:e4:9f:2b:
                    65:77:8f:1d:37:19:87:e3:c4:d5:55:f2:73:90:88:
                    e2:e2:7a:9e:92:f4:9d:56:7f:a5:c0:95:88:08:fb:
                    c7:4b:7b:f5:56:0e:1b:e6:c4:e2:20:38:f5:8b:19:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:42:2E:BA:04:15:D3:59:F0:B5:DB:E1:A2:ED:7D:FC:E6:10:94:4D
            X509v3 Authority Key Identifier:
                keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:10:a1:f8:36:be:86:60:1b:6e:23:c3:78:48:2b:f1:d6:f1:
         2f:f6:cc:94:5d:88:f0:dc:62:ef:39:dd:75:1f:71:1d:6b:f4:
         7d:58:25:73:d1:e0:84:b6:24:96:90:00:3d:b5:18:e6:be:f0:
         7a:f0:63:61:41:07:11:c4:de:6c:b2:0d:40:8c:57:1d:eb:27:
         33:17:3d:b4:c4:a5:1f:d8:db:1d:cc:ad:9b:9f:28:9d:d4:41:
         0e:4c:64:b8:38:ec:99:be:5b:36:78:17:74:41:c2:bf:ba:1f:
         05:28:ce:75:e7:5a:78:6b:3a:41:e4:f9:22:2f:ef:75:e9:15:
         50:bf:f7:c1:d8:68:48:59:a8:29:51:92:7c:0c:1f:ba:d9:e7:
         e8:45:04:8c:a8:f3:c2:90:be:6e:a7:17:b4:8b:fe:84:7b:a7:
         4f:86:c9:b7:10:0d:7e:3c:bb:8a:0d:18:e2:1c:aa:38:0d:c3:
         2c:ae:7a:d2:bc:85:21:bf:0e:12:03:ff:62:e8:ed:96:cf:d6:
         29:cd:ef:26:ec:a6:82:9d:2c:b6:5b:7e:f3:5c:9d:63:c2:5d:
         f4:8f:9b:82:90:99:fa:45:28:ac:14:4b:27:05:20:98:7a:c5:
         05:03:8c:8c:ed:a0:d5:9a:5e:45:f5:e4:6e:92:76:d1:b6:2a:
         a2:5d:bb:f0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MEIwRTExMC8GA1UEBRMoNkIwMjkyQzYwMjcwODlDOEJBODlEOEM2NUExQTMzMEQ0
ODhCMEEyQzAeFw0yNTA0MjcwNTQyNTFaFw0yNTA1MDQwNTQyNTFaMBgxFjAUBgNV
BAMTDTY4MGRjM2RiLWRhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGQWUdJM+qItGR8KYb9Qk7ltiHFprf+BU4OG5xx3XRkKx9guOSFSrX/KMvN0zD
bLd8W0qMJerBNBpneTiGrRVxB8kyRLordFM1k835O/9ZX5XZJYClEkCUB1A0lf/B
3w4P5W85EQHJFJDFWrRJW0xYWkjwFdePDJnDMCMPKWfuHDSc1YvHXoJ8+reIL3h7
Xrd/4b6fduVHgzXw8lAm/6vK7cembmFCQvt8hNgdmubfAY8o4FJfjaD4eYXlLwln
wa7utnhimGR41FBbs+3cg+SfK2V3jx03GYfjxNVV8nOQiOLiep6S9J1Wf6XAlYgI
+8dLe/VWDhvmxOIgOPWLGdBhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpkIuugQV
01nwtdvhou19/OYQlE0wHwYDVR0jBBgwFoAUawKSxgJwici6idjGWhozDUiLCiww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjBFLzQ0QkNBNjMyODA2
OTExRUY4ODdCNzAzQ0M0RjlBRTAyL2F3S1N4Z0p3aWNpNmlkakdXaG96RFVpTENp
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYXdLU3hnSndpY2k2aWRqR1dob3pEVWlMQ2l3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw
QjBFLzQ0QkNBNjMyODA2OTExRUY4ODdCNzAzQ0M0RjlBRTAyL2F3S1N4Z0p3aWNp
NmlkakdXaG96RFVpTENpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABgQofg2voZgG24jw3hIK/HW8S/2zJRdiPDcYu853XUfcR1r9H1YJXPR
4IS2JJaQAD21GOa+8HrwY2FBBxHE3myyDUCMVx3rJzMXPbTEpR/Y2x3MrZufKJ3U
QQ5MZLg47Jm+WzZ4F3RBwr+6HwUoznXnWnhrOkHk+SIv73XpFVC/98HYaEhZqClR
knwMH7rZ5+hFBIyo88KQvm6nF7SL/oR7p0+GybcQDX48u4oNGOIcqjgNwyyuetK8
hSG/DhID/2Lo7ZbP1inN7ybspoKdLLZbfvNcnWPCXfSPm4KQmfpFKKwUSycFIJh6
xQUDjIztoNWaXkX15G6SdtG2KqJdu/A=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:56 2025 by rpki-client on console.sobornost.net