Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
File:                     q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json)
Hash identifier:          98/TG93E19UQ9qpTwQR8PEIHd9xAUfOFOqkw8gBj/mg=
Subject key identifier:   A9:DC:03:A2:79:67:8F:7E:62:F8:D5:A6:A2:7F:F5:7D:93:8C:B4:0F
Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
Certificate issuer:       /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Certificate serial:       02E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
Manifest number:          0AD5
Signing time:             Sat 26 Apr 2025 20:36:30 +0000
Manifest this update:     Sat 26 Apr 2025 20:36:29 +0000
Manifest next update:     Sat 03 May 2025 20:36:29 +0000
Files and hashes:         1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: RPwyLHnwiFI/u/iJij4RJAapntsanS2vJIcZucxRwYM=)
                          2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=)
                          3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
        Validity
            Not Before: Apr 26 20:36:29 2025 GMT
            Not After : May  3 20:36:29 2025 GMT
        Subject: CN=680d43cd-d77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:eb:cf:3e:c8:b7:de:6b:91:db:8e:00:f2:
                    94:7c:6d:1b:6d:fc:45:29:46:c8:47:39:d4:65:38:
                    77:35:dc:09:24:af:78:ea:82:49:b1:b5:92:ff:34:
                    1c:e8:99:f8:76:0f:fa:fd:21:14:ac:2b:53:20:e2:
                    55:2e:4e:a3:60:3b:da:d2:55:e9:01:4e:18:3b:b6:
                    d3:66:6c:98:96:24:19:81:e2:ca:01:39:dd:9f:a3:
                    06:82:d8:17:2e:4f:8d:bf:fe:95:fc:05:55:63:16:
                    a4:6b:0d:21:f9:34:fa:dd:97:f0:bc:98:cf:2c:bf:
                    95:ef:78:27:18:05:78:1a:e9:3c:7b:18:ef:6d:ab:
                    f7:9b:6f:21:0c:54:77:e7:3b:14:70:9b:52:c5:cf:
                    7f:6b:5b:47:78:67:b6:36:92:12:14:f8:2a:d9:36:
                    c3:29:06:ef:3d:1e:8d:75:c9:1c:12:9e:9b:73:5c:
                    72:7d:f0:ba:13:61:2d:2e:46:42:8a:d9:18:75:ea:
                    d4:7d:02:03:c6:35:10:83:a7:03:17:2f:53:6f:73:
                    3a:59:5a:4c:6d:b2:07:5f:30:cc:58:78:22:70:be:
                    55:11:d6:55:be:02:e4:5a:70:2a:43:02:c7:54:1b:
                    47:0d:07:ab:e8:4f:df:6b:b1:9c:78:1a:f1:04:1e:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:03:A2:79:67:8F:7E:62:F8:D5:A6:A2:7F:F5:7D:93:8C:B4:0F
            X509v3 Authority Key Identifier:
                keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:8c:ae:d5:d3:64:d9:c0:2a:15:8a:da:b8:43:6d:a9:fe:
         b4:f3:50:a9:21:6c:07:ec:e1:0b:8a:c4:91:48:6e:dd:64:a5:
         63:89:4c:37:9b:d8:d8:31:e9:67:e1:20:ff:c6:e9:e3:64:b4:
         3f:f1:8f:27:f0:5c:72:2d:10:9c:73:bc:20:12:44:2c:e8:df:
         fb:ed:cd:19:ba:f0:d1:ee:be:0b:dd:2b:48:9c:53:df:a8:7e:
         06:52:c3:d3:80:f7:e6:1d:0c:a3:c4:3a:86:12:07:3b:5f:e4:
         37:ca:36:7e:1b:68:06:96:41:1c:c3:2e:2f:43:44:7a:18:f4:
         cb:3c:85:fa:31:f1:41:14:f6:f5:9d:38:1d:3e:d3:3c:d0:62:
         ff:2e:a3:02:7c:22:e5:61:95:00:eb:c4:b5:7d:05:ce:38:53:
         31:53:60:5f:d6:60:d2:ec:c0:fa:8e:bb:df:06:3c:b0:f7:92:
         a4:c0:ca:de:86:01:f9:4d:3e:17:cf:8f:80:8b:cc:d5:8a:89:
         e8:b5:9c:a7:86:17:94:d9:5a:ec:5f:19:da:46:b0:b5:30:fe:
         24:e9:1f:7d:9b:c4:fd:3c:64:ce:21:cb:a4:4e:1d:91:e7:58:
         68:d6:b5:e6:98:d8:65:8c:7c:cb:67:93:ae:e2:3b:a0:41:6c:
         21:b8:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net