Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File:                     uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier:          P/nOIhnZ6hU5rWXxnOYfEPkyPRxUX55u2OdiDQnKGr0=
Subject key identifier:   34:C7:A1:AA:FE:9B:97:10:72:05:4D:67:96:2C:CD:1C:C7:AD:B1:A6
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer:       /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number:          076E
Signing time:             Thu 24 Apr 2025 21:22:48 +0000
Manifest this update:     Thu 24 Apr 2025 21:22:47 +0000
Manifest next update:     Thu 01 May 2025 21:22:47 +0000
Files and hashes:         1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: J1PNDgB00uKEkMjkvsvhvxXuHPH/ercQDG2GVHXojHk=)
                          2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: TqtodbfH2773RSeSZS8HBt7Fg3MhzGZkdJHAeKBdxNI=)
                          3: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: E+nOxjyrsiWeh2pSdTI7eBtCxdY2UG5bXebW7kl/SNQ=)
                          4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: WdQW9sjBymvB0klEN4W168ArFaUHAakmSi85CGroy+U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
                          rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
        Validity
            Not Before: Apr 24 21:22:47 2025 GMT
            Not After : May  1 21:22:47 2025 GMT
        Subject: CN=680aaba8-f2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:44:91:98:41:90:ae:e1:f6:34:07:57:85:
                    9a:09:0f:82:80:a6:2c:e0:87:77:6e:f8:b7:45:66:
                    80:de:6f:82:66:3a:84:7d:5f:7c:07:e7:e3:62:8a:
                    8d:f0:58:ab:cb:af:ee:75:88:40:8f:dd:86:39:73:
                    a8:d5:e5:c6:2b:a4:e1:93:e2:30:43:1f:b2:b1:1f:
                    e6:3a:8d:56:d2:17:5f:27:12:66:23:27:59:1c:47:
                    6f:09:0c:d3:5c:0d:a6:03:62:16:90:81:bc:8c:c5:
                    96:93:e5:ac:bf:c8:3e:65:74:36:97:60:c0:8f:41:
                    ac:f1:86:f7:91:9e:04:c9:ef:46:78:8f:71:a1:3f:
                    f8:42:79:df:55:66:37:19:c4:e4:d9:4f:53:9b:c4:
                    d3:7e:c4:93:1d:05:63:da:3e:e7:c6:13:f1:b6:e8:
                    e0:8f:86:d3:a7:7b:83:9a:b3:7c:aa:c6:0b:17:e5:
                    a8:b1:31:78:32:8b:a8:a8:4e:3a:2e:e1:52:56:ca:
                    1a:66:a7:53:cf:07:11:f4:77:5e:db:3b:22:6b:ae:
                    a4:13:cd:ff:75:d4:92:1a:7c:6e:98:82:0b:e1:48:
                    03:ce:30:f7:46:7b:c3:0b:47:6a:44:8e:c3:94:6f:
                    09:e6:7f:7b:f0:95:91:e8:4f:96:75:a3:09:64:fe:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:A1:AA:FE:9B:97:10:72:05:4D:67:96:2C:CD:1C:C7:AD:B1:A6
            X509v3 Authority Key Identifier:
                keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:37:e7:ed:61:b4:c1:27:22:5f:04:40:44:b2:9b:87:53:
         7c:8c:8e:82:55:2f:7d:34:31:9d:e6:75:ef:d7:a6:77:06:90:
         ad:47:cc:58:2f:c9:0b:59:b4:f4:65:5a:c7:b8:45:52:bf:19:
         07:10:04:00:b2:e0:85:19:4c:11:b9:fc:13:4d:19:a1:b8:1b:
         1d:e6:ce:67:1c:28:4b:f1:1f:20:d5:71:39:6f:5e:36:bf:eb:
         53:21:68:d9:4b:87:21:74:c8:06:7a:61:29:80:71:4e:b3:36:
         7f:71:fe:66:47:29:93:1b:65:93:d5:49:75:aa:2e:5d:00:b1:
         82:15:b0:9e:82:1e:08:25:a2:e6:59:23:f4:5b:25:33:3d:e1:
         74:da:8c:41:3d:fb:da:2d:cf:18:ab:84:74:24:63:6e:de:12:
         8a:a1:49:d4:e7:e2:3a:4e:0d:16:dc:99:56:d5:db:cd:b0:da:
         76:a4:31:a7:64:78:80:86:2a:75:14:95:24:45:26:67:c8:c7:
         52:4b:63:95:e2:57:a4:02:64:88:75:88:74:0e:68:b1:91:79:
         a6:60:9c:2b:b6:6b:6e:02:46:a7:6d:77:bb:c5:ba:ee:c0:4d:
         23:3c:fe:93:fa:f5:16:f0:cd:e3:a5:51:a3:52:d4:3c:bc:73:
         5b:e8:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:12 2025 by rpki-client on console.sobornost.net