Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
File:                     acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json)
Hash identifier:          d6eTfXJsq4ll7/7UPqhQoyudayWnbIXe4XvIUV9UGk4=
Subject key identifier:   3D:15:BD:C6:43:0A:A1:14:BA:6A:65:6A:D3:5D:15:A9:59:35:35:F5
Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B
Certificate issuer:       /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
Manifest number:          01E2
Signing time:             Sun 27 Apr 2025 01:47:23 +0000
Manifest this update:     Sun 27 Apr 2025 01:47:22 +0000
Manifest next update:     Sun 04 May 2025 01:47:22 +0000
Files and hashes:         1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: HxSwig2Vyrey/yFOfMh4x2bBSzj2Mtr05kBv8rGfPM4=)
                          2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Egpt85Bsf5kWSWtNXpqMNLatnMSOJIPanv27yDq/XqU=)
                          3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: ADxX0D+lzszOhRPseNyCwu5NvY04yEDNXyF78vVWZ4E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl
                          rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B
        Validity
            Not Before: Apr 27 01:47:22 2025 GMT
            Not After : May  4 01:47:22 2025 GMT
        Subject: CN=680d8cab-9cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:de:07:38:14:59:b2:89:c1:b8:60:52:54:
                    4e:7f:15:cb:6e:ec:45:b4:6d:e7:d2:51:70:da:aa:
                    af:1d:9d:1c:e3:71:cd:b7:5f:63:78:73:51:11:62:
                    0d:67:e8:57:52:09:95:8b:68:d7:1a:ec:b9:ce:bf:
                    95:e0:80:ca:2b:29:6c:d3:94:93:3a:af:bf:8b:0e:
                    0a:7c:c5:7d:78:11:33:6b:8d:0a:9a:3b:a0:54:f1:
                    b8:7a:32:1a:42:3e:98:da:52:2f:9d:ac:90:c6:86:
                    44:25:38:77:a6:6a:3c:95:43:0e:50:e3:86:41:23:
                    e7:04:02:f6:1a:6b:11:05:44:fb:20:87:a3:4b:df:
                    d0:d4:23:1f:a0:a2:28:57:3c:46:fa:fa:2e:5e:04:
                    87:9d:a8:b5:78:e4:b0:7e:a8:a3:77:78:76:cf:33:
                    69:13:97:b8:1b:71:79:c8:c9:9a:fa:a7:e9:38:06:
                    36:41:95:e5:d2:22:c2:55:a8:47:a6:41:9d:ab:61:
                    88:65:9c:a9:8a:db:22:7d:45:bd:15:ad:29:8b:13:
                    1d:d5:c1:24:6b:16:aa:2c:e2:02:60:55:5d:75:84:
                    bc:6c:16:de:73:bb:36:e6:fa:9d:2e:b6:2d:bd:2b:
                    19:65:3b:33:05:e9:2a:cb:27:b0:09:ed:94:fd:52:
                    c5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:15:BD:C6:43:0A:A1:14:BA:6A:65:6A:D3:5D:15:A9:59:35:35:F5
            X509v3 Authority Key Identifier:
                keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:73:3e:dc:c1:fe:39:eb:15:ce:93:53:82:f9:18:a9:c6:24:
         65:a0:67:da:93:8c:d6:8e:0c:92:c6:64:5b:ab:ea:74:36:58:
         65:45:42:4d:71:25:aa:3f:fb:7a:53:da:e1:8f:16:49:7d:ef:
         63:dc:0f:e0:f8:be:0b:66:62:65:58:84:52:e7:a0:ee:6f:ee:
         ba:3b:34:4f:63:39:cc:13:9e:7c:bd:bc:ea:f0:67:f5:a4:9d:
         d6:a1:08:86:e8:f2:db:03:07:e4:e3:55:a1:aa:9b:41:fa:6f:
         f9:f6:da:1f:59:50:3c:69:7a:34:03:17:9f:f3:83:7d:cb:b4:
         d0:16:16:2f:ed:95:12:55:d5:26:66:6c:96:37:c6:0c:ac:f1:
         50:8d:a7:66:50:76:18:a8:23:82:d4:80:9e:9f:e3:42:0a:76:
         ee:87:1d:f2:75:1a:0a:a2:dd:ff:e7:58:6c:3a:c5:25:b3:0b:
         15:66:ba:f3:d3:2c:c4:14:c8:e1:41:90:33:fc:3b:77:db:04:
         1d:37:15:4d:20:25:1a:48:59:b1:8e:2c:ef:19:c8:c5:3a:8d:
         0c:a0:8f:eb:d2:57:c3:3d:4b:b2:7d:ea:af:81:f1:8b:0b:69:
         75:3a:04:13:95:40:61:90:a7:8b:4e:78:e2:8c:1e:66:dd:7f:
         29:01:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net