Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File:                     sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier:          PA0Y1u8tZunZjPMTbeL+Cus6J1KYucKHvCqq+0OYqaY=
Subject key identifier:   DE:40:C9:EA:92:CB:B4:C1:1C:1C:AB:CA:DF:6D:BA:41:41:81:52:5E
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number:          0243
Signing time:             Sun 27 Apr 2025 01:37:29 +0000
Manifest this update:     Sun 27 Apr 2025 01:37:29 +0000
Manifest next update:     Sun 04 May 2025 01:37:29 +0000
Files and hashes:         1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: NyrjC4JICaAotUrfCz64fnQb9f93VxZlrTeU60itlkw=)
                          2: E309B1883C9711EF88C2B284C4F9AE02.roa (hash: w51TUZ9aKXo3NJmk6dhABfqfugO3+EeHqPsN7Ek6pSc=)
                          3: 8673F05C816911EF9022F40CC4F9AE02.roa (hash: Lvob14CywzAMuxThU8EVo51F2cECjcbnduJBtYIJSBI=)
                          4: 4E65B594D35711EEB8F04828C4F9AE02.roa (hash: oF0KHM0s6qEdjrzJyCovkn3VK6S/rVe2wxmJbXBONNA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: Apr 27 01:37:29 2025 GMT
            Not After : May  4 01:37:29 2025 GMT
        Subject: CN=680d8a59-8b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:0f:23:68:21:ac:dd:11:0d:15:9d:bb:8b:
                    2b:ba:13:1b:3f:8a:82:29:d5:e1:c2:e6:cf:84:18:
                    1f:d5:48:f6:ee:4f:03:29:a1:ca:a5:b8:c1:7c:5c:
                    f5:6a:1a:de:6a:5e:f8:3a:c3:cf:10:10:a6:19:88:
                    ea:65:5b:6f:de:bc:92:b9:1e:93:82:eb:5a:78:ac:
                    f2:f8:e7:2c:86:94:bd:c5:6d:85:70:27:cf:0d:32:
                    d6:f8:8e:f9:83:3e:b4:45:af:78:21:8b:70:51:8c:
                    d0:3a:a4:40:58:0f:94:6e:53:05:44:fe:b5:b7:7b:
                    72:6b:8a:de:72:4e:44:40:ae:32:e2:3e:db:4d:e6:
                    a1:1b:03:21:e0:6d:5a:f4:3c:94:5a:59:77:22:e8:
                    7a:e4:d6:88:9f:c0:65:a7:2d:3e:4f:d6:6f:47:f8:
                    9f:2a:9c:9e:53:8c:53:3b:b8:63:57:9a:d1:d5:26:
                    c3:a9:c4:6c:3e:4e:fc:76:a7:4d:16:97:34:1d:49:
                    f0:69:0c:dc:a8:36:a5:56:f4:28:13:4f:a4:4f:3e:
                    b4:ee:09:99:26:cb:81:db:07:7f:e7:69:8e:72:f6:
                    a7:5c:91:d6:2d:e7:e4:29:f6:d4:f0:11:e0:54:c9:
                    1e:ca:13:77:1a:93:5e:db:f1:3c:aa:9b:61:63:9c:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:40:C9:EA:92:CB:B4:C1:1C:1C:AB:CA:DF:6D:BA:41:41:81:52:5E
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:50:5e:5d:9f:91:aa:ad:ac:ba:5e:27:67:c3:dc:0e:e2:
         2c:ac:78:7c:a1:2d:7a:64:db:c9:f9:ae:30:fd:38:fe:9d:57:
         eb:d7:fb:b2:03:4d:b6:8f:1a:d9:de:b3:9e:51:c6:1d:e5:d7:
         a9:ee:d0:f5:a2:b0:e5:eb:ac:c1:85:54:fa:e1:b3:8b:25:d0:
         fc:62:1e:d5:01:29:13:07:d9:71:70:d6:ec:4a:9a:a8:06:a6:
         55:ef:65:2e:26:28:d3:ba:f9:53:44:2e:d7:d3:ee:97:0c:66:
         d1:5e:45:a2:4e:bd:f4:23:ea:63:fd:30:0a:17:68:f4:11:8e:
         ac:bf:0e:96:24:96:d8:3a:7d:a7:e6:4e:09:1a:2b:d5:9d:ca:
         8c:2d:d5:94:f8:2c:52:f8:db:e8:9b:24:51:5b:f6:15:12:0a:
         0c:50:7c:ec:ec:b7:9e:d6:df:ec:a3:fd:18:68:8a:85:d3:c2:
         50:94:fe:78:1c:7a:da:4b:88:ca:6c:31:91:a9:7c:38:4b:30:
         e6:9d:f4:6c:1c:e6:40:5b:e2:d8:2f:1e:9c:07:11:e5:fa:2d:
         db:15:3e:97:e3:bf:b3:9a:a7:31:1d:1d:d5:18:41:c8:90:cd:
         f3:a4:c1:da:54:14:90:43:c0:16:b1:41:b9:2c:3c:9c:20:66:
         35:6a:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net