Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
File:                     n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json)
Hash identifier:          cIpsh1MCT12UE+FZhvVQVBCqhL8KeKOwWFUCM4Zgv2U=
Subject key identifier:   B6:58:DC:BD:18:1F:F4:FB:A3:F5:EB:A1:55:21:F9:DA:7B:BA:91:EA
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Certificate issuer:       /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
Manifest number:          017E
Signing time:             Sat 26 Apr 2025 22:44:31 +0000
Manifest this update:     Sat 26 Apr 2025 22:44:30 +0000
Manifest next update:     Sat 03 May 2025 22:44:30 +0000
Files and hashes:         1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: VqWOc2zNpUUxLthy5jvMZ1UJb5n/EDwjIztkYWCe9x4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
        Validity
            Not Before: Apr 26 22:44:30 2025 GMT
            Not After : May  3 22:44:30 2025 GMT
        Subject: CN=680d61cf-64f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:0a:57:24:38:9b:6e:7d:4a:c3:e1:c9:17:
                    6b:09:67:6d:ae:59:04:16:0c:e9:e6:e5:de:37:6f:
                    cc:72:dd:04:b7:87:eb:b3:7a:b8:3a:aa:da:61:99:
                    75:f4:62:a4:f6:94:3a:60:46:59:3c:48:06:2a:85:
                    ec:92:35:d5:82:43:fb:b0:e8:1d:11:9f:2e:26:09:
                    34:d1:07:71:2f:a4:ca:c7:c8:de:27:2f:38:6a:fd:
                    35:b4:3f:77:b7:20:d9:f7:a6:0e:04:2f:2c:62:79:
                    d4:41:6e:a4:63:7c:d0:fc:1b:3a:46:26:bb:db:64:
                    58:93:c7:1a:95:48:0e:d1:77:a8:29:30:9e:cf:d5:
                    d3:b4:01:3d:e4:a1:14:9f:ea:c2:c7:ce:f2:c7:9a:
                    49:d5:a7:be:8b:cf:ba:07:b5:1e:ce:05:f3:dd:02:
                    d6:1f:3c:d5:89:90:1a:12:e6:a8:d0:eb:82:fe:45:
                    ff:cd:aa:ab:3e:39:a2:b0:c7:f9:bb:d8:99:10:1b:
                    dc:17:55:40:7b:cc:ee:79:62:fe:37:30:c1:b8:7f:
                    b7:0c:0c:24:59:c8:28:ca:74:f7:b4:44:08:be:9b:
                    d5:e8:f5:6e:97:10:45:98:8a:80:3c:78:bc:de:91:
                    05:e6:ce:c2:8a:0b:30:3d:d9:17:93:db:36:9f:11:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:DC:BD:18:1F:F4:FB:A3:F5:EB:A1:55:21:F9:DA:7B:BA:91:EA
            X509v3 Authority Key Identifier:
                keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:bc:e1:33:65:24:77:6f:62:c4:b2:57:77:31:b3:32:03:
         b1:21:46:c6:9a:3a:bb:4d:72:2f:78:89:58:f9:d4:bf:74:08:
         1c:04:52:e4:e3:b5:8c:0b:1c:f2:73:87:d0:d1:38:4f:9f:45:
         92:d9:21:0b:85:b2:d6:6d:0e:6c:41:aa:e0:f7:d5:ca:2d:94:
         16:de:f4:ab:79:7a:81:ca:51:dd:f9:d7:8d:e5:96:6b:71:92:
         2a:50:7e:11:1a:38:33:55:90:fe:c2:8a:be:55:5f:5e:65:44:
         30:94:f7:f6:c9:a4:5a:22:84:fb:06:f1:2d:31:1a:99:7e:fb:
         47:ab:4a:e2:cd:0c:d4:cb:3b:7f:df:0c:24:56:da:18:c9:47:
         a1:79:0f:6d:3e:17:f4:e9:e6:b9:04:16:a7:20:e3:1e:f6:44:
         8c:61:bb:8b:df:69:1e:68:fd:a8:37:bc:f5:9a:b7:a1:a7:d8:
         07:18:d3:6d:9e:4e:41:ce:60:00:cb:f4:c4:7b:7b:3e:ef:78:
         fa:ee:f9:4b:cd:77:f1:7f:e4:f6:7e:8e:ea:6a:c7:bb:cc:a6:
         78:76:55:e7:a9:15:ce:a4:29:09:c0:79:23:79:70:41:2d:3c:
         f9:fb:5f:f3:21:55:69:f2:18:e0:e1:93:81:46:75:43:30:de:
         b6:66:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net