Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
File:                     7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json)
Hash identifier:          gbmtG0DGVUIMYE4M4KJW0dEHd8/LENkwPGv+aFYkfsk=
Subject key identifier:   0C:4A:B9:C6:57:3B:71:11:98:FD:D3:7E:54:8B:4A:24:2F:06:C6:26
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Certificate issuer:       /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
Manifest number:          0179
Signing time:             Sun 27 Apr 2025 02:54:00 +0000
Manifest this update:     Sun 27 Apr 2025 02:54:00 +0000
Manifest next update:     Sun 04 May 2025 02:54:00 +0000
Files and hashes:         1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: 5pzS9GaWKUqAuZxVVeocKss/Am62+yImjCaOFrLR1Co=)
                          2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 0tzqO1CmigPSpz/MhhBtA7Y+BKnfbYyMKy+tv5IkgiA=)
                          3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: NKujXUGh0X/SkT7+y791gsNwYlUiCMjNSQHbtD/TZ7k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
                          rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
        Validity
            Not Before: Apr 27 02:54:00 2025 GMT
            Not After : May  4 02:54:00 2025 GMT
        Subject: CN=680d9c48-7120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:e8:12:44:4e:c1:c1:81:95:5e:62:15:07:
                    b0:28:37:41:9d:0a:ec:b6:c5:4e:67:66:e4:87:28:
                    3a:d6:ae:7f:1c:00:8d:79:1c:bb:ae:ee:20:65:3b:
                    81:72:26:94:8c:a1:0c:cd:f4:22:36:69:39:21:72:
                    01:03:0e:e4:1a:b2:47:a6:be:72:97:5e:16:37:45:
                    61:61:15:4d:f9:5c:9c:e2:3d:1d:fd:ae:ac:83:1e:
                    c6:98:03:6d:17:b2:8d:a7:1a:d9:8d:c9:b2:f7:0c:
                    00:66:c2:36:e8:87:48:a9:2b:d3:28:44:87:e6:84:
                    b3:62:4a:81:fa:56:23:d3:df:9f:ce:0a:f3:3e:62:
                    14:92:1f:c0:e5:28:c6:be:a6:28:34:28:34:e4:08:
                    52:13:54:6f:96:60:ad:7d:f4:2f:8b:73:b4:e1:a5:
                    94:60:0b:87:d4:39:ce:1f:df:6b:da:09:5b:5f:fa:
                    e8:f2:d2:7b:ee:8b:67:b5:7a:8b:67:28:ee:34:e0:
                    49:d9:37:44:56:e5:6b:99:a7:4c:2f:dc:5f:71:6d:
                    66:65:6d:bd:a0:28:d5:0a:9f:a8:73:43:fd:69:7d:
                    db:3a:40:61:d4:56:fa:46:6f:db:43:c1:52:85:92:
                    71:1d:e7:48:b7:74:29:98:6f:a1:62:3a:6a:09:e3:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:B9:C6:57:3B:71:11:98:FD:D3:7E:54:8B:4A:24:2F:06:C6:26
            X509v3 Authority Key Identifier:
                keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:ec:4d:6e:a4:41:aa:ec:fe:cc:2a:8e:aa:93:90:ca:45:
         e9:e1:fb:01:2b:57:cb:b6:54:7f:87:92:b7:2e:78:c4:0e:cf:
         2c:8b:ed:20:bb:25:a3:73:4e:3c:e2:92:ea:78:74:76:7e:8d:
         d9:6b:e0:2b:59:75:7d:03:84:f3:1e:48:6c:71:4b:6c:63:be:
         22:0d:77:14:e3:54:25:b0:30:df:69:b9:c1:b9:d4:dc:40:c7:
         e3:cd:ce:5d:cf:55:0e:6f:19:8d:01:75:74:d2:d3:45:a1:75:
         6a:4e:5f:f1:d2:4e:e9:6c:c7:bd:ca:e6:26:49:7a:24:1a:60:
         ed:bb:e9:e0:88:4f:90:fd:97:1c:2d:97:b8:65:ba:d7:77:02:
         1e:b5:79:6f:84:64:e5:6e:a8:11:ed:ed:f3:0f:d8:bd:ed:c4:
         de:13:e4:50:f0:44:a3:d5:09:62:22:b0:30:e9:30:82:dd:e1:
         60:fb:eb:4f:27:5a:d8:92:a8:53:32:24:ee:ec:05:1e:d9:b0:
         f2:37:5c:be:f6:85:af:ea:5d:52:ee:b4:4f:07:82:59:8b:8e:
         43:8e:24:da:c0:71:2c:c3:2e:4b:92:a6:a6:45:66:c8:f0:06:
         d1:3b:79:bd:bb:5e:eb:db:80:5d:d8:0d:6b:17:91:ce:69:77:
         13:49:cf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net