Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
File:                     B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft (raw, json)
Hash identifier:          u+Gp+BSx1DOySj1hQAG/FLmm6lD4MNka3Og+jVWJJ4E=
Subject key identifier:   D6:E9:2B:F4:24:3C:D2:F3:C8:44:D8:7E:9B:C4:6F:27:B0:CC:BA:D7
Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7
Certificate issuer:       /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
Manifest number:          0133
Signing time:             Sun 27 Apr 2025 03:27:18 +0000
Manifest this update:     Sun 27 Apr 2025 03:27:18 +0000
Manifest next update:     Sun 04 May 2025 03:27:18 +0000
Files and hashes:         1: B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl (hash: I53ykRFc6s/1A88fWzhXtbtZM4jQ8DDgoxgpfqCZnrg=)
                          2: 76817340537011EEB43BD523C4F9AE02.roa (hash: jAD/7lg+++i+O4y1RlntCcfLaxTpo5Pzuq6OqBjjXF4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5FD, serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
        Validity
            Not Before: Apr 27 03:27:18 2025 GMT
            Not After : May  4 03:27:18 2025 GMT
        Subject: CN=680da416-242b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:44:98:8a:b6:1e:aa:f4:b1:ad:62:b5:1c:51:
                    7b:8b:ba:28:07:a9:bb:2e:ea:46:ac:ac:3a:7a:7c:
                    6b:86:d8:08:c3:c5:10:37:0f:a9:1a:07:60:df:4d:
                    37:3b:e3:6b:62:d7:be:a8:a9:83:75:35:a3:02:98:
                    4a:d6:c3:25:47:e3:ae:91:45:e6:ad:d9:79:64:2a:
                    8a:31:56:a0:a6:8b:83:03:96:16:d9:02:6c:8d:0f:
                    5b:73:28:42:f0:71:8e:94:2b:40:cd:d0:49:5b:1c:
                    8f:1a:4d:01:3b:03:4d:50:ef:4b:26:d8:d2:e2:1e:
                    19:1a:1a:bb:79:ff:17:99:47:a5:db:df:20:95:f9:
                    58:63:f7:49:a3:ae:73:1e:01:0b:d2:5b:ce:dc:37:
                    25:30:43:80:46:32:6b:6b:af:60:ba:d4:57:98:5e:
                    0a:2e:ed:ca:d9:fa:d0:6b:77:da:03:98:fe:9c:6a:
                    b6:da:fa:9e:da:3c:dd:6c:2a:5c:c1:4b:8d:ee:87:
                    5c:ed:3b:2d:d0:69:e7:2a:49:1e:61:d8:3a:76:e9:
                    b5:81:9d:04:14:f5:0c:f2:b9:99:e3:7b:02:fe:dc:
                    6e:4d:e1:f9:ee:0c:f6:44:2b:04:f0:60:9d:e2:57:
                    40:ab:d3:3c:7c:3f:e0:56:93:e0:93:44:8f:ce:58:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E9:2B:F4:24:3C:D2:F3:C8:44:D8:7E:9B:C4:6F:27:B0:CC:BA:D7
            X509v3 Authority Key Identifier:
                keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cb:1c:8d:d1:ae:fb:86:5d:30:44:13:38:ee:f1:04:d0:96:
         70:e8:1b:7d:28:94:ef:19:28:c7:cd:94:3d:ef:52:d9:75:23:
         0a:ed:e3:42:1f:6a:b8:28:11:5e:a8:aa:10:43:4a:29:b1:14:
         b4:da:08:c9:99:0a:f8:e4:42:0f:c6:46:f9:37:e6:3d:64:7f:
         62:c9:8d:67:a6:20:4f:1f:c9:e7:81:c3:8e:e8:b3:b8:6e:e4:
         12:e5:4d:2e:37:db:e8:48:db:a6:11:ac:7d:35:82:5b:ea:06:
         2b:ce:33:12:b4:9d:fe:fb:b3:76:d2:f4:19:c3:4c:83:04:f4:
         79:61:64:fb:09:06:a5:f4:e9:4f:cb:86:cd:98:4d:a2:f6:c9:
         33:1a:e4:9b:98:41:12:33:a6:da:3a:4f:4f:2a:e4:42:e1:2c:
         c3:d4:69:df:96:22:34:26:d3:8e:9a:5c:35:7c:bc:2e:c8:fb:
         5e:cf:88:6d:b5:df:7f:34:ae:7c:30:39:d3:d6:8b:96:a7:70:
         44:ef:22:b7:e8:30:c4:7e:c4:fa:d3:c8:ea:42:c6:5b:81:91:
         30:aa:06:1c:db:d5:d8:61:ed:55:df:07:45:54:02:d8:4d:f9:
         70:05:17:eb:63:c0:65:9c:da:28:a7:69:24:91:7f:be:94:d7:
         cf:ca:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:13 2025 by rpki-client on console.sobornost.net