Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File:                     Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier:          +S3+tMSrxqzUFd7Et/cpp3dN60Y/rty1/EyHs6deIOA=
Subject key identifier:   EC:5A:75:4E:CF:66:A7:C7:A6:37:12:BA:FE:26:D8:B5:87:DA:71:BC
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer:       /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial:       084E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number:          0842
Signing time:             Thu 24 Apr 2025 20:38:51 +0000
Manifest this update:     Thu 24 Apr 2025 20:38:50 +0000
Manifest next update:     Thu 01 May 2025 20:38:50 +0000
Files and hashes:         1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: T9fnB2XYHt1/l6gJjaD1puxv/U8+6tRjyTusiQBW6FI=)
                          2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI=)
                          3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: f9tQPToB76p1pPXGROGF6QphrQQvfLBw4Gw3PGjwt1Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2126 (0x84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
        Validity
            Not Before: Apr 24 20:38:50 2025 GMT
            Not After : May  1 20:38:50 2025 GMT
        Subject: CN=680aa15b-0996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:0b:99:31:68:60:69:ab:fc:e0:8e:75:15:
                    51:d4:62:eb:ce:a4:22:97:9d:a5:24:39:f0:98:22:
                    45:70:8b:4c:77:28:82:a9:a7:21:65:34:62:50:3b:
                    e9:8e:0e:28:be:11:1f:ce:c7:93:92:43:21:2f:04:
                    c0:f4:ae:8b:ba:16:64:f6:6c:9a:94:5f:1e:89:51:
                    04:ee:30:36:c4:1f:37:33:fc:ca:41:cd:ec:63:07:
                    05:4a:80:22:6b:fa:5e:ea:2c:c4:b9:d9:a6:f3:23:
                    5c:05:63:c9:b5:90:b0:b4:fe:c0:27:89:32:04:8f:
                    06:a0:8d:fb:2f:bc:b1:5f:e4:b7:0f:cf:d3:7b:6e:
                    3a:97:4c:f6:f7:cd:3f:7d:5f:49:cd:ea:ba:c2:6a:
                    41:8a:2e:55:bd:d4:57:7f:0f:90:a0:ea:3b:8e:46:
                    2b:ab:c1:d0:ca:84:c5:bd:83:ec:91:3c:5c:f9:8e:
                    09:c8:81:45:93:de:3c:e3:f1:66:ed:92:22:43:68:
                    1e:3d:c5:9d:a8:3f:06:d9:6c:1f:cc:1a:6a:11:96:
                    af:93:9a:55:a0:76:74:97:92:ec:46:6f:55:e8:c5:
                    7d:a7:12:f2:e3:17:fa:45:24:a7:33:c3:91:85:9b:
                    48:6e:b7:5a:35:db:58:65:b2:e5:cd:71:7d:41:20:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:75:4E:CF:66:A7:C7:A6:37:12:BA:FE:26:D8:B5:87:DA:71:BC
            X509v3 Authority Key Identifier:
                keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:6d:97:5b:95:e7:27:43:7e:f3:81:22:71:bb:4a:fa:ea:
         a8:70:99:f5:3b:91:2a:01:10:2b:db:ba:b9:4a:5e:34:45:1a:
         e5:cb:56:38:75:a8:cf:dc:9d:75:6b:66:1b:49:0f:f1:54:86:
         c9:0a:a6:fa:a3:cb:40:24:33:f0:c1:a7:28:f9:75:98:6d:5d:
         17:45:64:3a:40:d0:98:05:53:90:b6:b6:b3:74:94:85:f0:de:
         03:3a:fc:41:13:39:5b:aa:ac:0b:63:e5:1b:16:33:d7:15:ef:
         6a:f8:d1:28:e9:f5:c9:dd:b8:b1:89:36:a4:64:b6:90:98:0a:
         17:82:4b:ea:9b:93:12:5d:f3:5e:4d:9f:2a:14:05:91:1d:33:
         6a:99:3e:62:07:9f:a5:2f:cc:64:64:ed:ac:3b:47:b4:fe:5f:
         17:86:77:0d:32:42:c4:51:ef:4b:9b:5f:eb:71:d6:23:2d:82:
         82:ef:42:49:bf:75:19:fe:ea:89:a4:b8:6c:78:c5:6d:d1:fd:
         88:5d:80:67:d8:01:09:44:f1:94:53:d8:72:73:92:59:53:b6:
         9f:3a:ca:43:22:38:68:dd:47:3f:7b:d4:bb:f1:c1:54:d7:49:
         7a:ee:c8:ee:6a:b0:7f:50:34:3e:b5:4f:12:df:ba:ec:0f:44:
         08:5d:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:32 2025 by rpki-client on console.sobornost.net