Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File:                     dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier:          R8l+f5ap0tl1f6WaDoSRXe7TKsU1VvU5F1/85tiM1nU=
Subject key identifier:   9F:E8:66:C1:88:72:66:38:C5:28:BB:2D:60:C0:E2:8B:70:86:05:4A
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer:       /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial:       05C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number:          05BE
Signing time:             Sat 26 Apr 2025 22:45:38 +0000
Manifest this update:     Sat 26 Apr 2025 22:45:37 +0000
Manifest next update:     Sat 03 May 2025 22:45:37 +0000
Files and hashes:         1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: evYGNq7NLtbKbowr8i17LySIX3Ofz7oucHGPwjj57O0=)
                          2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
                          rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
        Validity
            Not Before: Apr 26 22:45:37 2025 GMT
            Not After : May  3 22:45:37 2025 GMT
        Subject: CN=680d6212-dbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:fa:96:6f:37:88:91:7a:2c:30:42:ee:da:
                    c1:df:c8:dc:aa:1b:76:30:76:ec:1d:89:7f:8d:3e:
                    e1:93:d2:c7:7d:47:b5:52:e6:84:09:f6:6d:3d:bf:
                    a3:71:7e:ec:18:dc:76:f5:56:68:06:2e:79:2f:e8:
                    90:db:e6:82:8f:8f:10:d7:61:8c:1f:e6:45:be:ba:
                    eb:3c:4e:ef:22:ec:8a:47:ab:b2:01:10:74:87:e8:
                    09:fa:79:de:2e:b1:ae:e0:bf:c6:6f:4d:ef:4e:3b:
                    50:62:d5:b7:c0:39:3d:ed:f1:df:68:5b:02:a0:bd:
                    40:ab:67:c4:d5:b9:ad:5e:8e:fe:b0:c6:86:1a:4e:
                    c9:15:e4:e4:35:02:f7:9a:bd:64:42:2b:8b:a3:90:
                    73:34:f0:7b:1c:f5:7a:a1:9b:2f:18:d2:02:5b:92:
                    ea:77:b3:8e:93:d0:b1:10:e2:c8:40:59:af:5d:4c:
                    73:87:91:64:f3:9f:28:65:18:71:a5:cc:72:c5:8e:
                    fd:fe:19:58:74:65:10:46:f1:8a:d4:3f:14:18:21:
                    80:7a:c7:8b:d1:45:78:08:b2:cb:d9:44:cb:84:b3:
                    5a:88:42:fa:4d:35:67:07:96:b0:36:b7:4a:45:93:
                    6e:f1:6d:0b:b5:d5:61:55:5b:53:72:ff:f0:9e:9a:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:66:C1:88:72:66:38:C5:28:BB:2D:60:C0:E2:8B:70:86:05:4A
            X509v3 Authority Key Identifier:
                keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:f2:64:a9:3b:7d:91:ab:46:49:4a:06:bf:38:c3:6f:93:
         4e:a7:ae:66:42:2e:7e:97:75:eb:a7:1b:8b:2c:ea:ec:24:cb:
         af:f6:fd:e3:e8:d0:3d:ee:b1:e6:11:e8:f1:00:df:69:89:66:
         f3:38:95:ea:d1:bf:c6:4e:8d:30:9f:c3:2c:27:1a:34:86:04:
         31:2c:82:72:57:19:c5:ea:31:85:01:39:2b:89:6f:ef:3f:6b:
         b3:4a:a0:37:58:05:56:a3:fe:98:34:dd:c7:c4:dc:d6:9f:5d:
         fb:59:7f:3a:20:cb:52:aa:ba:66:96:21:ef:45:54:72:af:d0:
         b6:29:d9:f0:69:69:aa:84:92:c7:53:a5:a1:c2:3b:a4:a1:96:
         79:5f:d0:16:1c:3a:2b:3a:71:f6:2a:32:e6:43:fd:87:f8:f7:
         30:6f:81:8c:95:42:36:ce:e7:c7:ef:cc:41:df:3f:39:ff:87:
         24:06:fd:b2:e1:33:6d:5f:3f:7e:92:b5:df:d3:57:75:5a:83:
         cf:77:41:af:d8:12:6f:7a:c1:1f:08:86:3f:07:91:45:f5:a3:
         01:e7:17:a7:9c:45:02:35:36:1e:f6:b8:9a:33:17:25:22:f9:
         cb:4e:bc:b1:1d:a6:e9:ff:a2:04:d9:e1:83:b8:43:f3:be:89:
         6d:6a:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net