Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
File:                     906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json)
Hash identifier:          6Og3XsZkgI27ASnibn2JX1nRkiFqLfneEehT7SX8z8A=
Subject key identifier:   B2:49:B6:44:02:34:8B:7C:41:FC:46:EF:C8:78:6F:95:6C:1C:2E:95
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
Manifest number:          0184
Signing time:             Sun 27 Apr 2025 02:38:36 +0000
Manifest this update:     Sun 27 Apr 2025 02:38:35 +0000
Manifest next update:     Sun 04 May 2025 02:38:35 +0000
Files and hashes:         1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: Of1lhYbc7cH+lDYrd+r9P9e6q8oM6tGldKWaJuht6bA=)
                          2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: XedbY/PZhCWJ5tz0Q2lxrhZqMoRjpB9GmAPtufUsPlI=)
                          3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: TNSpjF6OeReM48TkuI+F5DR9ql/RdBa28TlUz4BMXXY=)
                          4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: 91n8h6HxMc8aXrtFypfNv9JuSWJvh1SjeTFNOYTZOlg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Apr 27 02:38:35 2025 GMT
            Not After : May  4 02:38:35 2025 GMT
        Subject: CN=680d98ab-b6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:7d:e0:f2:9c:10:eb:20:14:c8:85:f0:5f:
                    70:1f:aa:69:60:03:5f:24:98:b5:d6:66:ef:40:9a:
                    0f:56:f5:0b:34:14:b2:c1:8e:b7:f3:07:ec:f5:06:
                    cf:21:30:a0:8e:ca:34:fb:3b:60:f7:b6:3c:a1:99:
                    d1:b0:ab:0a:72:b9:01:f6:2b:2a:08:8d:ec:4c:ff:
                    20:1f:54:d0:d0:9f:91:65:ab:8e:b7:08:1e:29:6b:
                    64:f7:56:20:4f:f0:5e:d2:bb:81:94:b3:3c:10:55:
                    65:a3:a2:54:65:4a:a7:e5:cb:22:78:d2:ac:f1:3a:
                    2c:73:01:66:31:66:b5:45:90:7c:15:f8:2d:72:84:
                    1e:14:cc:5e:86:69:53:5d:da:dc:ec:07:50:f8:12:
                    5e:a5:11:04:a1:7e:ae:4b:f0:e9:e7:d6:c0:8d:42:
                    ee:6c:b3:02:a5:d9:fd:32:0d:f0:f7:7a:c9:4b:c9:
                    ad:27:a8:ab:e5:76:1c:62:aa:37:50:db:d9:96:bb:
                    b6:55:0c:f8:4e:e6:79:dd:a3:03:d9:a0:89:8a:ea:
                    2d:83:1d:a0:c4:21:87:14:ad:ca:00:95:ef:ca:3b:
                    65:72:bd:03:60:c2:a2:a5:b4:8e:a3:53:d4:87:0e:
                    57:23:74:3d:a6:49:f0:9d:75:f1:4f:a6:10:ce:ea:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:B6:44:02:34:8B:7C:41:FC:46:EF:C8:78:6F:95:6C:1C:2E:95
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ea:22:24:7c:dd:1a:bf:4a:c3:4e:62:aa:2f:82:b2:00:8a:
         f8:25:3f:32:c1:a1:bc:11:33:aa:5d:71:0f:06:98:32:d3:af:
         33:46:23:9a:fb:4d:ed:20:ee:71:47:9f:38:f8:ec:f4:7f:37:
         21:30:c1:d7:45:01:5f:3a:df:d1:3c:8a:d0:a6:ee:fc:f9:70:
         d8:fb:02:e3:22:78:b1:ac:8d:ed:77:68:44:fc:54:3b:aa:1c:
         2c:ef:29:8e:8c:cf:e5:5e:77:86:a9:49:98:ac:9f:2f:e7:b5:
         e6:c3:d2:46:9d:38:eb:f0:97:ca:15:48:4a:6d:82:84:8d:5a:
         14:91:e8:7b:3e:9e:a1:d5:b8:65:fc:e4:cd:52:d4:78:27:fd:
         28:39:4f:da:2f:b3:2d:3f:5c:c2:ff:42:ac:0b:a1:70:20:f9:
         d1:da:52:63:a2:8e:3b:8e:69:0c:6f:67:ae:f4:d1:99:9a:a9:
         4c:41:e0:3b:cf:59:9d:2e:53:03:40:36:37:ff:cf:8f:0a:d6:
         81:eb:f9:e4:ba:20:b2:9e:82:2d:dc:31:dc:64:44:08:81:37:
         e0:04:87:3c:4b:54:8d:f3:ed:53:f9:24:d2:f1:56:fc:ba:9b:
         6b:d0:3a:ea:b0:ec:06:65:37:0f:cd:ae:f9:3f:bf:a9:fc:0b:
         2b:c3:26:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5
Q0YzNDg1NEQwHhcNMjUwNDI3MDIzODM1WhcNMjUwNTA0MDIzODM1WjAYMRYwFAYD
VQQDEw02ODBkOThhYi1iNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSJ94PKcEOsgFMiF8F9wH6ppYANfJJi11mbvQJoPVvULNBSywY638wfs9QbP
ITCgjso0+ztg97Y8oZnRsKsKcrkB9isqCI3sTP8gH1TQ0J+RZauOtwgeKWtk91Yg
T/Be0ruBlLM8EFVlo6JUZUqn5csieNKs8ToscwFmMWa1RZB8FfgtcoQeFMxehmlT
Xdrc7AdQ+BJepREEoX6uS/Dp59bAjULubLMCpdn9Mg3w93rJS8mtJ6ir5XYcYqo3
UNvZlru2VQz4TuZ53aMD2aCJiuotgx2gxCGHFK3KAJXvyjtlcr0DYMKipbSOo1PU
hw5XI3Q9pknwnXXxT6YQzupHPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJJtkQC
NIt8QfxG78h4b5VsHC6VMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz
OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n
ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAf6iIkfN0av0rDTmKqL4KyAIr4JT8ywaG8ETOqXXEPBpgy068zRiOa
+03tIO5xR584+Oz0fzchMMHXRQFfOt/RPIrQpu78+XDY+wLjInixrI3td2hE/FQ7
qhws7ymOjM/lXneGqUmYrJ8v57Xmw9JGnTjr8JfKFUhKbYKEjVoUkeh7Pp6h1bhl
/OTNUtR4J/0oOU/aL7MtP1zC/0KsC6FwIPnR2lJjoo47jmkMb2eu9NGZmqlMQeA7
z1mdLlMDQDY3/8+PCtaB6/nkuiCynoIt3DHcZEQIgTfgBIc8S1SN8+1T+STS8Vb8
uptr0DrqsOwGZTcPza75P7+p/AsrwyYb
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net