Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          Env6avm5T04OvRe5wXssCmCPlijiQpv5zB8PPxTC20Y=
Subject key identifier:   AC:56:50:9E:56:1A:6F:03:AD:69:F3:38:B6:EA:FE:5D:CD:2E:20:04
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          011A
Signing time:             Sun 27 Apr 2025 03:47:06 +0000
Manifest this update:     Sun 27 Apr 2025 03:47:06 +0000
Manifest next update:     Sun 04 May 2025 03:47:06 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: 5eZ4c2PRpk3jB5/+YcgIMDyhxMoRBQpDG3SbVJsUhFA=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Apr 27 03:47:06 2025 GMT
            Not After : May  4 03:47:06 2025 GMT
        Subject: CN=680da8ba-4128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:83:cb:69:a3:5f:8a:03:4f:52:d2:e0:29:
                    62:ad:04:e9:b5:cf:3f:85:95:cb:f3:d7:fa:f7:6c:
                    62:96:aa:98:e2:b7:41:15:85:b5:c2:b8:b2:6d:80:
                    65:c9:eb:63:ad:88:01:7d:35:45:b3:56:bd:ba:c5:
                    c9:76:9e:75:17:65:3c:64:79:4c:10:8a:9a:cd:83:
                    31:a5:6c:e0:13:69:17:5a:c9:6e:2a:c4:fa:ea:18:
                    0e:1c:fa:93:20:93:0b:d4:7b:0a:e6:5a:29:33:f3:
                    70:0a:d5:e4:ef:56:a5:9e:04:28:ab:b9:af:39:78:
                    28:71:28:c9:5c:7f:4a:f9:a9:ce:77:42:b7:57:b9:
                    2a:32:bd:46:54:51:fe:2b:7e:96:00:7e:dc:53:c4:
                    7d:4a:50:eb:44:6f:7c:0f:48:4c:3f:47:76:1c:11:
                    5a:11:5b:4d:2b:40:a9:1f:ee:b1:d8:21:94:5b:d7:
                    6e:60:14:1f:ff:64:12:37:bc:e3:67:78:1b:e6:21:
                    97:bb:53:a6:43:a0:39:2f:ee:32:2d:c6:29:46:ce:
                    b8:25:9d:01:13:3c:9c:0b:fc:c4:f5:44:0a:f7:5f:
                    33:7f:d6:5e:d2:cc:c8:b0:20:d6:a6:cc:ea:a4:3a:
                    db:10:33:35:10:d7:45:fc:fb:9f:22:95:ad:a2:bd:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:56:50:9E:56:1A:6F:03:AD:69:F3:38:B6:EA:FE:5D:CD:2E:20:04
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2c:39:88:4e:24:74:e7:45:45:36:d4:13:ae:ed:db:89:04:
         92:58:ab:a6:fa:93:59:69:03:ef:18:f7:53:68:4b:58:82:66:
         e5:1b:c9:5a:ab:68:16:fb:ea:f3:72:de:d8:28:32:99:88:ab:
         b2:82:d2:a4:22:de:5a:e3:70:c6:40:88:fe:2b:e4:ff:9a:3a:
         15:48:83:c8:ff:51:18:76:05:35:92:05:35:c8:3c:8f:18:30:
         e5:94:ac:1f:13:52:95:ea:21:cd:90:1e:ae:9f:14:10:b9:20:
         5d:6c:6a:b8:94:bd:8b:92:3c:79:0e:3e:80:9f:58:9b:15:dd:
         d4:ca:b0:64:ff:4b:1a:11:25:29:3b:e9:fb:ea:f1:17:60:fe:
         55:2b:5d:04:dd:15:7d:fa:65:f6:44:64:c2:e1:3c:04:22:83:
         e4:50:81:5d:69:87:c2:e6:88:fc:d1:81:65:6a:56:c2:ec:c7:
         02:57:68:af:83:69:bd:57:73:1d:da:eb:c1:c8:b2:03:df:84:
         49:db:e2:ab:00:a1:19:73:9d:26:bf:be:0e:66:c8:f0:59:12:
         08:c9:30:f0:9b:96:55:2c:f3:58:dc:fd:21:e7:72:c0:82:18:
         4e:60:8e:a7:94:ef:5e:aa:02:ad:fd:da:3b:70:ff:a0:f5:c2:
         76:31:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net