Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          kNeeYUMrPhKWCekgYpFC+1rlKXdulRQRlnze16DPHqw=
Subject key identifier:   B6:70:41:22:39:53:6F:50:2D:1A:06:1C:08:B1:F5:01:45:A7:EE:CA
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       05E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          05CC
Signing time:             Sat 26 Apr 2025 22:46:31 +0000
Manifest this update:     Sat 26 Apr 2025 22:46:30 +0000
Manifest next update:     Sat 03 May 2025 22:46:30 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: u07x0/LFhc4EmMduN8xTG+sISYjU2bFjPhIZ/rg/RqQ=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: Pea43XyYLdD57bd2jMcFm5++NRhrK6aAEARYz2ZZaTI=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: byFCEX/cfxkLVHdJ69qb/hcxv5zL8EwxRt2sj7xuv/w=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: w21kT3wxQZFfqU1ntFUJE5r1+DTM2tACmKEPJfh1Bvo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Apr 26 22:46:30 2025 GMT
            Not After : May  3 22:46:30 2025 GMT
        Subject: CN=680d6246-bdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:4d:c9:33:5c:0d:16:d3:bf:a3:0d:46:d8:
                    cd:50:9c:1f:1c:3b:3a:98:34:45:c2:d1:97:1a:92:
                    29:88:a4:2f:1f:02:51:5a:44:d7:dd:c1:37:c6:14:
                    74:dc:65:d6:d6:6f:e3:72:14:5f:b9:ae:7e:26:ba:
                    1f:16:6a:1d:e7:3d:50:77:ac:22:45:f1:2f:2f:e9:
                    e7:fa:a5:91:0e:b5:97:7c:8c:2e:97:82:3e:1c:90:
                    25:45:20:9b:b3:71:d4:ad:7d:b2:b3:e4:89:21:22:
                    4b:53:37:b2:e8:68:c6:e8:f2:ef:f7:78:1c:ea:e6:
                    3c:5a:64:16:f5:d1:62:b2:1e:cc:1e:7b:d9:ae:b6:
                    b7:a7:3d:03:50:76:61:3d:30:d1:8a:8d:29:8e:1f:
                    d8:65:d5:3a:f4:84:cd:5f:2a:20:39:d3:7b:a4:8c:
                    16:d0:45:11:3f:48:5a:64:46:3f:e4:87:24:cd:c6:
                    c4:6e:b3:b9:9d:18:de:03:7d:21:be:18:1b:82:b2:
                    59:c9:57:70:c0:2f:45:54:94:bc:9e:1b:12:1f:b4:
                    a6:1d:bf:f2:e8:a0:81:de:85:e0:38:78:a3:5c:1c:
                    73:fe:ec:78:fc:ab:40:ce:9a:2f:9b:a6:4b:3b:17:
                    4a:7a:69:27:6f:e8:17:e5:9a:9f:89:ec:4b:e2:89:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:41:22:39:53:6F:50:2D:1A:06:1C:08:B1:F5:01:45:A7:EE:CA
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:b5:46:92:1c:39:2c:8c:96:49:48:a5:1b:1f:27:3b:b9:
         fb:41:f8:34:43:7a:63:da:1b:00:2c:c3:32:8f:d6:5a:9a:20:
         5e:0f:11:69:31:9b:a1:ed:53:7e:39:13:1f:f2:70:dc:5f:55:
         08:e0:e9:13:78:08:53:c3:0f:df:8f:37:a3:89:32:ea:6a:9d:
         3e:2d:e1:a5:a1:65:97:dc:7b:89:48:aa:53:f7:0e:61:50:e3:
         fa:5a:b7:27:b7:f4:e8:ad:83:a4:78:e4:f7:bf:27:5b:8a:b2:
         1c:2b:97:32:e8:0d:f6:44:da:1e:c3:3c:69:62:38:31:34:23:
         01:06:d2:68:7c:78:7c:f2:77:3f:e9:3f:fa:8a:81:03:c4:2b:
         91:3c:e3:1b:33:32:45:4f:8b:ed:4a:fa:9e:55:62:62:47:09:
         08:98:bf:cf:b5:da:16:25:06:55:af:8c:62:55:23:c2:70:a9:
         7c:6a:44:cc:57:8e:be:cb:f6:c6:12:e2:82:81:79:45:68:37:
         86:c1:12:89:14:d7:cc:8c:60:0a:6a:0a:71:88:9e:00:1c:fa:
         ad:a3:82:bd:40:03:08:d2:bf:5d:4d:25:a5:29:ed:a3:d5:63:
         33:37:4f:ff:f2:e6:be:c5:ff:f5:fd:7f:76:09:a7:81:a4:63:
         71:0b:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:14 2025 by rpki-client on console.sobornost.net