Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
File:                     jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json)
Hash identifier:          VeNpjBtneNram7eYT8gQIc241wJJw8PVGXbXVlzuMyM=
Subject key identifier:   F7:92:89:62:51:17:91:69:45:34:B0:89:34:B1:6E:B0:8E:0B:BE:93
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Certificate issuer:       /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
Manifest number:          026A
Signing time:             Sun 27 Apr 2025 01:22:51 +0000
Manifest this update:     Sun 27 Apr 2025 01:22:50 +0000
Manifest next update:     Sun 04 May 2025 01:22:50 +0000
Files and hashes:         1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: DSan/OEm30/MnFc4y+bFT9PjQ6P0KG/N2xOy4j6y1/Y=)
                          2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
                          rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
        Validity
            Not Before: Apr 27 01:22:50 2025 GMT
            Not After : May  4 01:22:50 2025 GMT
        Subject: CN=680d86ea-b05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:49:42:2f:0e:94:c2:fd:e4:8f:ac:0f:48:83:
                    8a:73:74:30:c9:0e:a3:51:7d:21:83:16:95:fc:fb:
                    d2:f4:fe:b8:10:e6:1e:6e:db:e7:0f:68:8c:c7:a0:
                    90:25:01:39:e5:01:66:0f:c9:eb:36:e8:7f:13:db:
                    ce:c4:ba:30:fb:49:12:1f:48:75:53:fe:95:5a:4d:
                    2d:77:0e:85:48:7d:a2:5e:b4:70:8b:f0:df:d8:79:
                    15:e2:d6:aa:0a:94:f9:12:13:3f:50:f5:3b:38:25:
                    d0:56:e9:2f:7e:27:e5:7b:c8:33:64:51:0d:99:81:
                    d4:a3:a3:f7:56:27:d2:79:53:ce:21:01:2f:67:52:
                    c5:e2:8a:9d:c4:c1:e5:c8:6a:b7:79:78:f8:41:24:
                    45:46:82:d7:eb:15:2e:97:4d:22:ae:a0:ce:83:61:
                    1e:f1:a6:4b:b1:ff:2d:d5:03:58:26:0b:8b:2d:1f:
                    b3:26:42:58:a8:5b:8a:7c:01:52:ae:b2:57:65:5f:
                    27:96:7f:b5:67:e0:9a:f2:53:e5:76:51:de:4d:96:
                    ba:fd:5f:9d:d4:20:14:95:99:84:2c:b9:46:a7:59:
                    c1:f0:c8:57:72:79:a1:66:0e:61:e7:dd:66:81:27:
                    e7:3d:62:25:b4:49:5a:2b:36:14:fe:c3:0b:5a:02:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:89:62:51:17:91:69:45:34:B0:89:34:B1:6E:B0:8E:0B:BE:93
            X509v3 Authority Key Identifier:
                keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:52:a4:7f:e0:b5:75:46:39:1c:23:6e:a6:6f:e0:56:06:
         71:2a:76:6c:e5:88:a2:a5:82:84:01:c1:f2:e2:a9:06:95:fb:
         59:1b:07:a6:91:df:a9:90:27:08:b5:db:12:4e:4b:75:1c:63:
         38:24:87:40:62:c1:28:2f:d9:4d:0d:ae:8f:59:c4:73:5e:c2:
         61:a2:b7:a9:7b:dc:ce:81:38:54:99:1c:4d:fb:01:47:c4:7e:
         27:eb:a1:51:72:94:cb:fa:ae:36:af:cd:d8:ce:03:5c:36:c4:
         c1:57:dd:e7:bd:d4:d6:d5:d2:46:07:5d:04:b5:af:be:db:a2:
         16:14:39:76:da:1d:24:78:77:c4:e7:0a:7b:de:b3:0f:ba:2a:
         30:3b:bf:7c:34:fb:2e:df:00:15:45:53:ba:54:9c:12:30:1a:
         cd:65:ef:7a:55:0c:71:29:25:e0:17:c0:fa:18:07:86:4e:eb:
         a6:b5:0e:4c:11:0c:5a:ab:20:08:97:23:4d:09:84:d4:07:55:
         61:a6:3e:6a:5e:ac:77:a3:b9:fd:4c:62:95:c6:6d:09:be:d4:
         18:21:e0:5d:d8:4c:1a:8e:46:ba:8d:03:42:ee:c5:c6:4f:c4:
         f9:31:7b:ee:51:1a:05:80:ed:51:23:ce:81:c9:c8:de:0c:6b:
         f5:c8:f4:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE
MTc0NEM4REIwHhcNMjUwNDI3MDEyMjUwWhcNMjUwNTA0MDEyMjUwWjAYMRYwFAYD
VQQDEw02ODBkODZlYS1iMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4UlCLw6Uwv3kj6wPSIOKc3QwyQ6jUX0hgxaV/PvS9P64EOYebtvnD2iMx6CQ
JQE55QFmD8nrNuh/E9vOxLow+0kSH0h1U/6VWk0tdw6FSH2iXrRwi/Df2HkV4taq
CpT5EhM/UPU7OCXQVukvfifle8gzZFENmYHUo6P3VifSeVPOIQEvZ1LF4oqdxMHl
yGq3eXj4QSRFRoLX6xUul00irqDOg2Ee8aZLsf8t1QNYJguLLR+zJkJYqFuKfAFS
rrJXZV8nln+1Z+Ca8lPldlHeTZa6/V+d1CAUlZmELLlGp1nB8MhXcnmhZg5h591m
gSfnPWIltElaKzYU/sMLWgLVgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeSiWJR
F5FpRTSwiTSxbrCOC76TMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF
MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi
RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvMFKkf+C1dUY5HCNupm/gVgZxKnZs5YiipYKEAcHy4qkGlftZGwem
kd+pkCcItdsSTkt1HGM4JIdAYsEoL9lNDa6PWcRzXsJhorepe9zOgThUmRxN+wFH
xH4n66FRcpTL+q42r83YzgNcNsTBV93nvdTW1dJGB10Eta++26IWFDl22h0keHfE
5wp73rMPuiowO798NPsu3wAVRVO6VJwSMBrNZe96VQxxKSXgF8D6GAeGTuumtQ5M
EQxaqyAIlyNNCYTUB1Vhpj5qXqx3o7n9TGKVxm0JvtQYIeBd2Ewajka6jQNC7sXG
T8T5MXvuURoFgO1RI86BycjeDGv1yPT/
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net