Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File:                     PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier:          tRpKqGTWP0QMmXc2QmQWzh9bBfQqzkkxmKDqvLosrPc=
Subject key identifier:   91:8E:F4:1F:05:85:DB:3F:68:8F:19:9A:1D:85:01:24:18:89:7A:E5
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       04BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number:          04A6
Signing time:             Sat 26 Apr 2025 23:39:22 +0000
Manifest this update:     Sat 26 Apr 2025 23:39:21 +0000
Manifest next update:     Sat 03 May 2025 23:39:21 +0000
Files and hashes:         1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: rjw9I9kOMI9hskbrFNJa1D8GhVqUn2l/qeQXIe4TK/s=)
                          2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=)
                          3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=)
                          4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Apr 26 23:39:21 2025 GMT
            Not After : May  3 23:39:21 2025 GMT
        Subject: CN=680d6ea9-d62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:42:8c:f4:ea:67:6f:d2:3e:94:9f:da:b7:
                    f5:a2:4b:06:de:ca:43:1f:37:21:3d:33:f2:7b:0c:
                    31:75:5c:25:92:f6:f4:f5:7a:97:fe:60:ad:55:d1:
                    c6:d8:36:46:14:d6:c6:57:0c:a6:00:de:c4:7b:52:
                    d5:84:52:cb:22:9f:4b:89:14:d8:8f:93:a1:66:30:
                    24:b6:82:de:11:fa:79:24:e0:99:74:7f:2c:9e:e2:
                    27:38:8f:d8:4e:cf:78:c0:1b:cb:55:f0:b9:f9:aa:
                    51:d3:20:2f:7e:f5:91:db:1b:6c:1e:46:52:9f:9d:
                    c8:3d:16:3e:e6:8c:a7:bb:3d:ba:24:ec:d9:d5:85:
                    38:72:67:04:f1:bd:a8:f5:1d:9f:6f:69:9a:e5:da:
                    e1:a1:e7:61:57:c2:51:43:1e:d7:ed:4e:e9:99:a4:
                    42:2c:af:1e:a7:06:81:f3:4f:80:19:01:58:8c:8e:
                    d8:40:e1:1e:82:d2:52:fb:74:a0:d4:95:a1:06:bc:
                    1d:43:ec:11:eb:db:5d:a7:9a:5b:1d:e4:1d:ce:2d:
                    fd:53:31:d4:88:52:6d:a2:a6:d8:08:aa:e5:d8:3d:
                    ae:c6:3d:8c:4d:ce:e0:05:20:76:53:25:e8:69:73:
                    94:78:dd:5d:64:97:83:b1:b9:43:4c:08:12:b3:99:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8E:F4:1F:05:85:DB:3F:68:8F:19:9A:1D:85:01:24:18:89:7A:E5
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:6b:41:a5:06:c2:46:0f:57:24:b8:98:a1:5d:17:59:2c:
         03:15:9d:70:d2:c9:07:98:ea:10:7a:b1:4d:fa:b3:e2:01:e5:
         8e:d0:48:0e:a1:f0:0d:81:6e:56:f0:14:cf:d3:59:6a:3f:b2:
         ac:5e:75:c3:a5:d0:33:89:43:8c:77:3f:3e:79:bf:98:91:09:
         97:da:f2:0e:eb:13:b6:85:94:0d:29:e6:d3:2b:79:4a:c4:4d:
         4d:f1:ac:1a:9c:d9:0c:a0:7b:79:df:82:9f:9d:d4:6f:1d:97:
         3c:68:b6:f5:06:f7:8b:f7:b2:b5:70:67:6f:8f:f6:8e:5e:ea:
         83:14:05:83:0f:39:8f:8f:0c:b9:23:4c:b6:57:d8:cd:84:fa:
         23:54:b5:ba:7e:c5:38:8b:d0:b7:fe:ab:ed:85:64:3a:0b:c7:
         13:63:65:b3:51:e2:1d:73:57:c1:a9:97:79:a9:66:c2:c4:02:
         94:ea:19:f8:40:4c:bd:c6:2f:72:d2:a8:64:f0:10:ad:a1:f5:
         68:8b:65:ac:66:04:2a:c8:11:49:ea:e4:93:07:dd:67:9c:f5:
         e0:06:b1:1d:b4:88:90:fa:51:5f:ad:e1:bb:0e:07:3d:ef:76:
         23:bc:ca:b4:c1:7a:04:04:70:31:ce:6d:bb:1c:65:56:95:98:
         47:84:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net