Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File:                     LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier:          EWzDp/zYdv0RHbBfRhnS9vrAO5vZ91zeOLkNLzHn/Xw=
Subject key identifier:   43:5B:D8:09:C4:74:69:8F:81:E7:76:F5:4C:3D:FC:49:A4:7C:56:F3
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer:       /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number:          E6
Signing time:             Wed 23 Apr 2025 04:32:36 +0000
Manifest this update:     Wed 23 Apr 2025 04:32:36 +0000
Manifest next update:     Wed 30 Apr 2025 04:32:36 +0000
Files and hashes:         1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: uDLl1McgXM+BLgS86cIByVTOizMgvJsueEVrFYhyM7c=)
                          2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
        Validity
            Not Before: Apr 23 04:32:36 2025 GMT
            Not After : Apr 30 04:32:36 2025 GMT
        Subject: CN=68086d64-2f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:d0:82:37:e8:26:a0:bc:a4:dd:6b:f1:7c:
                    af:f3:bd:c2:65:22:02:1d:16:3c:d5:82:a1:e6:2b:
                    cd:58:e0:8a:2d:a6:e2:da:4f:98:fb:c2:90:3d:e9:
                    27:a8:9c:2a:31:01:96:d8:5c:2b:d3:c3:89:ff:42:
                    31:4d:00:1e:81:13:49:0e:9f:a1:3b:bb:dc:9b:38:
                    ed:0f:dd:a7:80:48:78:bb:e5:ae:ee:29:d1:9c:ec:
                    db:b4:89:3a:ac:b6:1a:6b:d4:e8:52:e1:80:56:9e:
                    61:16:47:73:d2:d7:3b:8d:66:4f:73:41:c7:fb:6f:
                    da:33:2f:b5:3a:c3:b1:92:ec:eb:61:d4:47:5d:99:
                    6c:ac:d0:05:87:a2:d0:97:0a:32:9f:85:8a:69:50:
                    f7:e8:ed:b8:14:26:93:8b:ce:c3:50:6e:e7:bc:1d:
                    f0:3b:07:a4:96:20:8c:8d:e9:57:b0:9e:9c:e2:25:
                    91:1f:44:89:59:ae:4d:74:b2:25:0a:fa:19:29:d2:
                    1f:f3:64:db:ae:73:c8:e3:8a:8a:6b:8e:58:33:06:
                    e5:cc:62:dc:12:b5:e6:d9:c6:89:a5:a2:4f:7a:26:
                    c6:79:ec:87:ca:4d:73:22:ac:19:e8:34:24:63:9a:
                    41:8e:33:df:60:26:94:03:0c:d9:ad:2d:71:4e:48:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:D8:09:C4:74:69:8F:81:E7:76:F5:4C:3D:FC:49:A4:7C:56:F3
            X509v3 Authority Key Identifier:
                keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:a4:e3:ad:99:a0:0e:4d:32:68:61:20:d3:f1:b4:a5:66:
         b7:f5:0c:b3:60:1a:55:d4:9d:a4:18:79:ce:6f:0b:38:e0:79:
         6a:fa:1f:a9:a3:21:19:99:a7:aa:00:e1:d3:91:cd:02:7a:50:
         d7:40:0d:d8:70:f7:99:40:77:5e:d2:99:55:fd:d8:f3:6e:c2:
         dc:17:e3:6f:ef:50:49:55:44:74:61:a0:f1:c1:1f:42:09:1b:
         1c:4e:f5:e7:5b:7b:a0:d5:22:5d:29:5c:8b:ce:6b:9e:05:04:
         99:ed:ad:ba:1f:38:71:b9:06:33:51:a0:3e:02:28:42:03:2f:
         28:39:78:0b:05:da:c9:a8:08:f6:ce:15:cc:54:18:7c:68:11:
         27:ef:b4:df:0a:1a:cc:42:e6:d1:01:19:d1:83:fb:33:cf:c9:
         34:7d:99:c1:97:4d:9c:32:cf:6d:54:4c:cc:57:d8:a7:10:ee:
         11:99:76:73:d4:19:b9:3a:4a:21:82:c6:54:c8:f6:8a:ed:2e:
         b3:9c:8c:e2:de:3e:26:c5:fe:e5:de:a0:f7:e4:49:a9:8a:c1:
         2a:08:e6:85:be:f2:5f:27:4c:b9:1b:09:c8:21:88:b0:af:d7:
         b2:47:7c:f2:20:4e:07:09:88:fb:d3:ee:39:4d:3f:8d:aa:51:
         89:76:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:36:03 2025 by rpki-client on console.sobornost.net