Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
File:                     w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json)
Hash identifier:          PnGmH+2ANQ7LxhhAbKw8Fo/t6p8bNj0bcoA5spmS3uo=
Subject key identifier:   13:C6:85:D2:ED:AE:2B:BA:97:E0:96:D2:EB:6F:C7:BB:DF:CF:41:DD
Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95
Certificate issuer:       /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
Certificate serial:       04A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
Manifest number:          049F
Signing time:             Sat 26 Apr 2025 23:38:32 +0000
Manifest this update:     Sat 26 Apr 2025 23:38:31 +0000
Manifest next update:     Sat 03 May 2025 23:38:31 +0000
Files and hashes:         1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: xywFEXs8XZUw8AMlOtbgxLA3l4E6KwdRxUUMFe5umlE=)
                          2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
        Validity
            Not Before: Apr 26 23:38:31 2025 GMT
            Not After : May  3 23:38:31 2025 GMT
        Subject: CN=680d6e78-65fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:c3:ba:6f:17:ca:6f:be:c8:38:61:ff:52:
                    d1:37:09:7d:33:0e:da:eb:44:b1:17:58:68:82:5f:
                    c0:b8:67:fa:a6:da:25:87:16:ef:37:5c:62:41:1b:
                    be:dd:24:c4:22:a1:ed:cf:34:59:a4:42:05:49:1a:
                    5c:d0:a5:d1:03:56:8a:aa:81:33:c5:d9:96:c2:0f:
                    cd:c4:22:31:94:db:5c:b2:6c:e3:62:63:38:16:c5:
                    8c:e3:f7:c5:29:4c:94:06:c4:54:5e:ca:f2:ef:6d:
                    e6:4a:eb:fb:b0:23:c9:2e:f4:24:89:31:7b:c0:f4:
                    7a:96:9c:59:b0:f6:b0:e2:bb:4b:67:e1:ed:9d:ed:
                    32:e1:21:89:43:7b:4d:93:6b:fd:09:b0:b3:c2:6b:
                    86:e7:53:a3:15:7e:39:20:6e:a9:40:52:42:a0:9c:
                    e1:c0:4a:5d:63:4e:9a:7c:4b:a0:48:f1:58:d6:5b:
                    dd:ce:cf:61:09:08:02:f3:2f:91:91:e7:69:c6:e6:
                    91:cd:57:0c:b7:a2:9f:16:da:85:02:44:b5:10:a4:
                    b9:f6:29:e6:06:60:d9:77:d3:d5:11:ed:5d:dd:dc:
                    94:fe:8c:9a:35:34:bf:9f:7d:e4:a4:76:59:28:a0:
                    c2:64:cc:b2:59:0d:3d:45:f6:b8:18:9e:a7:b8:5c:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:85:D2:ED:AE:2B:BA:97:E0:96:D2:EB:6F:C7:BB:DF:CF:41:DD
            X509v3 Authority Key Identifier:
                keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:97:a5:f0:25:3c:10:55:90:78:c1:79:33:62:83:92:1a:
         13:e4:41:b9:96:b5:6b:c7:d7:ae:a1:fe:73:05:17:4d:64:4b:
         05:56:06:3a:00:a2:51:0a:b6:6f:79:be:49:4e:4e:4b:2f:fa:
         eb:b5:43:e3:e3:e1:8a:ca:fa:d9:c7:a9:47:d5:26:5f:fb:29:
         80:99:1d:b2:bb:15:2c:a3:03:62:17:c8:b8:36:ff:8f:95:49:
         b6:47:87:a4:36:8a:13:44:e4:d2:a8:5d:f3:09:f0:da:7a:0e:
         bd:19:9a:a3:5b:2b:ed:9d:1c:7d:af:97:df:20:9f:de:f4:40:
         22:95:79:a3:ec:8a:68:eb:5d:24:e2:53:81:cf:6c:1a:9f:2d:
         9a:2f:4b:77:cd:df:5f:ec:b7:6a:fb:06:e2:6b:d7:23:1c:fa:
         6e:69:81:f1:5e:ed:98:ac:06:8b:c1:ca:06:5a:33:b8:6d:fe:
         34:61:fc:9a:8a:bc:21:dd:8b:45:5d:b7:77:15:a4:2b:fc:45:
         ab:80:08:e4:a1:79:4a:bc:29:50:ee:f9:9b:4d:76:1b:74:5a:
         73:c9:64:b8:a1:5b:1c:9c:67:58:b5:5e:77:04:fe:a3:bd:de:
         f0:b5:8b:fd:6f:ad:df:23:be:94:bd:45:d3:35:d2:c6:d8:24:
         0a:22:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net