Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          aL+hC/CuHdhF8MkkxDSaFgp1glJK0wud59UL68lUb0I=
Subject key identifier:   E3:35:C4:B8:CC:79:46:F1:0B:3D:18:E7:BE:1F:41:00:52:6D:B6:D0
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       06BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          06AF
Signing time:             Sat 26 Apr 2025 21:51:51 +0000
Manifest this update:     Sat 26 Apr 2025 21:51:51 +0000
Manifest next update:     Sat 03 May 2025 21:51:51 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: 73SZSYJ5b9ou/SpumHI7PzR6OCaKQOJgbvK55Xk9aCU=)
                          2: 956449BEFBF411EDBEAD0A26C4F9AE02.roa (hash: DKHDOAj7+AXAvfjvZlh+voUSgeSh4L2VBg+pbuzzE70=)
                          3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: HPFeGwKq86ZcwbWrB7sqcvfz9Xbe89k8mMFhGyrTd2o=)
                          4: C5186FA283D311EEADE09225C4F9AE02.roa (hash: OSo59yjptase6UYWjPMVEsoK3BFfSOe7jd8A1zwV3Eg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 21:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Apr 26 21:51:51 2025 GMT
            Not After : May  3 21:51:51 2025 GMT
        Subject: CN=680d5577-0290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:3e:fe:a3:a2:28:02:71:45:a4:bf:74:a5:
                    61:33:27:c6:71:e2:e9:5f:f3:56:c4:de:37:09:82:
                    89:6a:01:36:55:f8:cf:12:19:dd:d7:3d:62:77:b6:
                    7a:ee:1f:72:b1:c8:15:d1:eb:aa:df:42:bf:fc:82:
                    2a:a5:2b:5c:dc:49:24:4a:bc:6e:8d:55:13:7c:d6:
                    00:3a:49:e5:10:be:11:13:ef:2b:37:63:c4:fc:9b:
                    6b:05:37:0f:4a:6d:e3:7b:f5:02:56:c4:19:77:f2:
                    25:5d:42:2a:da:69:b4:41:0b:63:42:1e:1a:9c:26:
                    b1:81:d3:07:ed:69:aa:59:5b:6d:a3:6c:8b:6c:61:
                    12:0d:02:96:43:17:42:72:c7:7d:99:47:31:9e:e1:
                    a8:2f:04:3b:29:8b:f7:47:be:60:73:ba:44:2d:52:
                    67:ca:08:c8:83:61:ce:73:b2:94:50:ca:18:e1:b7:
                    60:21:9f:0a:37:8f:62:d9:b5:03:69:3b:1d:df:c4:
                    19:14:0e:4c:2d:2b:1c:77:5c:57:5f:ad:d0:39:89:
                    15:6b:83:cc:88:89:5a:6c:a8:33:50:19:f8:9e:b4:
                    07:a4:7f:a6:63:cb:bb:cd:25:79:55:e3:f8:26:ac:
                    23:30:ef:aa:66:d7:83:88:94:dc:f4:ef:ff:e0:17:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:C4:B8:CC:79:46:F1:0B:3D:18:E7:BE:1F:41:00:52:6D:B6:D0
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:52:59:df:02:cc:1b:f4:0f:b7:d4:68:7f:1c:54:a5:af:0f:
         3b:d5:a8:ca:5e:cc:a2:f9:f8:cb:26:99:f1:94:5e:7c:82:42:
         a5:54:18:a7:5e:59:f5:ea:54:63:b1:f5:13:b9:b8:46:bd:1c:
         3e:c3:36:d6:e1:de:2a:fb:3a:4e:2a:99:46:90:84:a6:1c:ec:
         04:bf:9f:9d:48:3b:f1:21:f4:d6:ed:54:b3:f8:99:86:23:2e:
         70:d2:7e:da:bc:3b:f3:ee:4d:e4:38:de:e6:59:f3:8f:11:a0:
         ac:33:7b:ce:57:92:a4:b4:b4:f1:0b:04:c2:e2:e6:3f:be:c4:
         dd:f9:35:c4:1c:ba:2c:43:f9:5e:0e:73:9c:41:2b:a9:8e:67:
         31:0e:eb:a7:55:bc:b6:52:28:42:17:73:f7:aa:19:ed:05:2f:
         de:da:0d:94:30:2b:b7:3f:ad:83:b3:a3:ad:24:0b:76:88:5c:
         46:ff:8f:4c:4e:1e:a7:d9:11:61:9c:c1:89:80:59:50:ed:07:
         d5:aa:96:55:26:ee:7b:d5:77:6a:f0:44:ec:08:99:4b:62:6e:
         80:3a:94:21:94:92:1c:48:55:20:b4:eb:03:b4:c5:c0:6f:24:
         94:aa:9f:05:8a:2f:3f:7b:29:06:35:6b:fd:86:d8:04:fc:66:
         f6:94:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net