Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          tusiKsZm6pOhY9a8pHWVyiK5s2N/jKVzEmYmnwEvJUM=
Subject key identifier:   B6:C6:AD:D9:08:58:FA:AC:00:0C:D8:1E:62:08:84:D6:97:BC:EB:71
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       0732
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          0723
Signing time:             Tue 22 Apr 2025 21:44:23 +0000
Manifest this update:     Tue 22 Apr 2025 21:44:22 +0000
Manifest next update:     Tue 29 Apr 2025 21:44:22 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: srJRgCPYc5VEmkxQpQVAyWZ3fxaORZ/iwQsIlmvHXb8=)
                          2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: Wg8lhii6fS+ISW5JHYHpOa6pzoQlnpj7gMJiQaNStNA=)
                          3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: qKRjykDno1daJfQQjFQDgdcngx+c1WC/QlLs58bkJD4=)
                          4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: BkTcuyEezWUWEkhN6v2tftRUBORfyEfzklVup25IVEk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: Apr 22 21:44:22 2025 GMT
            Not After : Apr 29 21:44:22 2025 GMT
        Subject: CN=68080db6-3637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:4e:66:0f:bc:f6:9b:0d:a8:7c:67:91:a0:
                    78:53:e1:02:1e:0b:01:81:60:40:f5:5c:e2:b4:ee:
                    11:37:e0:9c:b1:3d:67:d5:9b:0d:45:ab:66:b0:8a:
                    2f:15:02:05:9d:8f:68:bd:91:17:4c:47:c2:df:93:
                    48:be:4d:20:fc:5c:59:de:18:77:ff:12:02:88:bb:
                    ca:73:5d:14:28:45:fd:9a:af:94:6c:0b:0c:bc:6f:
                    b4:d3:9b:96:44:4e:bc:4a:aa:41:7c:53:c8:8b:cb:
                    bc:c8:20:ad:fc:09:d2:bc:ef:72:5c:30:1f:d7:2b:
                    f4:dc:73:fc:0d:e0:50:70:ea:ff:ef:a2:a3:bb:0a:
                    29:d2:98:9a:92:57:15:4e:f1:72:dc:3b:e2:a2:69:
                    dd:b0:6c:ad:59:d2:82:5c:48:4c:36:02:d2:b6:45:
                    4d:f0:ba:eb:ab:a1:0d:ef:22:b9:16:28:15:d3:95:
                    2b:84:5a:72:7d:48:f8:b6:98:1d:a5:46:ae:76:12:
                    e5:4b:2e:53:07:44:42:34:e9:24:59:16:3f:70:08:
                    76:9c:68:61:ca:14:aa:d4:e2:96:7d:af:7f:75:07:
                    d3:b4:cd:30:e8:fc:db:6c:2d:1e:64:d8:e2:b5:1b:
                    04:d0:18:7e:6a:c7:7d:12:8c:f8:22:51:5c:16:e1:
                    39:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:AD:D9:08:58:FA:AC:00:0C:D8:1E:62:08:84:D6:97:BC:EB:71
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:c0:35:c2:b0:13:9d:cb:87:7c:ec:cf:1f:47:d3:d7:ec:
         e0:9d:fb:81:ce:72:5a:65:c1:57:31:58:ee:94:04:c0:5f:56:
         e8:c0:5d:03:80:d5:71:4e:25:de:97:79:ca:bc:da:6d:2d:ee:
         42:3d:53:79:26:d1:ed:be:37:e2:55:f7:70:ae:bc:b7:88:4e:
         2f:c1:0d:99:82:8a:7d:ae:38:ab:73:39:a6:72:e8:b7:ce:b0:
         79:18:84:05:c1:54:77:50:e1:32:56:5a:b1:74:77:c7:bb:b7:
         44:85:7b:19:56:64:46:94:91:a1:26:b6:6f:50:05:1f:f1:8d:
         a0:e2:0b:b3:06:d8:20:65:19:38:f7:2d:75:5c:61:cb:3b:36:
         49:59:11:a7:67:46:93:81:20:2c:4d:cd:0b:5d:15:03:8f:5f:
         d0:5f:6e:56:3a:fc:23:99:90:49:5a:4d:89:cc:d0:5c:3b:7b:
         30:2d:8e:98:a6:2b:f1:0b:fe:08:6c:97:03:49:e5:cd:8c:85:
         67:80:7a:48:17:35:ec:6a:10:93:bc:b8:9d:86:0c:93:ce:e6:
         e8:aa:2d:9b:45:3c:7b:75:4d:4b:b8:56:ac:2a:d8:57:2b:0d:
         e0:85:6a:b0:ec:d2:74:22:17:b1:c8:dc:2a:a7:79:85:1d:dd:
         0a:9c:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:40:05 2025 by rpki-client on console.sobornost.net