Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
File:                     t6ep_77HE_hOC1GAr3besW5ykik.mft (raw, json)
Hash identifier:          +LRghg9AI8Xb7nGFOXG7y5IMOHB9SnE+asAQBl7hdG8=
Subject key identifier:   37:AE:7B:D2:44:83:66:67:89:10:17:CC:F6:59:CC:E8:CA:F8:EE:14
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       0574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
Manifest number:          055E
Signing time:             Sat 26 Apr 2025 23:05:07 +0000
Manifest this update:     Sat 26 Apr 2025 23:05:06 +0000
Manifest next update:     Sat 03 May 2025 23:05:06 +0000
Files and hashes:         1: t6ep_77HE_hOC1GAr3besW5ykik.crl (hash: +7f0MxQMregJG/aIFowWbMI0CIL9aNBZRV116ZwLuMc=)
                          2: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (hash: V6GGgopQM/9MURG7ZCjHLUUN1Fak1PfMVntGosPl4Vo=)
                          3: F68AC4D84D9B11EC9CF19624C4F9AE02.roa (hash: DYCid3LLEniTmBG1cDjym9t3s6fpWuAE5JDaOW/kSN8=)
                          4: B63ACB8CCB8411EC98BF6718C4F9AE02.roa (hash: YAUteCmPsOym2G6bKX0x3ZydCIKVsenbUJgAGliknoE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Apr 26 23:05:06 2025 GMT
            Not After : May  3 23:05:06 2025 GMT
        Subject: CN=680d66a2-6996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:ef:47:43:9d:10:d8:7e:8a:9f:c3:04:40:
                    9e:3a:81:8e:df:b1:68:b7:01:03:70:0d:3f:2b:ae:
                    14:d1:91:fe:69:f7:a8:91:6f:d1:59:4c:07:7f:f2:
                    49:6e:18:e8:84:91:b7:57:1c:f6:f2:93:e1:40:eb:
                    4f:79:35:13:e6:12:17:ce:22:a4:35:25:53:3b:ee:
                    dd:17:7f:2d:e9:32:bb:18:0b:64:49:1e:f1:e1:4f:
                    87:5e:b4:74:c8:0f:97:ae:61:6f:a5:df:9a:ea:80:
                    37:48:61:ff:d2:4b:74:c4:4e:8a:49:42:4e:c2:8b:
                    e2:5c:9a:8a:e5:0e:8a:95:09:6c:d7:04:45:4a:47:
                    78:99:cb:f7:2e:79:23:ed:2e:97:7b:ad:28:32:6f:
                    cb:65:27:44:44:68:11:3d:d3:95:c8:65:8c:9b:7b:
                    c9:17:48:66:3b:d4:33:a4:b6:ab:a3:89:e7:a8:8d:
                    fd:cf:da:72:10:b3:40:3e:d2:56:98:9c:27:39:b7:
                    c0:a9:75:f0:39:38:37:93:5c:43:bc:53:2f:7c:12:
                    38:9d:46:e5:dd:f0:d1:6c:e3:79:a9:2e:a7:be:d7:
                    a6:86:48:49:ff:e8:48:1b:55:78:bb:73:b9:57:dc:
                    b4:4d:18:ae:bd:33:39:27:ae:6a:62:6f:52:5f:0b:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AE:7B:D2:44:83:66:67:89:10:17:CC:F6:59:CC:E8:CA:F8:EE:14
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:63:2e:2a:a8:9b:21:73:bc:53:19:79:e5:2f:03:ff:9b:
         1a:67:ac:8a:5a:87:d9:79:19:af:a6:8a:48:5e:2c:16:32:74:
         58:9c:a2:1d:2d:54:9f:44:43:be:32:88:cd:b6:d3:2e:c7:23:
         4e:26:5e:e5:be:b5:24:68:61:e2:76:67:31:79:d9:c2:7a:67:
         9a:c9:ae:e8:d8:9b:c1:54:0a:b5:08:7e:8d:fc:09:16:12:ee:
         e4:23:e6:ec:5c:1c:d7:a1:5a:90:bb:b9:3e:18:e2:b6:75:27:
         01:ca:83:92:44:20:57:6d:1f:3d:03:1b:ff:1f:15:14:2a:3d:
         45:05:a3:f2:3f:55:3b:49:a3:ee:e4:7c:28:b8:74:fb:14:d4:
         10:93:43:22:ec:c3:a7:b8:fb:cd:bb:f0:09:0d:52:1b:46:30:
         6e:a1:47:65:f1:a2:bb:a7:d9:84:e8:d3:fc:1e:fd:40:36:6e:
         4c:01:3a:2f:a2:ec:f8:8d:7f:a4:66:29:ae:40:1d:da:d6:2e:
         5b:96:9e:55:55:d6:47:49:68:b7:0b:13:84:98:fc:f0:43:b0:
         85:0b:9a:a7:7f:4f:da:ff:37:52:ef:7e:10:11:f9:68:74:93:
         84:1a:8c:5c:35:6b:c7:53:d7:7a:14:39:18:52:94:29:11:88:
         96:b2:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net