Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File:                     fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier:          7tRxc8vLe91V0JB+CcmAnkj+DP5INzqn9fOkHrvOC9Y=
Subject key identifier:   E1:1F:DF:CC:93:C6:97:A2:5A:1C:9A:47:B6:D4:8F:2D:2B:B6:2D:A9
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       289C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number:          2827
Signing time:             Sat 26 Apr 2025 15:35:16 +0000
Manifest this update:     Sat 26 Apr 2025 15:35:16 +0000
Manifest next update:     Sat 03 May 2025 15:35:16 +0000
Files and hashes:         1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: z1Cq/k+AxRNmO0VWhlCY93DM6J64hr7KhqafdkQxtM8=)
                          2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=)
                          3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=)
                          4: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=)
                          5: 9FA8BF04E29311EFBB04FB48C4F9AE02.roa (hash: SqFDkcPJLuKtwmjDpMqZz6gXiK/j9MHeCZUMDCC5s+w=)
                          6: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=)
                          7: 69448F24901811EFAD307C71C4F9AE02.roa (hash: Hzh3xVvRRKPzv+kWPsFSNzqLMIeNZk0IRUe+axzlVNw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
                          rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10396 (0x289c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Apr 26 15:35:16 2025 GMT
            Not After : May  3 15:35:16 2025 GMT
        Subject: CN=680cfd34-75ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8c:c0:6d:db:0a:36:98:61:ce:75:ba:21:3f:
                    47:24:5f:64:05:56:3c:55:1f:2e:f8:60:6c:33:de:
                    de:d9:86:a1:b6:7b:30:dd:37:e8:f9:06:bd:e2:2a:
                    9e:b1:75:2e:1a:26:34:f4:99:c9:8c:ca:0e:18:ec:
                    c8:06:95:e5:c1:a8:23:57:51:c6:7c:11:53:26:c9:
                    63:ec:85:ec:e3:99:7b:16:12:b7:d2:42:a0:ef:00:
                    7a:ae:4d:85:a9:e3:a8:bd:75:a2:bc:79:5b:08:a9:
                    1f:4e:61:04:f5:28:c1:4d:5e:44:fd:ac:14:bf:7e:
                    35:d6:65:77:0f:3f:d7:2c:b3:8f:53:38:fb:60:35:
                    5d:ef:b6:50:48:a5:a8:c8:a8:05:c3:01:b8:ee:83:
                    26:85:df:d0:a8:f0:c9:f1:d0:14:c0:81:fa:5d:83:
                    34:8d:3e:12:e6:3f:33:42:bd:81:a1:c5:90:c9:d0:
                    ac:a4:8f:29:10:ec:33:93:15:49:59:e6:db:9a:96:
                    61:27:2e:98:03:ed:01:4d:09:98:c9:36:4c:ed:33:
                    89:98:e4:83:83:c9:2a:81:c5:73:1a:ea:51:e8:21:
                    9f:b5:c0:29:e8:48:50:f5:46:2c:a6:76:8c:7c:b1:
                    08:bf:0f:19:d5:ca:c0:03:5b:d4:80:57:d4:95:1b:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:DF:CC:93:C6:97:A2:5A:1C:9A:47:B6:D4:8F:2D:2B:B6:2D:A9
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:0e:c6:a7:bd:67:00:2c:97:c5:1f:a8:9b:a9:71:a5:21:
         a8:b6:c9:ac:7c:65:7f:55:12:6c:3b:3e:a3:07:04:a7:01:82:
         8c:69:15:c7:04:8d:5b:f6:9d:d9:64:0b:06:d6:a7:be:84:a3:
         8c:53:09:b6:42:7d:60:c7:3a:0c:92:c8:2c:3a:18:7f:87:a0:
         b9:5b:44:6b:11:c5:bd:f2:67:37:90:c5:49:87:24:4f:13:a8:
         cb:e9:69:84:b2:17:6b:09:bb:b7:4f:c9:fa:f5:9c:0f:ea:53:
         c7:8e:2b:fe:57:bc:b1:55:26:8a:9f:38:32:c6:c7:a5:3f:3d:
         7e:16:55:29:cb:5b:23:d9:02:de:dc:6c:8e:1c:97:3b:b1:21:
         e8:ad:5d:83:2b:e4:21:6c:1f:7f:cc:c6:c2:29:b8:5d:94:8c:
         f5:a0:ef:0e:91:2a:06:ae:85:8c:fd:38:a6:b8:80:dc:5a:78:
         05:c2:4e:5e:f5:7a:b6:f3:da:88:ca:7e:84:ab:4b:91:97:b4:
         72:03:cd:bf:b6:94:a2:0b:5b:1e:55:24:29:ce:35:63:a6:91:
         45:9b:48:f3:d4:4e:bb:68:b8:28:66:b0:06:44:40:32:d2:6d:
         8f:4b:0c:46:cf:3b:ad:e4:21:9f:03:61:be:a2:a1:49:b2:40:
         d8:91:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:33 2025 by rpki-client on console.sobornost.net