Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
File:                     g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json)
Hash identifier:          t9mV7GNzHl7t7yyIwuC0IBzTsGO3nNHK1q5FjZs93+U=
Subject key identifier:   CA:75:8D:A3:26:1D:82:01:8A:D1:FC:CD:00:3A:52:97:B3:87:E6:74
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Certificate issuer:       /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
Manifest number:          A9
Signing time:             Wed 23 Apr 2025 05:12:04 +0000
Manifest this update:     Wed 23 Apr 2025 05:12:03 +0000
Manifest next update:     Wed 30 Apr 2025 05:12:03 +0000
Files and hashes:         1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: 5xZ2gTHk4qtgNHbE/6qVHMwdSB9aamT2rMJ72/gPTXY=)
                          2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: sXijOKbCJmo7Vc9siLjMj6vbNj9IjkbsFg/cetJYPUA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
        Validity
            Not Before: Apr 23 05:12:03 2025 GMT
            Not After : Apr 30 05:12:03 2025 GMT
        Subject: CN=680876a4-fdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:74:95:5b:28:75:5f:d0:da:86:8c:ec:48:
                    a3:f7:22:99:f2:0e:37:55:4a:e5:75:96:e3:1d:cb:
                    77:b3:54:13:af:b6:79:27:28:de:26:5a:05:68:eb:
                    33:3c:de:5f:94:65:7d:04:20:86:e7:ea:59:ce:bb:
                    22:01:41:7d:69:6d:0b:c3:21:f0:d6:fa:90:ad:75:
                    1f:8a:d7:4b:3d:48:91:55:41:e3:f1:98:2f:ff:e8:
                    2f:71:01:f9:cc:a6:1e:fd:3c:30:5a:bc:be:48:31:
                    24:bd:35:fe:e2:60:02:28:46:59:ca:84:29:5c:b8:
                    f9:90:5c:8e:6a:08:9e:2f:1e:55:45:e3:29:1e:3f:
                    36:7f:b0:46:4e:03:69:72:a4:1f:cc:e5:e6:b7:e3:
                    15:b4:e8:63:58:eb:9f:b6:ea:c7:96:86:ba:90:77:
                    3d:2c:e0:c1:56:a3:b2:90:ad:61:76:bc:a0:0a:cb:
                    6b:7a:76:38:54:6d:e6:bb:c7:34:2d:37:2a:03:7d:
                    b2:d4:2e:a8:80:c3:51:eb:24:88:35:a2:60:ee:f0:
                    a7:5d:e5:ba:86:34:0b:52:40:f7:80:a0:c9:9e:ba:
                    4b:4d:c1:d1:ec:cb:4a:2b:12:e9:f0:9f:50:6b:26:
                    26:1c:db:f2:ee:1a:e0:4b:66:a1:90:e0:07:60:2f:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:8D:A3:26:1D:82:01:8A:D1:FC:CD:00:3A:52:97:B3:87:E6:74
            X509v3 Authority Key Identifier:
                keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:90:90:d1:50:7a:da:6a:80:54:4d:06:73:db:31:c9:48:d2:
         d9:a3:33:16:33:0d:60:13:55:e6:d1:41:d2:cb:ef:75:a6:6e:
         39:02:66:be:d5:17:c2:47:41:21:7b:50:75:1d:53:6d:d9:5f:
         76:9a:b5:e0:18:16:6c:c8:4b:55:04:cc:d0:12:2c:75:9c:e3:
         d1:31:18:e4:12:05:9d:66:69:b0:96:cc:f7:e2:ec:d9:57:76:
         fa:af:02:d5:48:fb:ab:a3:90:b5:93:5d:e9:ec:e5:54:53:ad:
         56:0d:6c:76:28:3e:ee:dc:9f:38:01:61:ab:90:f6:08:a2:02:
         04:26:ae:24:72:68:24:53:f4:ed:9e:c2:97:48:0b:9d:09:a2:
         ac:f5:d0:fa:91:92:13:fd:44:8a:db:81:f9:d9:08:e7:d2:b6:
         4b:31:6e:f9:21:10:dd:0e:44:31:f3:ee:46:88:7d:de:ca:48:
         7f:ce:5d:e6:e0:84:73:3d:60:09:55:c3:a7:f1:37:22:59:e3:
         8f:57:ab:c5:1e:9c:c9:24:17:9a:0e:32:d3:38:1f:98:42:d7:
         f4:31:c0:79:79:a7:98:93:5b:b5:8d:29:42:be:7f:f4:3b:1d:
         15:bc:17:88:d5:b4:e1:9b:98:d7:75:50:1c:c3:48:50:9f:4c:
         2b:14:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:36:04 2025 by rpki-client on console.sobornost.net