Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
File:                     pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json)
Hash identifier:          Cl62sy0kFhGqBGawoHizU1xEuAwikuEO2J8uz3L4B8g=
Subject key identifier:   05:37:01:D2:52:EF:6A:9A:D1:C4:B2:DC:3C:18:B6:24:B7:69:47:DA
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Certificate issuer:       /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
Manifest number:          0217
Signing time:             Sun 27 Apr 2025 01:36:04 +0000
Manifest this update:     Sun 27 Apr 2025 01:36:04 +0000
Manifest next update:     Sun 04 May 2025 01:36:04 +0000
Files and hashes:         1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: mF1gft3S0bQzCTd3C25cL82i1EAIRthDrbLLgx4yEQ8=)
                          2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: cB+yZz7NXLEFl+NAyUDxFvEYEWhBfd/lLd6SEh+qscM=)
                          3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
        Validity
            Not Before: Apr 27 01:36:04 2025 GMT
            Not After : May  4 01:36:04 2025 GMT
        Subject: CN=680d8a04-af33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:86:7c:26:1c:b8:7d:50:12:09:a6:47:df:
                    8c:fe:25:2a:21:ed:c3:cc:95:e1:53:d5:4e:b6:5f:
                    6c:d1:58:63:f0:fe:c1:87:0c:74:a8:0a:6f:fa:90:
                    77:61:40:8d:ac:fb:8c:d1:ad:13:b0:6a:3b:e0:10:
                    a9:90:83:64:45:1d:1d:e1:b1:52:52:d3:7b:8f:da:
                    3a:ad:1c:5e:be:83:24:ff:9b:f1:4a:56:d7:61:d6:
                    55:22:cf:af:88:cf:bf:a0:fe:71:ca:8d:b1:49:fb:
                    01:ef:2e:cc:ae:01:42:a4:06:15:2e:a0:0f:d6:4c:
                    18:21:8f:dc:a2:cd:fd:05:7a:58:55:17:9b:29:23:
                    da:ae:59:0f:4d:c4:52:c4:d0:4f:3e:55:e7:ec:7c:
                    ed:f8:cd:9e:fc:6b:8c:7c:92:f4:37:88:e4:fb:9d:
                    48:a5:58:04:d9:50:1b:d0:dc:a3:80:ed:27:64:e3:
                    d4:23:77:d5:d9:7e:e4:fc:63:67:3a:07:55:60:6e:
                    78:bd:a9:69:ec:7a:31:5f:56:21:4a:fc:76:e1:4d:
                    99:bb:4e:9f:bb:b8:c4:73:42:35:15:87:40:27:d6:
                    35:2b:6c:72:75:d3:65:b1:a1:30:2d:9a:c5:ee:46:
                    78:32:ee:fe:35:17:00:03:44:98:07:9e:07:55:c2:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:01:D2:52:EF:6A:9A:D1:C4:B2:DC:3C:18:B6:24:B7:69:47:DA
            X509v3 Authority Key Identifier:
                keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:30:85:ec:a1:e3:58:00:79:fc:bc:4b:84:ac:af:d3:1e:20:
         4c:e5:13:9f:c6:c0:8c:dc:cf:09:f7:c7:fe:65:50:8e:1c:1d:
         7a:9a:59:8a:9c:37:88:a0:9e:b9:e7:1e:a0:18:49:a3:8d:40:
         ee:9d:83:58:44:3e:59:a9:cf:d0:d0:82:66:14:7d:7c:ca:bc:
         bb:4f:ae:3c:a9:43:4c:fe:c5:a7:b0:cd:ce:cf:bf:80:b5:47:
         00:7b:4a:0f:f8:57:49:81:7d:7a:e7:26:d4:70:bf:3a:ff:68:
         28:e6:fd:1c:19:41:1c:79:a3:7c:49:27:e3:93:bb:48:ec:32:
         d8:25:c0:a6:2e:24:3f:39:d2:0d:78:17:a4:8d:86:d8:82:da:
         0b:6e:5e:c4:9e:d1:3b:d0:8a:3f:6c:96:86:83:7d:80:23:7a:
         5a:a3:d2:07:5d:4e:91:b0:03:79:21:0e:76:c4:50:d7:49:7c:
         d4:b0:bf:ae:46:a2:30:4a:ca:3f:52:e8:a9:02:97:1e:42:f2:
         9f:8d:84:fd:d6:b7:01:62:8f:70:3c:53:82:c5:90:4b:9a:19:
         12:d9:00:8c:18:54:23:29:f8:77:04:7a:86:d5:97:74:cb:73:
         b8:05:f6:27:6a:cf:ef:da:f3:e0:70:73:c4:66:f9:fc:f6:13:
         0e:40:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net