Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File:                     8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier:          j9T4U3p8YjBcp0UjqBbLipD8/fYP+zycp8HsnQ813bM=
Subject key identifier:   63:5B:B8:FE:C7:98:C5:42:0C:DF:FF:C6:E0:3C:FD:7B:EE:A4:13:A0
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer:       /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial:       2456
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number:          243C
Signing time:             Sun 04 May 2025 15:44:15 +0000
Manifest this update:     Sun 04 May 2025 15:44:15 +0000
Manifest next update:     Sun 11 May 2025 15:44:15 +0000
Files and hashes:         1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: cz31Xot8HytmZtn7FTtLn1CRCuA03qOhhDg1CT0dxOA=)
                          2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: aC8EINXIC01Iys9eKuxANUXX5lS0IOCfT6iahbBp2dk=)
                          3: 2B20B9CCCBEA11EEB82B690CC4F9AE02.roa (hash: jONv3AteqZr2Pz8WL2R2omzTcnceAzq3S4OqALo7cqA=)
                          4: 427FC74C972011EE8EEC5F75C4F9AE02.roa (hash: oO1xFuhAbWa8jnpge9HNWcKJyJkQpOd7FW4dAr7Fm4M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
                          rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 15:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9302 (0x2456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
        Validity
            Not Before: May  4 15:44:15 2025 GMT
            Not After : May 11 15:44:15 2025 GMT
        Subject: CN=68178b4f-b01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:2a:3b:a1:19:08:55:a2:fc:f5:17:63:76:
                    da:89:16:61:20:48:9e:6c:93:7d:21:60:0c:f4:03:
                    92:37:4b:4a:b0:af:41:57:11:5f:1d:f9:b1:46:f7:
                    3e:83:c0:af:53:b8:63:f6:dd:b7:34:2a:f5:12:6b:
                    8f:92:c5:ba:65:0f:d0:98:0d:ca:c4:50:e2:34:a6:
                    90:eb:47:9a:75:4c:02:66:a6:dd:f2:2a:78:27:d8:
                    e4:98:6c:f9:00:95:55:90:e0:a3:9b:a7:ff:2a:24:
                    73:81:f4:cb:34:2b:ba:20:84:38:c4:97:8a:b9:c3:
                    b7:f6:85:ce:39:52:44:d7:d1:cb:3b:e5:df:04:de:
                    cb:7c:e4:3b:2d:27:7a:07:8d:18:67:f6:b8:15:8a:
                    ac:ca:a5:36:97:9d:56:f6:34:33:76:f6:12:8e:d4:
                    11:1e:b1:95:8a:31:c4:42:c7:b7:0c:4c:77:9e:1a:
                    37:0e:8c:72:db:bc:63:1c:7f:39:22:90:98:1a:79:
                    eb:f2:a5:cb:34:5e:56:3b:a2:bc:b6:a9:f2:b7:5b:
                    13:a9:ad:77:d2:b3:10:7e:ae:d6:1d:2c:19:58:ac:
                    56:60:19:e7:af:59:03:c0:01:28:32:50:04:c5:ff:
                    ae:22:ef:7f:f8:3b:73:56:91:df:66:d7:19:a4:e9:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5B:B8:FE:C7:98:C5:42:0C:DF:FF:C6:E0:3C:FD:7B:EE:A4:13:A0
            X509v3 Authority Key Identifier:
                keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:3f:86:06:44:37:65:ae:f9:c5:71:1e:e0:7c:1d:1c:80:
         06:cf:57:cc:43:e1:4a:29:c7:c4:31:fd:49:d4:3d:24:5e:95:
         49:c3:89:af:e0:60:b9:cc:b7:ac:14:e6:f8:1b:9a:2a:f1:1f:
         e9:a9:0b:ea:b0:65:f0:62:4f:aa:e0:5b:72:ac:cd:1b:fb:4f:
         f4:d2:88:ae:0b:aa:d2:09:6f:40:77:d2:97:63:56:dc:00:5c:
         f6:d2:b4:21:53:fb:4f:4a:84:fd:d7:36:cf:eb:29:c1:a0:4a:
         09:7b:7b:65:be:01:3a:76:b6:c0:c5:aa:d0:f8:3c:9d:5b:20:
         0f:fc:a0:62:42:e7:9c:7c:8d:46:a6:f7:3c:b7:ae:13:df:50:
         d0:8f:ad:1b:09:6b:52:49:dd:24:d1:f1:07:fb:4a:b2:84:f4:
         db:c9:c6:47:ff:b3:5a:39:4b:58:42:8e:d1:cf:a2:a7:da:f7:
         22:e5:32:0d:96:30:87:83:f4:4c:f2:ec:68:dc:90:36:9f:98:
         ae:b8:42:53:8c:c4:cf:d6:04:ff:40:7f:78:5c:2c:6c:66:cd:
         16:c9:61:18:13:fc:23:18:d0:b4:3a:74:a0:2e:e6:39:3d:5e:
         cc:93:3f:85:3e:0c:b9:63:2a:cf:45:36:3b:00:c6:11:17:92:
         66:d2:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:23:58 2025 by rpki-client on console.sobornost.net