Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
File:                     mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json)
Hash identifier:          jwI+nB3PBQcrdWeOBDa8cKqGWEMGICGXbVhazha0ezY=
Subject key identifier:   3F:B1:FB:06:F8:2C:B5:A8:AA:88:F7:AF:EF:E6:F4:AF:DD:C9:B4:EB
Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79
Certificate issuer:       /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
Manifest number:          0192
Signing time:             Sun 27 Apr 2025 02:29:38 +0000
Manifest this update:     Sun 27 Apr 2025 02:29:38 +0000
Manifest next update:     Sun 04 May 2025 02:29:38 +0000
Files and hashes:         1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: TFwL9kIv08IHN4GmxV4X5FgwlZelHMiwTglmQz1mYw0=)
                          2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl
                          rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
        Validity
            Not Before: Apr 27 02:29:38 2025 GMT
            Not After : May  4 02:29:38 2025 GMT
        Subject: CN=680d9692-6fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:f6:fc:be:37:16:96:ee:11:9c:ea:35:c6:
                    f3:80:90:2f:e0:23:0a:c9:00:96:3f:fe:dc:eb:e4:
                    d8:10:86:79:07:4e:2a:0e:34:e8:30:22:25:56:a1:
                    2a:8a:46:96:24:40:4c:d2:24:25:be:42:f5:dd:96:
                    bd:f2:18:1e:35:a5:bf:73:2c:01:b7:7f:56:ef:ed:
                    48:ca:4c:40:9f:62:5e:2b:6c:63:6f:34:01:5e:07:
                    69:45:90:0c:3a:6c:a5:99:63:1f:65:94:85:a2:56:
                    de:8d:87:3a:17:e7:ab:40:27:97:c4:89:0d:92:fd:
                    d9:e9:2f:8d:96:e7:8f:4d:06:e5:bb:38:da:17:c6:
                    f0:dc:88:51:e2:60:eb:b5:22:bf:a9:a4:6d:f2:e3:
                    c3:51:64:84:0e:91:51:83:bb:ad:35:5d:53:7c:59:
                    41:3a:40:ef:10:65:ec:74:49:c0:72:1c:34:bb:41:
                    c0:63:3e:f7:ed:82:41:b1:68:a0:63:63:a3:44:8d:
                    21:3f:fc:ac:85:d4:61:d5:5c:9e:a4:99:92:28:7f:
                    4a:1b:9b:c0:58:91:f5:28:18:0d:a4:bd:73:7b:6c:
                    4d:ff:6e:8e:3f:36:a1:a1:9e:e2:5b:97:73:ce:71:
                    9b:f5:89:e1:46:e5:1e:0c:0a:3e:ea:cb:d8:ff:35:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B1:FB:06:F8:2C:B5:A8:AA:88:F7:AF:EF:E6:F4:AF:DD:C9:B4:EB
            X509v3 Authority Key Identifier:
                keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:fb:3a:27:d2:1c:fc:88:53:94:55:8c:5c:e1:82:4d:42:
         36:e5:cc:96:ca:6c:86:85:27:a6:f7:7a:a4:d3:eb:94:b6:b8:
         8f:9c:a7:ea:b7:22:ca:ba:6a:64:a6:05:da:95:92:16:13:a8:
         de:5b:5f:24:63:3a:25:1b:02:f0:bf:d9:a3:9b:47:df:02:9a:
         33:a6:c2:f0:f0:f4:8a:9b:9e:65:3f:f5:c6:66:a1:12:c5:03:
         d5:f5:27:d1:5b:ba:b0:de:d9:7e:db:69:cf:a3:6e:46:c4:74:
         14:0c:23:b6:d5:a5:9a:56:f0:09:e2:be:ea:30:5a:d3:33:4f:
         dc:5b:5d:59:82:55:89:89:80:a5:78:91:8f:68:16:42:6a:16:
         d4:f3:77:89:c2:f6:f5:3f:25:59:5a:ab:c6:67:87:c4:f2:e8:
         4a:06:fe:c3:d4:6c:03:e4:07:f4:eb:8e:2b:1c:dd:10:49:94:
         7a:20:ee:2e:78:58:8f:2a:c6:9d:93:48:0d:cb:3c:8a:00:3c:
         0f:0b:e2:87:c5:5d:93:08:ae:86:53:a6:91:e2:df:5d:8b:62:
         c7:20:d7:c8:c2:d6:25:e2:da:32:ce:90:68:f4:fa:3c:88:4a:
         28:73:cb:d1:db:ae:a3:75:f5:9c:1f:9c:e6:9e:10:9d:14:54:
         f9:42:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net