Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
File:                     D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json)
Hash identifier:          2TVm7ZVIJGWcL1vlC6NF20LdtR4yJzs1tZOXAGXH9Rs=
Subject key identifier:   6E:86:5A:91:14:EB:70:33:93:95:F7:63:2E:3E:25:7E:65:07:8D:34
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
Manifest number:          CE
Signing time:             Sun 27 Apr 2025 04:37:40 +0000
Manifest this update:     Sun 27 Apr 2025 04:37:40 +0000
Manifest next update:     Sun 04 May 2025 04:37:40 +0000
Files and hashes:         1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: U1qvjyOgK4/daY9Q3BLz0pFa0pVZWRdB1lhRUHcut9U=)
                          2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: PLkTX8vn1+WKFw3HdqAbAwP/NjRYQ3swUNgQj1k4DSE=)
                          3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: zPKvF8zxdu//FyrlKrsovUWXLD3CMiK5ihnLC2Ks3fU=)
                          4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: T1g5Fuak08KUBroGfInKXOe5sVU0C30eA43zF3aV9tE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Apr 27 04:37:40 2025 GMT
            Not After : May  4 04:37:40 2025 GMT
        Subject: CN=680db494-190f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:ac:4f:ea:be:ca:87:12:c3:fa:78:a2:c2:
                    17:d7:7b:4a:e8:c8:f9:87:ed:21:c8:c2:19:94:17:
                    37:d0:a5:6c:ef:11:5a:15:72:7d:59:15:03:64:5b:
                    1d:44:05:57:b1:4d:53:4c:c8:fb:8a:e5:de:df:11:
                    fd:52:77:b1:1c:82:22:10:c1:39:c7:b3:8d:71:b5:
                    4e:66:78:e8:42:dc:51:fb:e9:c1:e7:e9:86:90:eb:
                    cb:47:69:ed:ea:fb:bf:d8:7d:be:46:3d:f3:28:4d:
                    bb:73:1c:68:1d:37:16:b9:cc:fe:f6:c0:3f:d6:78:
                    26:33:24:c9:dd:f3:bc:97:8d:a5:9b:57:b8:7f:1b:
                    83:bc:95:23:b3:89:6e:21:64:4e:96:e3:71:bc:6a:
                    5f:7d:b8:a6:19:fb:45:bd:23:83:1c:12:1b:72:f7:
                    d2:38:9c:12:55:c5:44:94:83:4a:67:84:6e:96:84:
                    08:96:2d:e2:4e:f3:b3:2d:a9:c5:e0:42:ea:92:47:
                    87:9e:c5:50:25:74:30:5f:29:68:3c:10:de:e5:df:
                    89:2c:1b:ca:ee:19:2c:8b:ed:ed:85:a0:84:b4:77:
                    b1:38:29:aa:93:ec:48:b5:1e:32:f3:92:64:ce:56:
                    74:b5:ab:f9:2a:b7:1e:72:c6:76:b8:50:7a:c9:2b:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:5A:91:14:EB:70:33:93:95:F7:63:2E:3E:25:7E:65:07:8D:34
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:e5:f7:86:93:91:eb:ae:46:0a:73:9a:9a:21:82:71:e1:
         6c:69:c0:40:bb:67:09:10:ae:70:51:1e:f9:d5:86:af:9c:d7:
         8b:7b:52:2d:5d:0d:2d:a6:4a:50:8c:57:b6:15:86:85:82:d0:
         31:8a:be:34:b8:36:d2:90:e8:3b:ab:d4:c4:41:3b:ea:19:a0:
         87:92:c6:60:72:6a:7c:d4:21:65:bb:ce:b6:fb:07:05:de:a8:
         6a:ef:50:ac:08:a8:56:03:5e:e4:87:bd:24:a2:d1:7f:1d:7e:
         e5:93:a5:e3:57:1e:4f:eb:d3:e6:84:a6:d9:3a:5c:f7:83:b2:
         ee:d4:36:43:6f:2c:7f:eb:cf:d4:50:cd:a0:74:f8:82:76:68:
         9e:3e:12:41:89:7e:d5:bd:d0:8e:33:ff:46:c4:2f:bd:2a:4c:
         c4:c6:dc:c6:6f:15:bd:b1:79:61:89:50:9e:13:aa:8b:e5:d0:
         76:c1:0b:80:db:40:54:b8:c5:d5:1d:e0:7d:1e:02:72:19:64:
         1b:c4:98:74:34:d1:e8:74:37:53:83:fa:cd:34:fc:83:fd:a9:
         e0:fe:31:18:ff:43:8a:5d:e9:26:6f:fb:85:2e:c7:3e:56:f1:
         1f:04:e9:b6:91:b8:9c:bc:32:80:b6:bf:6f:4c:05:45:e3:7f:
         3d:06:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net