Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
File:                     BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft (raw, json)
Hash identifier:          eVooM/EeEO6XcVRvS2gaiH9wNSdXCxWH5Gv8dEv6BZ8=
Subject key identifier:   A5:A7:0F:63:37:70:88:69:5F:12:3E:F9:E6:94:D8:88:F3:1B:E6:17
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Certificate issuer:       /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial:       39D47303685857F5CD651FDE05D107DC3299B71F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
Manifest number:          04DD
Signing time:             Mon 28 Apr 2025 13:04:53 +0000
Manifest this update:     Mon 28 Apr 2025 12:59:53 +0000
Manifest next update:     Tue 29 Apr 2025 13:16:53 +0000
Files and hashes:         1: 3130332e3137352e32372e302f32342d3234203d3e20383334.roa (hash: Lk+SsdtbrANWV2nijvQOlAUdOOBaDgz1FwOw4ZRQW0w=)
                          2: BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl (hash: sL1CQwDlhSpgkgSYdxYbpQybP0zoerJr7bFmco2eDMs=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
                          rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 13:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d4:73:03:68:58:57:f5:cd:65:1f:de:05:d1:07:dc:32:99:b7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D70000, serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
        Validity
            Not Before: Apr 28 12:59:53 2025 GMT
            Not After : Apr 29 13:16:53 2025 GMT
        Subject: CN=A5A70F63377088695F123EF9E694D888F31BE617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:ab:5c:8c:4f:93:9d:dd:e1:b3:7d:63:b3:
                    7f:b5:d2:00:80:07:2a:7c:31:4b:34:2a:71:d0:3c:
                    7a:0e:f7:a1:38:5b:1c:d8:fe:c1:6b:9e:c0:a9:38:
                    5f:e7:8f:68:4b:d0:1b:8f:60:c0:37:69:ae:1a:9b:
                    d9:87:2a:30:04:35:17:db:26:4c:1f:a6:fd:aa:cc:
                    5c:c0:e1:93:34:9c:6c:4f:28:17:ab:d5:6d:ce:15:
                    1a:2a:7e:8d:e7:98:34:cb:2e:39:29:de:b4:64:92:
                    02:05:a0:36:55:03:f5:59:64:00:70:3e:ed:9f:7a:
                    4a:bd:78:9c:95:73:ab:e9:95:15:08:c3:50:27:63:
                    e1:94:c5:29:62:07:82:a1:80:0a:50:cb:33:3c:b3:
                    52:eb:f6:44:23:6d:a6:4b:a5:63:58:0b:77:69:cd:
                    79:e9:09:ab:a4:1e:ab:30:1b:16:5f:54:e7:0d:c1:
                    d5:f2:5f:05:63:51:08:b6:2b:3f:68:7b:b6:f0:8e:
                    3f:68:da:da:da:c3:f1:76:73:bc:cf:ff:e7:31:00:
                    e2:3b:07:b5:30:02:ee:b1:b1:bc:bd:6e:d3:0f:46:
                    8a:d2:0f:ad:b4:91:cc:79:82:e2:af:7d:09:5b:0b:
                    b1:57:6e:e4:59:7f:56:86:4c:2b:f0:e3:b0:b2:74:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:0F:63:37:70:88:69:5F:12:3E:F9:E6:94:D8:88:F3:1B:E6:17
            X509v3 Authority Key Identifier:
                keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:bb:ab:46:53:29:c1:b1:bc:8e:45:27:b8:7e:31:99:d2:
         27:f8:98:85:4e:8c:63:68:09:4a:16:4f:13:0d:c9:e9:5f:17:
         a7:57:c2:50:9a:3d:bc:5f:09:06:32:ba:b9:fb:94:6e:b7:ef:
         ce:7f:cf:b4:98:7d:56:6d:ce:76:d2:57:bb:01:0d:16:53:ec:
         17:49:10:7f:62:5c:ab:00:19:82:7a:08:58:07:da:81:34:96:
         31:85:0d:d4:11:8d:8b:f9:e9:4b:0f:86:a6:05:1c:0c:1b:69:
         c5:d8:85:0a:9e:1c:5b:9f:31:00:60:81:5a:aa:0d:08:09:b6:
         d2:fc:fd:ce:ff:e3:e5:d6:f0:ba:b0:43:97:61:dc:32:d5:93:
         32:b6:49:b1:01:3e:88:01:c8:ec:79:7c:2a:e7:56:14:70:28:
         f6:76:da:d9:9d:4b:e4:a3:41:57:0f:5e:1e:28:ad:44:61:d6:
         d1:98:92:c8:ba:91:93:93:95:7e:49:6f:a1:bd:6b:27:a0:20:
         2e:48:c4:bd:70:97:61:6c:db:d5:5d:cf:9d:ef:7f:98:be:28:
         f0:19:7d:10:37:c0:2a:59:a8:1b:5b:6b:da:ed:2a:df:06:5c:
         30:84:9d:90:e2:91:c1:db:7a:7d:60:d3:ef:88:ea:25:bd:e9:
         ea:64:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:31:47 2025 by rpki-client on console.sobornost.net