Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          28PJAv/2XKTrqh3U6UK4wt6UPvGcVbiVrGaMMb3k+gk=
Subject key identifier:   CD:32:06:A4:8D:2E:23:4B:61:74:2D:41:D1:4D:8A:15:89:5D:6B:BA
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          01CC
Signing time:             Fri 11 Apr 2025 02:13:51 +0000
Manifest this update:     Fri 11 Apr 2025 02:13:51 +0000
Manifest next update:     Fri 18 Apr 2025 02:13:51 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: /zKeLsUTZypFbSY/NBd2R04Lqm6BtUwNF4SEhkfE8nE=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: Hz4MNEz2iKlBVZUTwXmU+LHuAvQlzMxEja9uy8vjPy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 02:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Apr 11 02:13:51 2025 GMT
            Not After : Apr 18 02:13:51 2025 GMT
        Subject: CN=67f87adf-832c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:41:68:4c:de:5e:16:9a:9b:39:66:3d:8e:
                    bd:ef:24:8b:31:8b:59:d0:cb:b5:4e:29:d6:f1:6f:
                    95:82:f6:55:dc:ff:7f:85:f6:5a:81:34:bb:d1:9b:
                    c1:9b:09:e0:db:bb:14:53:18:71:74:09:e0:31:91:
                    f6:f2:a5:ec:26:8b:2d:f9:05:f9:14:d7:dc:d9:ae:
                    73:19:66:aa:b2:15:43:7e:c5:b5:78:92:66:1f:fe:
                    68:c3:f9:4c:78:06:36:c3:04:ac:eb:f5:3f:e1:03:
                    f0:15:5a:39:2a:da:a5:5c:21:f3:aa:c5:12:4e:b8:
                    da:3c:b6:22:c7:e9:8c:2d:0f:e4:36:23:01:1a:a4:
                    e6:cc:a3:9e:99:fd:7a:a6:c5:2c:43:14:a8:a0:fc:
                    a0:17:45:d0:61:45:d5:5b:6e:f4:f0:af:db:b9:6c:
                    c4:77:60:91:cb:6e:bb:b3:a4:36:d5:5b:aa:d2:7d:
                    b7:c1:61:75:66:c5:84:aa:87:10:d0:78:9c:aa:23:
                    a0:4a:e3:3c:85:97:07:96:1e:12:ce:dc:0c:6b:aa:
                    4a:f7:b9:e4:33:08:cf:93:98:12:ec:1b:f7:90:03:
                    43:5f:bc:72:09:b8:26:92:02:2e:24:c4:aa:53:f6:
                    e9:b4:46:58:11:71:12:07:05:b7:c7:b5:e5:e2:0d:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:06:A4:8D:2E:23:4B:61:74:2D:41:D1:4D:8A:15:89:5D:6B:BA
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:44:41:04:b8:5c:50:ba:e3:c8:c9:d8:10:95:26:37:de:4a:
         80:44:36:53:6b:0f:33:02:cc:0d:01:47:c0:ba:ca:91:51:d2:
         27:dc:0a:63:e6:11:94:51:c6:56:70:3b:ad:71:ec:57:d1:8b:
         e3:2e:50:d2:92:5b:e3:c7:f8:bb:dc:dc:b2:7d:8c:24:79:1b:
         ab:bd:94:da:c4:09:60:1b:17:f1:b8:2f:10:93:99:89:6e:fa:
         55:4f:8e:1d:29:43:13:9d:d8:db:84:b5:8d:85:c2:2f:53:0e:
         1a:cd:4a:0c:0a:70:7e:76:0e:f8:50:9c:a4:6a:47:6a:b7:0c:
         ca:9c:04:d8:c5:33:8b:d6:cf:e1:e0:e7:47:8b:e6:86:da:83:
         76:80:19:06:0c:1c:73:33:77:c5:71:26:81:f6:61:4f:40:60:
         06:21:8c:5b:9c:82:3d:9c:f9:bd:a3:98:72:e3:25:79:b3:bc:
         dd:30:54:7e:2f:a5:87:04:84:8d:ac:a6:e7:26:a3:c4:63:06:
         2e:cb:5d:c5:c3:29:20:67:70:b0:2c:8a:af:b1:01:5e:38:2a:
         97:40:6c:d2:b6:b1:54:c3:ab:9d:b4:b4:dc:98:8c:40:b5:eb:
         5f:03:c5:c9:c4:1c:f2:5b:d7:b4:e5:12:36:de:5e:34:9d:d1:
         26:d0:74:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:27 2025 by rpki-client