Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
File:                     xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json)
Hash identifier:          JWOFi9gBM2WpmCKGFbXNOnw4SDyfJsLg76K4UZq2y8A=
Subject key identifier:   5B:5D:93:82:A8:EF:9E:39:83:82:A0:28:C5:EA:D1:2C:A5:FD:80:29
Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
Certificate issuer:       /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Certificate serial:       04E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
Manifest number:          04E3
Signing time:             Fri 04 Apr 2025 23:51:40 +0000
Manifest this update:     Fri 04 Apr 2025 23:51:40 +0000
Manifest next update:     Fri 11 Apr 2025 23:51:40 +0000
Files and hashes:         1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: LoTB2GQP4e9FDE8X1ccrUMVHURxWXeSafDiJc9SqUKE=)
                          2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: n4qbIc5i3kLkXS9yMK9sKanURu/yHl+PFiYDGaralVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
                          rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111A96
        Validity
            Not Before: Apr  4 23:51:40 2025 GMT
            Not After : Apr 11 23:51:40 2025 GMT
        Subject: CN=67f0708c-0d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:f6:19:9a:75:b5:12:33:d5:d7:92:7b:11:
                    73:e3:c3:3c:5b:31:1f:69:b7:db:9e:d9:8b:b7:8e:
                    62:70:b8:09:c9:a4:41:f7:4d:68:20:e2:51:75:c5:
                    4c:b1:ac:05:6c:a4:2d:23:14:4a:c8:15:14:67:fa:
                    b5:64:c8:37:c8:94:76:2f:a5:c1:65:c4:b1:df:36:
                    5f:d4:90:a1:a8:96:e0:f5:4c:2f:a0:39:23:40:1c:
                    b2:01:8b:ad:ad:03:3b:21:3c:74:47:a5:ad:b6:41:
                    4d:46:fa:3c:54:ba:5c:be:5c:d0:d5:a3:b9:ec:b4:
                    86:6b:bc:85:f0:ed:9f:c1:b0:e6:b7:0b:0c:67:8f:
                    7d:3c:76:fd:f5:96:65:56:82:11:10:42:24:8e:ba:
                    ab:66:92:4b:92:7e:2b:bb:2d:7c:9c:1b:8f:48:93:
                    8d:34:b4:c9:17:b2:26:bb:5f:18:42:bc:c2:e2:04:
                    1b:38:7b:06:5c:d7:8a:d1:5d:a3:92:da:f5:e6:75:
                    b6:6f:6a:1e:a2:1a:ff:bf:e3:69:40:b1:85:29:9c:
                    57:71:43:70:0d:6a:8a:7f:fc:d0:6f:dd:c7:87:b9:
                    9f:e2:15:9b:07:fd:b7:c7:b0:d9:0d:46:a8:48:c9:
                    24:80:b3:6c:6a:07:7d:a5:80:59:ae:23:4b:96:88:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:93:82:A8:EF:9E:39:83:82:A0:28:C5:EA:D1:2C:A5:FD:80:29
            X509v3 Authority Key Identifier:
                keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:a4:82:85:ff:08:34:2a:71:e7:91:b9:50:80:13:55:be:
         ea:55:05:d7:03:af:27:3d:c9:d8:bb:2a:8d:4c:09:9e:f4:81:
         e5:f4:85:ee:46:ae:09:ff:f9:1e:b0:02:99:54:15:a2:e0:86:
         a9:62:95:34:8e:6c:12:b6:eb:e9:29:1e:39:40:d2:99:4a:53:
         cc:99:78:3b:5e:b5:56:22:42:16:dd:db:a1:b7:08:43:da:e9:
         eb:8c:c6:79:65:45:9b:f8:f2:c9:c1:6f:d1:e3:50:27:86:23:
         8f:6f:19:1e:c5:00:24:ff:ab:71:8e:2e:3c:85:e1:c1:33:17:
         b0:fa:b2:1d:09:75:1c:13:78:6f:1c:05:e5:8b:4b:90:32:08:
         5c:4e:b3:3b:65:3a:bd:9f:69:5d:38:db:cb:51:d9:c8:e6:3c:
         d1:d3:75:2b:35:0e:88:3b:28:75:19:e2:5a:6f:f4:29:ca:77:
         bd:3a:94:7f:f3:86:63:6b:2e:06:cb:60:8d:38:1a:c5:14:1f:
         42:56:a9:1d:76:93:59:2f:fa:23:be:3c:c6:54:ce:f7:06:2a:
         f3:e1:08:00:d7:65:29:82:b9:25:2d:b1:a6:dc:ce:6a:9f:86:
         4c:28:10:cd:c3:af:47:2f:2d:b1:fb:76:ec:91:f0:8d:81:bf:
         9a:99:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:42 2025 by rpki-client