Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
File:                     MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json)
Hash identifier:          yyhKEEXkRpAvDsxo7mzoIMG9MLzhlXvYsc5skRkWPHM=
Subject key identifier:   FD:99:15:F2:3B:5D:E2:22:5D:A4:15:37:CF:ED:9C:EE:E2:70:43:0F
Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
Certificate issuer:       /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
Manifest number:          01BE
Signing time:             Thu 03 Apr 2025 02:22:46 +0000
Manifest this update:     Thu 03 Apr 2025 02:22:46 +0000
Manifest next update:     Thu 10 Apr 2025 02:22:46 +0000
Files and hashes:         1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: SsfK2bWWJ6UbA+FAGqbnhmfcdKszY52PCSQ7vg6Zm3U=)
                          2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: HjT8VM2XqnkqsOJWOxm5J3xWXDt5memxcVZ9AVhTnyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl
                          rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F08
        Validity
            Not Before: Apr  3 02:22:46 2025 GMT
            Not After : Apr 10 02:22:46 2025 GMT
        Subject: CN=67edf0f6-d96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:33:ad:a1:93:41:75:77:3c:10:5e:d2:b0:
                    0c:f3:df:0e:1e:23:c9:5c:d1:87:6c:97:ef:f9:67:
                    00:f8:ba:c0:9a:4a:20:ff:4c:dc:fa:53:c0:67:dc:
                    c5:36:5b:ba:92:1f:07:e2:ea:c5:33:0e:69:43:1f:
                    20:b0:95:b7:6e:11:13:ab:87:f5:ec:38:38:09:df:
                    93:6a:e5:dd:b8:76:f2:03:4e:29:dc:63:ab:3b:59:
                    a7:09:27:89:b1:5a:20:5b:9c:2b:08:a1:f2:41:a5:
                    41:10:b1:65:46:bb:03:ea:3f:45:cf:9c:1b:23:39:
                    a6:8d:4d:72:10:83:8e:4c:32:da:42:96:8d:ea:fe:
                    a9:6a:8c:7e:7c:5a:97:a2:54:4c:a9:8d:a4:17:33:
                    45:bb:b3:0f:23:43:4a:27:d7:59:88:7e:ce:fd:30:
                    a2:fd:87:86:f7:07:8f:a5:35:31:fe:24:74:49:3a:
                    5d:58:43:76:b0:ef:30:77:fa:b6:20:b3:65:90:05:
                    46:bc:15:55:e3:f5:2c:32:22:eb:19:8e:fb:40:55:
                    d4:e6:ed:1b:fb:70:8a:05:c9:76:8a:d1:a0:ae:da:
                    1a:82:3e:be:bd:74:d2:04:a7:a0:cf:2f:a3:8c:9c:
                    74:4d:37:09:63:fd:a3:bc:c6:53:37:60:57:a3:a9:
                    5f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:99:15:F2:3B:5D:E2:22:5D:A4:15:37:CF:ED:9C:EE:E2:70:43:0F
            X509v3 Authority Key Identifier:
                keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:dc:4e:f0:2c:17:c2:1f:a6:74:95:13:85:12:2b:02:c7:
         a4:a0:5d:9c:a5:a1:6a:97:80:8f:51:7d:60:43:42:5a:30:c8:
         29:01:59:b6:ca:24:5d:fd:98:33:db:6f:5c:29:e8:11:fb:a7:
         15:de:01:14:81:06:4b:99:a6:31:21:dd:41:9a:53:23:e0:3b:
         6d:4e:f7:5e:02:81:a8:f7:47:3e:a4:c1:0c:60:e3:cc:ae:02:
         81:d3:e5:a2:0f:57:59:8c:1c:9e:5c:ba:16:8d:fe:54:2d:4c:
         60:d3:f4:7a:be:bb:70:9e:9b:86:55:b9:62:50:88:61:cb:61:
         e7:28:e9:5c:56:d4:2c:c0:02:e2:97:2e:80:88:60:db:47:c0:
         71:51:2f:b7:55:95:be:5d:f8:79:f3:66:ba:73:af:85:f5:9c:
         08:15:69:76:2e:10:0f:36:16:c5:70:e6:5a:11:35:74:f3:61:
         a2:22:3c:fc:cb:d2:0b:c1:f9:d5:65:34:8c:17:ef:08:1b:2a:
         4f:d4:26:5b:68:2a:12:61:ec:d2:a3:9c:bd:a8:1a:76:51:4b:
         d2:34:4a:1b:80:5b:7d:a4:8e:24:e5:9d:4e:b9:30:93:a2:e6:
         f7:5f:f5:db:fe:98:08:d7:71:d3:3e:4e:b4:31:1a:09:36:55:
         46:69:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:17 2025 by rpki-client