Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
File:                     njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json)
Hash identifier:          qic1284KpHxdbEB7Ah7XfOp4AjiCjf09zP0XuIr6jZU=
Subject key identifier:   77:08:D1:D4:E4:67:32:B0:D0:3A:99:33:41:CA:BB:89:3B:AC:5F:29
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Certificate issuer:       /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial:       052B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
Manifest number:          0527
Signing time:             Fri 28 Mar 2025 23:47:19 +0000
Manifest this update:     Fri 28 Mar 2025 23:47:19 +0000
Manifest next update:     Fri 04 Apr 2025 23:47:19 +0000
Files and hashes:         1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: B75/CQRik3+mq2pvbvjrqjlfzKtwfblrUBgvVy1bJtY=)
                          2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: Pfjb1wm6jDOim3eSfbu3Z5HUwd0Kah9HIhgDBWP9f4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
                          rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91177A8
        Validity
            Not Before: Mar 28 23:47:19 2025 GMT
            Not After : Apr  4 23:47:19 2025 GMT
        Subject: CN=67e73507-df15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:88:73:8f:c2:82:3e:c6:90:a2:21:c1:43:
                    3b:34:2f:fb:3a:66:85:c4:85:98:b5:87:c1:2c:bb:
                    66:8d:f5:ba:84:d0:0f:b1:27:53:55:d4:15:3a:47:
                    c6:c1:65:f7:19:3f:fd:83:3a:a6:da:c5:57:b6:e7:
                    1e:27:b9:05:62:2d:71:86:e9:da:e9:ba:8c:4b:cf:
                    d3:e9:38:ad:d3:ec:04:89:27:b2:34:bc:04:3e:74:
                    b4:a2:2a:c3:94:04:34:21:f2:67:4b:74:eb:9e:0b:
                    02:c1:1a:00:56:30:d2:b2:9d:20:d0:c7:b4:32:41:
                    3e:5b:e1:35:59:ef:e3:dc:72:0b:d7:d3:de:d4:94:
                    c0:a9:e0:ef:df:5f:ee:57:b3:12:3f:d3:3f:c1:db:
                    31:85:ac:0a:d0:60:e6:15:d9:8a:76:ac:49:72:06:
                    57:1a:e5:54:b1:e1:cb:3f:28:8a:b5:23:78:51:66:
                    76:b7:67:0e:88:3a:86:a7:09:f8:b9:64:c9:09:c8:
                    26:22:48:fe:05:c1:45:9c:82:ef:e0:71:e3:cb:c7:
                    a1:d8:14:b2:4c:2f:40:3e:96:30:71:cc:ca:58:ff:
                    2c:79:2e:2d:02:19:bd:b6:30:e0:f0:c8:0e:d5:fc:
                    23:31:9b:1f:40:a7:b8:66:17:fa:32:11:1a:4b:03:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:08:D1:D4:E4:67:32:B0:D0:3A:99:33:41:CA:BB:89:3B:AC:5F:29
            X509v3 Authority Key Identifier:
                keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:69:11:e3:2a:91:1a:ae:4f:83:b7:ec:7d:64:db:4c:0a:26:
         ad:0a:77:58:cb:66:b2:81:0d:c8:05:38:78:af:05:51:5b:23:
         8c:10:3c:00:0e:e9:9b:70:00:d7:54:d3:89:2b:5d:5a:3d:be:
         0e:00:96:52:1d:00:95:fc:4d:04:5d:2f:9a:35:2b:c0:7d:fd:
         4a:f6:b1:a3:53:b1:90:5b:17:3b:ca:f6:c8:c7:57:18:44:0c:
         6b:9f:bd:af:4c:6b:4f:c0:f3:e8:12:6d:45:4c:41:d6:42:68:
         cf:b7:d0:0d:ae:f4:0c:76:34:40:d7:11:5a:ad:7d:87:ca:e7:
         87:39:2a:8e:60:c3:af:1b:26:64:73:57:00:12:02:6c:3c:6b:
         38:c9:15:c3:d0:69:82:46:d0:f6:cc:da:60:e5:3a:59:41:9d:
         37:62:77:06:af:d1:92:33:98:b6:76:13:83:0b:36:dc:01:f5:
         04:71:21:8b:d2:f7:7e:d2:d4:19:9f:a0:d2:1c:0f:ec:74:aa:
         40:49:4f:86:eb:17:ca:95:7f:f4:4c:68:c7:25:1e:95:ec:b1:
         f9:55:4c:8a:9b:72:83:b6:fe:9b:56:00:6a:f4:93:f4:a9:68:
         00:87:85:8b:47:17:c7:79:44:7a:2c:7c:be:a7:41:ab:23:03:
         74:12:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:32:17 2025 by rpki-client