Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File:                     cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier:          FPfv3YzMRKf1a3CrBVdN0Ig4QbETrnIyOeM2P79nUls=
Subject key identifier:   C0:99:D8:4B:CF:1A:CE:9A:B5:92:F3:4D:99:AD:5E:8C:13:5B:4A:6C
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       0772
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number:          0761
Signing time:             Fri 04 Apr 2025 21:44:37 +0000
Manifest this update:     Fri 04 Apr 2025 21:44:37 +0000
Manifest next update:     Fri 11 Apr 2025 21:44:37 +0000
Files and hashes:         1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: jeGGt+Ud0nrBm10+spK7BudoGbf77sugAJIbpaAEojE=)
                          2: B5CD0B4A7E9911EFA0499366C4F9AE02.roa (hash: K5Vm4qvHgfpuj9N9WiPTdys/h98yod+L3DsMPWmLJLE=)
                          3: 5C1E69E043E011ED96455A4BC4F9AE02.roa (hash: e7SBLoxMBx4x5ht8NET4tOJq/spHIfRHT7uRlVEjM38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E
        Validity
            Not Before: Apr  4 21:44:37 2025 GMT
            Not After : Apr 11 21:44:37 2025 GMT
        Subject: CN=67f052c5-d2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:e6:37:82:a7:fc:3b:f3:4d:3b:87:13:fe:
                    0d:23:2f:88:63:fc:71:35:8d:94:68:91:9c:3f:70:
                    68:be:7b:eb:bd:ce:31:ad:3a:2c:9d:56:57:8a:f7:
                    6f:fa:27:30:01:b3:4f:3a:77:a2:26:b6:66:8c:cc:
                    95:56:93:63:96:2c:28:e2:61:ab:55:cc:bd:37:41:
                    62:b8:28:a5:34:bd:f1:5b:de:c0:8a:ba:4a:c6:5f:
                    80:cb:e1:a3:7e:15:b5:ae:6d:df:ca:34:4e:7c:8f:
                    0c:a6:70:06:79:a5:04:7a:31:29:6e:0d:3a:e5:47:
                    4f:13:20:a1:1c:28:07:cb:fc:3b:a2:84:50:ae:33:
                    cc:6f:da:84:91:8c:71:5f:f4:79:a8:5b:13:b0:f6:
                    23:3f:fe:ad:59:c8:b9:b6:6d:a8:cf:41:1d:89:4f:
                    76:aa:4d:1a:89:b3:89:d5:3a:ea:ce:6f:92:fd:34:
                    db:e8:57:ac:f9:47:d2:71:82:c8:1f:3c:49:e9:da:
                    b3:26:fd:ca:80:5b:40:07:38:60:c4:e9:66:d3:a7:
                    0a:70:b9:69:2c:87:a2:10:56:b5:11:0a:b8:b1:09:
                    40:56:26:97:d6:1f:3d:d0:98:a2:e7:54:c6:b4:d7:
                    65:c9:66:4c:47:fd:65:b0:21:e8:6e:5f:44:95:3a:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:99:D8:4B:CF:1A:CE:9A:B5:92:F3:4D:99:AD:5E:8C:13:5B:4A:6C
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:dd:5d:5d:72:da:0e:e0:30:ec:59:48:b0:f4:8e:42:eb:5d:
         e9:8c:0d:7a:88:cc:84:a7:b5:3d:79:a1:41:b3:02:cb:b2:5b:
         d9:88:02:74:ee:c5:0a:32:ba:41:7b:7c:c7:46:0f:4f:47:a1:
         d6:34:8e:6e:06:87:f7:98:fc:a3:b5:92:9b:d6:89:0c:59:fc:
         83:e1:66:02:0a:7f:ed:89:e6:30:2c:91:02:6a:66:b0:42:f9:
         67:85:e7:fb:17:e9:c2:dd:70:3c:91:20:ea:28:0a:29:b0:16:
         b7:4c:64:b5:88:66:55:77:c0:34:e2:bc:e4:8f:7c:6b:21:da:
         17:c3:14:e8:61:1d:70:1c:12:a9:36:cb:f4:e8:4a:77:12:ca:
         8b:4a:b8:1d:53:78:52:5a:98:5e:b8:d9:e1:c9:95:62:4c:05:
         58:e2:c5:f7:25:3a:06:b4:0c:54:2b:cc:6e:98:d7:08:79:49:
         b6:e5:61:6e:6d:03:cd:17:6f:78:2b:36:fd:db:1d:38:67:e1:
         74:be:70:83:c4:ce:fa:6e:74:69:69:32:80:eb:b7:d1:2a:48:
         6a:ca:9d:9b:de:fe:9d:63:8b:05:7e:4c:83:f9:30:7d:9f:90:
         6d:dd:52:a8:a2:dc:26:7f:8b:04:05:19:4b:51:4f:cc:b6:e4:
         dc:29:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:43:00 2025 by rpki-client