Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File:                     _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier:          IZJIfIlE7JSTC6Bmz048GDgZPXuBCqj2fnTm0flCykQ=
Subject key identifier:   4E:06:29:15:62:F2:C5:48:57:81:94:A1:E5:17:7D:2E:14:10:E0:39
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer:       /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial:       0521
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number:          051D
Signing time:             Fri 28 Mar 2025 23:49:31 +0000
Manifest this update:     Fri 28 Mar 2025 23:49:31 +0000
Manifest next update:     Fri 04 Apr 2025 23:49:31 +0000
Files and hashes:         1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: /LBUt65/eO+DLssls3GWDOQi8BxgTD69hHrp1HoQWQg=)
                          2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: L6NkrUDLV6Dmkk8kbRWqS9urNPurijV7bD/FqK/kzIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
                          rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91216AC
        Validity
            Not Before: Mar 28 23:49:31 2025 GMT
            Not After : Apr  4 23:49:31 2025 GMT
        Subject: CN=67e7358b-409a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6a:8d:de:0d:d1:a4:0c:58:f9:94:63:b2:68:
                    db:9c:87:1b:41:aa:86:78:fa:7d:4c:5f:99:6b:8e:
                    6e:42:ef:48:e7:1c:a7:6e:b1:be:f4:1a:bb:bc:da:
                    2b:4b:98:bd:44:81:87:da:03:be:03:ba:49:08:94:
                    16:09:da:79:81:ab:5d:82:09:20:90:27:90:cf:6c:
                    5b:60:25:10:08:98:d8:ac:98:4e:9a:13:3d:ba:ae:
                    b1:84:03:9e:a7:85:60:fe:b3:f2:f6:c4:fa:8c:c8:
                    9f:13:aa:dd:b6:c0:f7:6b:e1:c6:2a:9a:94:87:2e:
                    30:86:6f:1f:eb:14:ae:6c:9e:66:3c:a1:f0:6f:dd:
                    f0:40:ad:98:fd:f0:e6:54:3f:a5:57:2c:0e:51:fd:
                    34:88:cb:c3:38:9b:4a:5d:a6:cd:ea:99:88:87:c2:
                    13:e9:31:56:da:d7:68:c7:54:99:f6:54:9d:62:f0:
                    b2:ae:6f:f1:4a:75:c0:a6:74:db:8b:c4:2f:05:64:
                    e6:fa:79:3c:f5:e9:0a:d0:ba:20:1e:72:55:19:57:
                    12:85:6c:ba:fa:21:ee:0a:1b:2b:0d:7a:8f:24:05:
                    d2:6f:29:af:9a:4f:fc:d4:02:35:8a:c1:65:85:b3:
                    6e:c9:ab:43:32:95:76:b3:8c:d1:5f:e5:e1:cc:4c:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:06:29:15:62:F2:C5:48:57:81:94:A1:E5:17:7D:2E:14:10:E0:39
            X509v3 Authority Key Identifier:
                keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:28:55:61:1b:6d:16:0d:f9:2f:e0:cb:4f:6b:16:ae:87:4e:
         0a:20:d2:ed:e9:4b:d4:ac:9a:c3:af:82:8e:47:d6:b8:a8:fe:
         b3:e1:d9:43:30:98:c0:b6:ea:32:58:d4:d2:b9:3d:8a:d8:c4:
         47:7d:ee:6e:77:36:44:ed:63:c3:d8:74:87:ca:70:db:81:f9:
         e5:08:48:31:7b:c5:3e:49:fa:91:ef:e1:80:8f:ad:ef:8e:3f:
         91:a9:2f:4d:fa:54:3e:13:f7:54:c3:57:80:ef:56:94:63:a9:
         7a:9d:3a:30:6e:84:20:a0:58:52:e2:8d:ad:a7:58:5f:a4:fd:
         b4:f3:6e:ae:f8:f4:ab:29:6e:4d:fe:af:2e:4b:8a:e2:a1:e8:
         49:b8:7d:06:3b:81:b7:89:c5:5b:ac:8d:03:79:e5:53:b9:8e:
         70:ca:f0:b1:73:25:fe:72:a3:5a:72:0a:75:0a:4c:b6:bb:68:
         83:ef:b7:a3:53:46:34:7c:25:c7:ef:eb:55:5b:a8:07:b7:cf:
         14:44:27:27:9f:19:7c:f6:97:b5:e7:4b:61:d0:07:2b:0f:ee:
         35:2e:2a:bc:bd:f9:08:e6:8d:b3:47:13:f3:81:03:d7:91:03:
         e4:62:93:f3:55:8e:42:da:2a:4e:9d:47:8f:9c:40:3d:a2:55:
         5c:d5:5e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:28 2025 by rpki-client