Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
File:                     aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json)
Hash identifier:          BYJGJRVfDld1WyWZGojYa0cp3zGeCA0nYxbI3JBE4V8=
Subject key identifier:   3F:4E:D8:CB:32:64:EF:94:66:14:12:BC:8F:43:EC:D4:44:A8:3B:5A
Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03
Certificate issuer:       /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
Manifest number:          0100
Signing time:             Sat 29 Mar 2025 04:32:22 +0000
Manifest this update:     Sat 29 Mar 2025 04:32:22 +0000
Manifest next update:     Sat 05 Apr 2025 04:32:22 +0000
Files and hashes:         1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: EaCcEYTRfNk2dq16TvK+lWWj2SdWYFemLFTYrsUt0gc=)
                          2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 04:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85
        Validity
            Not Before: Mar 29 04:32:22 2025 GMT
            Not After : Apr  5 04:32:22 2025 GMT
        Subject: CN=67e777d6-9f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:9c:44:1f:77:be:e0:13:40:e0:eb:b7:f1:
                    bc:4c:fe:96:86:54:a1:ef:1b:f7:36:88:ab:ff:d5:
                    33:a7:fa:64:4f:85:01:d2:23:b6:a3:1b:b5:05:20:
                    82:f3:5b:b5:66:dc:76:98:a0:00:eb:df:47:5b:04:
                    2d:a9:73:4e:6b:bc:62:31:f4:43:08:9b:64:c7:f0:
                    c6:86:6a:e7:8f:4f:ac:9e:d2:ff:59:66:59:b2:ec:
                    dc:b1:3e:d0:e6:9b:ae:62:61:b4:d3:90:fc:e1:94:
                    9d:bf:78:22:a8:00:ef:10:a7:62:b6:b3:f6:63:8d:
                    98:2f:5b:78:a1:0e:e1:71:29:61:11:de:f3:64:4c:
                    82:24:f0:98:6d:51:e3:39:65:56:6a:38:8a:0b:c6:
                    a5:97:23:c3:fc:b2:cc:67:43:af:de:ab:ed:97:9f:
                    54:6b:1c:37:f9:66:0d:5e:bf:69:0b:98:36:c7:78:
                    d6:9b:9f:44:6b:21:21:f7:a5:82:21:1e:37:9c:1e:
                    77:24:28:0e:0e:61:74:5c:41:4e:45:92:4c:93:b7:
                    a3:f2:54:25:c6:6c:ae:a5:6f:5d:6c:ff:d3:5b:40:
                    97:8c:2e:82:96:fe:9f:46:72:08:42:44:af:75:c9:
                    5f:6b:28:0f:66:47:e0:9d:6f:44:85:43:b0:4d:53:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:D8:CB:32:64:EF:94:66:14:12:BC:8F:43:EC:D4:44:A8:3B:5A
            X509v3 Authority Key Identifier:
                keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:13:16:84:be:a1:67:e0:9e:68:6c:96:05:34:45:af:53:4a:
         de:4a:86:a1:01:1e:2e:81:dd:24:43:90:c0:81:4f:d2:c3:78:
         6e:0a:f1:fe:f5:91:35:6e:fd:d6:05:92:e8:5c:eb:19:eb:41:
         54:77:99:2d:80:55:4b:d4:b7:23:c6:2e:73:63:7f:83:b6:34:
         61:d6:89:49:59:22:fb:cd:c9:85:ba:71:a2:91:b5:7f:c3:9a:
         4f:41:98:e0:9b:63:af:8a:fa:22:2a:76:5f:ab:c1:4e:e7:11:
         c0:7e:44:03:ee:ae:16:61:c9:04:b9:f9:90:6e:64:fb:32:4c:
         84:ff:7e:09:82:f7:ac:3d:cd:3f:6b:37:15:3f:2a:7f:0f:b8:
         db:72:fb:8b:1e:7b:f2:07:fb:e6:18:82:f0:cc:81:34:d3:2a:
         d2:7a:72:83:6c:e3:01:ba:3c:f7:67:7d:f1:2e:bb:03:b5:51:
         a1:0c:35:75:ea:c2:c0:c3:de:4a:39:b2:70:cd:bb:7a:fa:40:
         e4:a3:53:0b:2a:64:cc:2a:64:bd:e4:e9:c1:c6:17:b3:d9:6d:
         e4:18:ca:07:8d:0d:6d:45:92:d8:6a:09:98:9d:e5:1c:f0:6c:
         d6:9e:c3:4e:dc:25:ff:99:6b:3b:f2:aa:34:20:e9:9f:69:a3:
         0e:de:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:11 2025 by rpki-client