Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File:                     H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier:          HF7qT1DoCKJl8Dd6c9apZM8FvmA9RcTJedJIdKsjQlE=
Subject key identifier:   F0:FD:42:39:56:07:95:89:D3:19:E7:75:7D:2B:31:86:AC:7C:70:43
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer:       /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number:          059E
Signing time:             Sun 06 Apr 2025 22:49:34 +0000
Manifest this update:     Sun 06 Apr 2025 22:49:34 +0000
Manifest next update:     Sun 13 Apr 2025 22:49:34 +0000
Files and hashes:         1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: 4y8btTjE8AS4Rya2aKOyi98AWRuhHFzmou+p2VlZBv4=)
                          2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: E/ZSFb0w8l7IP55HohiEiKQ/xTqSgiZ1I0q7vfGX9Y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
                          rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 22:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912708C
        Validity
            Not Before: Apr  6 22:49:34 2025 GMT
            Not After : Apr 13 22:49:34 2025 GMT
        Subject: CN=67f304fe-f18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:b3:c8:f7:16:b5:bb:f3:56:82:54:11:36:
                    e0:b8:bf:c3:12:fc:cd:9b:72:c4:c4:24:d6:46:d6:
                    55:53:9d:14:b3:98:86:ad:3c:4c:95:bd:c7:28:47:
                    6f:6f:94:4b:83:05:31:50:76:3a:dc:23:aa:71:ea:
                    ec:97:15:3f:ca:75:3b:fb:77:a9:1f:36:07:02:7d:
                    7c:55:08:c6:7a:f3:8d:1f:75:60:f0:d9:49:d4:13:
                    39:4d:91:19:d3:bc:9d:7e:ad:d1:40:f8:a7:ea:c5:
                    8f:7c:da:d6:87:5f:83:d1:b3:a2:64:36:c8:4f:bf:
                    f1:50:d9:ae:eb:95:b5:54:b6:ac:69:d2:79:7c:e1:
                    49:75:0e:c2:a8:10:f9:47:9e:b0:c9:38:1b:55:4e:
                    f0:de:c5:27:51:78:29:1b:57:0d:45:b7:da:73:c1:
                    a0:86:96:92:6d:60:ac:88:44:b5:d7:ca:22:36:da:
                    02:15:ce:05:1d:7d:e4:39:e6:3a:3a:b5:6e:40:80:
                    49:ce:64:15:d4:43:ab:19:b5:c3:8d:9a:00:14:66:
                    a5:c1:cb:60:bf:2c:3d:c9:c1:87:5a:e2:5d:b8:6f:
                    02:58:55:9e:ca:fb:72:dc:40:dd:07:49:89:ca:0b:
                    1c:0e:38:91:8d:5b:c1:af:bd:0a:dc:62:13:f6:8a:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:42:39:56:07:95:89:D3:19:E7:75:7D:2B:31:86:AC:7C:70:43
            X509v3 Authority Key Identifier:
                keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:50:ac:ea:45:14:0a:a4:c4:90:37:ca:06:15:39:89:93:86:
         85:13:e9:c3:c6:31:1d:64:9c:72:2d:ad:b6:64:0e:5b:26:55:
         d3:35:17:fe:1b:43:48:fe:54:c9:22:66:7e:5b:5b:8a:d6:ba:
         04:8e:00:98:1c:17:a9:a2:11:04:57:94:5c:1a:55:31:d8:25:
         7d:53:e5:80:38:ab:18:03:e7:1c:c0:4c:61:cc:5b:1a:62:a8:
         d7:b0:be:53:bb:5e:00:45:88:45:eb:c0:20:67:5e:49:e9:a2:
         4f:a9:66:de:fc:a6:60:9c:c8:98:c4:30:8c:aa:c5:04:83:89:
         8b:c9:8c:af:60:a7:e0:32:87:bc:bf:ca:cb:78:78:fe:e3:77:
         af:62:55:12:74:23:d4:fe:cc:36:c7:0d:a8:76:06:8e:b3:89:
         1d:62:37:99:95:e0:b1:c7:6f:d1:0f:1f:97:e0:92:e9:e6:bd:
         64:4c:d7:03:73:42:e1:21:17:74:21:a7:85:20:6c:9d:43:51:
         b9:2d:67:80:61:54:6b:a5:e5:2a:30:2a:e5:e3:61:c0:96:81:
         e2:0a:5c:81:02:cb:86:74:fc:d1:0d:a9:a6:da:e0:4f:09:c9:
         d0:13:78:5a:f2:09:8b:2c:df:e9:f4:50:b5:16:8f:77:15:3a:
         3d:8e:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:26:34 2025 by rpki-client