Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
File:                     w373yMNE0xhYKbwsuZbIlKqoDvM.mft (raw, json)
Hash identifier:          2nRiNvqUxDv76mub20daQ9yRnuT0m2bVp6kU25Hosq8=
Subject key identifier:   B1:EC:32:A2:6C:BA:51:A7:9A:51:AD:DB:C5:D4:E1:B3:44:59:02:F3
Authority key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3
Certificate issuer:       /CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
Manifest number:          71
Signing time:             Wed 09 Apr 2025 05:40:58 +0000
Manifest this update:     Wed 09 Apr 2025 05:40:57 +0000
Manifest next update:     Wed 16 Apr 2025 05:40:57 +0000
Files and hashes:         1: w373yMNE0xhYKbwsuZbIlKqoDvM.crl (hash: 7IQav9Gfe2VDMt46ILMaedl8JJXtVmihaHABDu40Vdc=)
                          2: 95CB7E0E6B5611EFA00DA92FC4F9AE02.roa (hash: duamzviBQYqtExZmA9rAc3mAR9sTDl7eoEu87aRFjpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl
                          rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 05:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912756D
        Validity
            Not Before: Apr  9 05:40:57 2025 GMT
            Not After : Apr 16 05:40:57 2025 GMT
        Subject: CN=67f60869-eb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:8a:56:41:81:bf:6f:15:a8:94:06:45:1d:
                    3b:54:a0:2b:ee:8f:d8:99:34:3a:46:ca:ab:31:90:
                    80:2a:03:58:c1:4c:77:6c:24:2d:82:6c:56:22:68:
                    3f:0e:47:32:62:ad:4f:ef:06:9b:e4:8d:ad:ac:bf:
                    31:8b:f2:31:98:8d:98:c4:1e:af:03:0e:71:23:1f:
                    66:7b:2a:17:7e:e0:ea:47:11:1a:1e:43:e6:ca:b6:
                    6f:f5:68:28:c1:dd:5c:02:d1:ca:da:81:b0:f3:a4:
                    95:cf:05:8d:23:0a:a9:a8:e4:ef:d8:42:cd:ac:63:
                    66:56:cc:65:c4:9f:10:52:7f:fd:39:dd:58:aa:16:
                    0f:1e:32:15:6a:23:65:f2:c8:97:da:61:38:b2:3f:
                    d5:a0:80:51:4c:ff:b9:91:41:80:69:30:51:94:23:
                    5c:1d:5c:bc:4f:da:ea:07:41:01:4b:78:e0:23:d4:
                    ba:49:f1:c6:e8:f2:86:cb:1c:99:35:e0:19:a5:9d:
                    a4:3e:17:ac:99:43:d7:f6:de:02:9f:fa:5a:09:3e:
                    42:be:63:4e:38:3e:fa:db:0a:d5:3d:e3:16:3d:63:
                    f5:d1:a0:3e:75:d1:a1:4b:e2:5c:44:7d:f4:aa:1e:
                    b3:74:05:d3:b2:d7:61:5d:20:20:86:9a:14:9b:49:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:32:A2:6C:BA:51:A7:9A:51:AD:DB:C5:D4:E1:B3:44:59:02:F3
            X509v3 Authority Key Identifier:
                keyid:C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:2e:a2:e1:93:e9:16:de:e9:d0:a3:a9:88:cf:1c:85:88:
         39:41:b2:3b:3d:9d:2a:4b:91:16:72:5e:94:4e:43:fd:97:dc:
         ae:6b:d4:e0:be:a1:9d:26:1a:f8:eb:cd:d0:44:57:31:45:b8:
         56:b0:a8:0b:83:fc:e1:12:dd:2c:78:55:2c:92:3f:fa:cc:41:
         ba:01:07:2a:98:5d:47:74:97:70:77:2e:7e:5e:08:66:58:22:
         e9:2d:b1:70:aa:20:f0:73:c3:93:bb:66:78:1c:6b:6a:2f:62:
         7a:f7:86:7c:18:a6:c7:cf:bf:d1:30:f9:a7:bf:e9:35:45:6e:
         c2:cb:98:ae:04:be:46:69:96:2a:e1:19:2a:9b:8a:82:a9:12:
         51:a4:11:08:81:50:13:fd:f0:de:3d:80:5d:cf:a5:ca:46:cf:
         d6:90:c1:4a:53:df:bf:e4:80:62:38:d1:e2:16:04:5a:0b:7f:
         3d:ab:10:29:7f:8c:b4:81:70:af:52:fa:4c:83:23:d8:21:7a:
         2a:86:95:11:fe:b8:99:0a:b0:81:41:a2:15:42:dd:7f:9b:9f:
         9e:fd:f0:00:41:82:11:46:d4:b2:b7:62:88:02:d6:dd:55:55:
         52:22:f2:89:45:bb:a2:78:01:a0:76:bc:9f:f9:c0:0c:2e:99:
         8e:57:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:02:00 2025 by rpki-client