Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
File:                     Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json)
Hash identifier:          Y+Rsoa6ThqBQJEmPaHIrP5+h5fs5Fvg+VT5LiZ8H+/I=
Subject key identifier:   18:D6:A7:8A:7B:3D:5F:87:16:30:F6:5F:38:51:B9:E9:A9:72:E6:12
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Certificate issuer:       /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial:       0577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
Manifest number:          056E
Signing time:             Wed 02 Apr 2025 23:20:35 +0000
Manifest this update:     Wed 02 Apr 2025 23:20:34 +0000
Manifest next update:     Wed 09 Apr 2025 23:20:34 +0000
Files and hashes:         1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: p04e6vB/q2LU5tt49V9jGFuQT9xB954pOktnmImzdjc=)
                          2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: bvi2PqNlW+oMVQ1UwJQ0bSEdv/ndyrJ9LYRWbNa29XY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
                          rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279C4
        Validity
            Not Before: Apr  2 23:20:34 2025 GMT
            Not After : Apr  9 23:20:34 2025 GMT
        Subject: CN=67edc642-fb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:6b:a6:aa:c3:d1:26:94:a2:05:96:b4:7f:
                    71:a7:ba:3d:7b:83:b9:13:83:6c:5b:96:22:6f:3f:
                    cb:68:0c:89:23:08:b7:1e:f2:86:41:a3:6d:3a:5c:
                    6f:f6:b5:8e:47:f5:56:2e:2b:59:82:02:61:ba:4a:
                    a2:65:a2:61:19:b5:a3:9a:cf:f6:45:e1:c9:cf:d0:
                    f9:27:d8:5e:25:83:2a:f8:b4:48:3e:af:c3:6a:df:
                    ff:da:10:a7:5f:ae:56:dd:71:dc:d3:0c:64:1b:ca:
                    14:1c:25:e0:67:63:ec:68:c2:bc:65:1c:c6:c5:22:
                    1c:0c:bf:76:ea:23:c8:c2:f8:7b:de:26:d5:b6:16:
                    8e:a8:ad:6d:29:a2:c2:15:be:0a:2b:60:9d:fc:2a:
                    7c:c8:35:40:af:ed:cf:b0:ab:d3:d1:2b:7e:06:e4:
                    27:a6:05:21:ad:e9:86:d5:e5:5c:e0:18:8c:8f:73:
                    26:3d:89:ae:99:c2:e4:12:69:db:ba:0d:34:41:78:
                    3b:81:1d:3c:76:70:eb:2c:9e:34:f6:03:70:25:08:
                    4f:23:fc:95:67:17:5c:12:37:e0:c3:57:0f:4d:72:
                    18:d4:cc:c7:95:3a:99:7d:c4:4a:fb:eb:78:40:86:
                    ff:4e:3f:9b:54:1d:d8:be:46:70:79:08:c8:49:6b:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D6:A7:8A:7B:3D:5F:87:16:30:F6:5F:38:51:B9:E9:A9:72:E6:12
            X509v3 Authority Key Identifier:
                keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:d3:d6:d0:a0:4f:e3:6a:94:e3:09:ef:fa:fc:2c:1d:05:
         b0:60:cf:ef:8b:d6:4e:33:d8:1e:25:33:5f:83:5f:ab:8c:98:
         84:24:3e:7e:32:d5:c0:60:46:31:51:69:ef:48:5a:46:8f:6f:
         7b:83:10:e4:d9:ef:69:4e:66:d6:cc:e0:28:a9:cd:da:58:93:
         f0:9d:19:ff:a2:c0:6e:ac:fe:fa:e2:08:cb:9b:e7:8d:a3:20:
         35:b6:b8:05:df:81:5f:ce:2a:e4:17:84:93:b9:51:f8:ca:78:
         2d:27:8d:0f:a2:c8:ec:50:d1:09:31:92:69:d8:8e:21:b5:ee:
         31:e0:42:ee:f5:ae:73:55:27:fd:ae:66:d0:78:72:e5:3d:08:
         4f:96:5f:f9:89:d7:2d:ce:24:7b:8e:58:17:c3:d8:0e:c6:03:
         07:dd:b9:15:dd:16:de:c1:04:72:8d:05:84:f3:b0:b3:d3:50:
         58:8c:ac:84:89:f5:0f:e7:84:f0:50:c5:f3:83:c4:dc:62:f8:
         48:9e:66:ec:10:4f:88:5e:22:a1:7e:e6:f7:22:f4:5f:0f:3d:
         8e:a8:33:36:be:42:9b:8c:90:ce:5e:73:73:f7:28:18:40:03:
         ea:d5:f8:df:14:6d:ac:d7:46:00:71:9b:f8:cb:34:22:bf:b5:
         83:11:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:48 2025 by rpki-client