Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier:          R6fjEphTei2175/pJ06jhNcZt2Pp0ZMV0f4LmCE8Z5I=
Subject key identifier:   E2:F3:52:B4:C5:E0:27:0E:2A:19:1C:92:F9:8B:26:15:7A:C3:6D:6B
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer:       /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number:          0147
Signing time:             Sat 29 Mar 2025 03:46:44 +0000
Manifest this update:     Sat 29 Mar 2025 03:46:43 +0000
Manifest next update:     Sat 05 Apr 2025 03:46:43 +0000
Files and hashes:         1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: dGWWFuKWVyNCrqm8eg8na3DkKxsGQAu1efruuQyGeKc=)
                          2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: ghcy6JDfa3u1ukpc0kfcadEcqAXRi4dJb4eZF65dqFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
                          rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 03:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91295B6
        Validity
            Not Before: Mar 29 03:46:43 2025 GMT
            Not After : Apr  5 03:46:43 2025 GMT
        Subject: CN=67e76d24-c249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:3c:18:6d:4d:dc:8b:84:ac:f0:f2:99:c5:
                    a3:a5:af:b8:e8:19:6f:f0:e8:5c:0e:1e:2b:42:57:
                    28:e9:fe:09:ef:30:84:63:54:31:d7:ce:3c:f2:8a:
                    72:ce:f6:0c:92:87:36:41:96:31:a9:d3:9e:56:62:
                    70:ba:89:25:32:d1:31:79:e0:d2:bd:bb:5f:d8:76:
                    d1:11:ca:46:7c:ce:f1:00:26:36:5d:72:81:3b:ee:
                    f8:ed:f1:1c:91:7e:d4:e3:5d:8e:26:e6:dd:1a:34:
                    1e:e9:78:c9:50:55:3f:3a:51:26:cf:b8:95:f1:02:
                    fc:07:9d:06:60:8c:4b:9d:a2:c7:a6:b9:7f:fb:0d:
                    1a:9c:2e:84:c7:7f:d6:01:4c:31:26:c5:f4:75:f6:
                    c3:52:64:84:c9:60:48:67:6f:45:ba:25:49:d4:65:
                    d9:0c:bd:93:02:b8:bd:4b:2f:66:d0:9c:d1:35:96:
                    6c:4c:04:e9:6e:73:46:70:bf:84:ad:6d:c4:5b:5d:
                    60:ef:0b:87:9b:87:13:7a:cf:8a:a4:9b:f8:a7:b2:
                    a1:e9:14:2c:54:33:26:cf:92:54:16:07:81:26:94:
                    de:72:9f:ff:1d:a2:a4:e4:43:14:ed:07:f2:71:ca:
                    c1:93:a5:19:57:68:62:8b:ec:6f:d9:7e:24:85:f6:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F3:52:B4:C5:E0:27:0E:2A:19:1C:92:F9:8B:26:15:7A:C3:6D:6B
            X509v3 Authority Key Identifier:
                keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a5:8c:db:07:86:06:e4:e7:a8:b0:b9:20:2a:fd:4c:2f:12:
         d2:e0:56:ee:1c:5b:19:16:60:bc:15:8c:a2:12:9e:78:c5:fd:
         e6:aa:85:04:e5:90:c1:41:4b:3e:64:d7:50:6a:ea:9e:cf:c7:
         a4:4e:5e:95:e3:c5:33:f9:f8:b3:6e:a2:66:84:8b:9c:c6:9b:
         99:31:5e:3a:a1:5a:82:4b:fa:54:57:04:65:54:db:77:c8:8c:
         81:0a:e1:48:7d:05:45:e3:33:88:5b:1c:c4:c1:0a:20:f4:4e:
         f8:72:43:70:f0:29:14:6f:f0:7e:50:cd:c5:6e:cc:76:92:e0:
         55:8d:62:8a:58:ff:4b:ce:6b:d8:02:bf:60:df:c0:5f:90:97:
         5b:20:21:d4:d8:d3:4c:59:f8:16:2d:ac:69:c9:a4:76:f8:56:
         5f:cf:f6:00:f0:57:94:82:e5:d7:39:a6:31:8e:d5:4e:b4:40:
         8c:18:df:94:d4:8c:0d:9c:28:52:52:aa:5c:8e:b5:b4:bd:f7:
         24:c2:97:14:e4:2a:92:fb:66:00:39:7a:05:2d:02:ae:f8:8b:
         6d:37:98:b2:d8:2c:da:71:e0:45:b1:1b:1c:48:b9:a7:48:58:
         e1:68:7f:b5:2c:f8:32:d7:e4:a6:18:15:bb:cd:13:e1:46:4c:
         50:97:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:13 2025 by rpki-client