Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File:                     yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier:          YIxtExh3S102ZDLbLQfFCWjXriBQCsXWUPCTO+ybDJ8=
Subject key identifier:   51:7F:48:CF:94:B8:53:56:C6:F1:D0:A6:DF:AB:12:62:42:A0:0D:39
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer:       /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial:       0B59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number:          0B44
Signing time:             Fri 28 Mar 2025 19:21:37 +0000
Manifest this update:     Fri 28 Mar 2025 19:21:37 +0000
Manifest next update:     Fri 04 Apr 2025 19:21:37 +0000
Files and hashes:         1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: mZmDDheGFUq8nWoPcJcIHDN5pVb6s4f6N+NBsaWocnQ=)
                          2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=)
                          3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=)
                          4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
                          rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 19:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2905 (0xb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC3E
        Validity
            Not Before: Mar 28 19:21:37 2025 GMT
            Not After : Apr  4 19:21:37 2025 GMT
        Subject: CN=67e6f6c1-4f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:b3:c8:37:4e:fa:42:a5:12:01:1e:9f:d0:
                    e1:8a:88:8d:a7:83:0f:c1:f1:ef:26:db:6e:8e:93:
                    83:de:43:2c:4b:e1:74:28:81:3d:64:92:86:72:3a:
                    92:56:22:11:3b:2b:51:5a:e3:1a:22:fb:c1:5c:dd:
                    94:64:19:7d:e5:53:18:56:6b:a7:d1:e6:cb:c0:d4:
                    30:d7:58:d1:25:17:08:c0:30:ec:f0:34:81:04:86:
                    72:31:1e:bc:ec:ae:71:75:8b:30:f0:10:70:75:16:
                    56:55:52:43:b7:56:56:7a:87:04:67:49:21:4a:e5:
                    ec:c2:77:47:2d:73:32:ab:1e:34:22:c7:27:c8:ce:
                    b8:45:5b:ae:15:00:1e:b8:da:72:8e:ca:03:5b:03:
                    55:7f:8b:58:9b:0a:2c:99:73:f5:ea:c9:95:69:6e:
                    a2:49:d0:98:1b:0e:8a:6f:22:98:65:0c:cb:55:97:
                    90:5c:60:1c:24:8a:08:38:50:02:98:51:01:93:8b:
                    e3:aa:c6:14:49:3f:d2:9a:f1:36:b6:ea:cc:fc:03:
                    06:6f:25:be:9d:32:89:9a:05:4b:0e:4e:fb:97:a6:
                    71:43:69:99:49:70:d0:79:84:32:9c:51:ae:92:4a:
                    48:d3:5f:e1:29:96:37:e7:62:ed:e9:2e:5b:d6:fe:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7F:48:CF:94:B8:53:56:C6:F1:D0:A6:DF:AB:12:62:42:A0:0D:39
            X509v3 Authority Key Identifier:
                keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:ff:d5:43:63:10:6b:ab:4e:c6:8f:f0:36:5b:0b:bc:e9:
         24:93:6f:16:12:d5:5b:34:81:1b:f2:e2:0e:f6:ed:7b:90:70:
         c2:30:ef:82:64:1f:37:7b:6c:28:e5:45:e5:63:79:03:38:5f:
         ff:b6:70:c9:63:54:f0:d9:91:9a:32:34:ae:97:ce:d9:8f:94:
         e1:ec:2d:f5:37:a6:a0:4a:3c:3f:6e:ff:0c:0d:7c:2c:d1:25:
         72:38:93:47:c9:0a:fa:82:f4:09:0a:17:5f:36:99:fb:ab:19:
         89:e0:2b:26:4a:da:48:2c:d0:97:55:d3:ce:7e:88:1b:0f:1e:
         57:92:7c:8b:cf:1c:ff:6f:d5:46:84:44:b1:1a:70:97:00:51:
         d4:c1:84:d7:18:6b:29:e1:33:e4:78:30:f0:c3:4d:10:5d:74:
         57:c6:83:85:77:29:34:42:c8:c0:85:6d:c9:62:4d:a3:49:fe:
         40:e0:28:e1:8b:7a:ad:98:ea:d4:bc:8d:d2:42:ea:1c:e9:b5:
         15:dc:e0:75:c4:61:b3:08:e4:c4:51:86:ec:6d:9d:17:01:82:
         ce:a1:13:9b:9e:72:37:d4:c3:a4:7d:da:e0:4d:bd:ed:5b:64:
         7e:c5:14:6a:3a:72:cb:62:34:5b:08:a0:37:7a:ea:8d:d1:4a:
         54:c1:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:31:51 2025 by rpki-client