Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File:                     zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier:          wHgir/Vz6QLhn4eD7IcPuWBrXt0aG6iiYmOjjA8N6uM=
Subject key identifier:   99:F6:BE:C3:6E:F0:FA:43:29:24:AF:47:A6:DF:48:3A:0C:F2:DF:9F
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       045B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number:          03E4
Signing time:             Sat 29 Mar 2025 01:10:15 +0000
Manifest this update:     Sat 29 Mar 2025 01:10:14 +0000
Manifest next update:     Sat 05 Apr 2025 01:10:14 +0000
Files and hashes:         1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: 9QtR5x3x/IgbTgSUm1RjEyM/pk5UDqFrSMdrh2oQT+A=)
                          2: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (hash: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI=)
                          3: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=)
                          4: 8ED9161EB08F11EF8E3C4F2FC4F9AE02.roa (hash: CH8GchMto/uPRqPYkKGBpICTR9Zi45Sn6IDLqaBYXYk=)
                          5: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=)
                          6: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=)
                          7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=)
                          8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=)
                          9: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=)
                          10: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (hash: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 01:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73
        Validity
            Not Before: Mar 29 01:10:14 2025 GMT
            Not After : Apr  5 01:10:14 2025 GMT
        Subject: CN=67e74877-e5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:79:e1:5f:7b:d9:42:f6:51:55:6d:a2:bd:
                    2f:44:d1:43:f0:25:7e:e5:a1:04:e3:4b:ff:a0:db:
                    d7:0f:14:54:18:82:b2:da:19:c6:1c:35:ea:fe:c8:
                    09:99:b5:26:ae:52:8d:d4:44:6f:a5:f0:0e:ab:48:
                    1e:ce:d7:e7:88:05:6d:6c:32:76:d6:e5:49:57:92:
                    84:95:73:76:67:64:69:cc:ea:ab:da:6c:93:92:1b:
                    bd:1e:ed:6a:fa:6d:14:c3:8f:39:18:57:ab:c1:f1:
                    22:44:ef:8c:52:7a:2a:f3:0f:a0:90:86:40:3f:08:
                    7e:36:02:bb:42:f2:52:4e:6e:94:11:32:10:9a:4f:
                    5c:67:54:5d:fb:4b:db:a0:ed:13:b3:50:56:ec:89:
                    c2:ff:3a:b9:bf:34:ca:19:e1:6e:ca:6b:91:ba:9e:
                    1a:83:19:6f:d5:ee:90:85:e9:27:c1:4b:ce:54:dd:
                    dc:09:7e:3e:b2:35:32:f3:c0:85:16:2a:82:ac:6b:
                    77:9b:6a:31:32:e1:90:ec:12:2a:d1:e5:0d:fe:1a:
                    70:fe:81:84:98:b0:ce:09:8b:3e:6f:72:5b:df:64:
                    d3:31:44:9d:76:38:4d:1b:e2:ba:ac:3a:20:9d:01:
                    5d:33:9c:86:e5:89:e2:36:2f:8d:22:d1:38:48:4c:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F6:BE:C3:6E:F0:FA:43:29:24:AF:47:A6:DF:48:3A:0C:F2:DF:9F
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:b7:04:e9:00:70:f0:5a:69:38:b2:d5:da:fe:0d:bc:dc:
         1b:55:ed:07:24:61:15:b9:c9:90:d2:c0:66:3a:a1:60:2c:e5:
         7c:a9:5e:99:29:55:f3:e2:3a:3c:b9:d3:49:ba:23:38:79:c5:
         b1:a3:0a:ff:3d:1d:da:7b:5b:f1:96:89:e5:d4:6f:40:9b:30:
         ca:f1:7b:2e:76:cf:12:9f:75:da:68:20:2f:bc:54:13:3e:da:
         df:d4:71:5d:68:0f:61:31:ec:15:f2:46:ce:15:9a:92:ad:bc:
         72:8a:10:62:07:df:43:3f:74:32:43:dc:2d:a7:40:63:86:5b:
         bc:03:c5:77:80:b4:23:8b:8e:59:db:81:0f:50:81:7c:de:36:
         bc:37:34:1f:6f:21:6e:2f:54:41:73:39:c7:9b:11:1e:e8:b7:
         df:6a:6c:33:6f:85:36:12:95:db:28:04:bf:61:41:61:19:4c:
         8d:19:60:0d:e3:0a:bc:2e:ba:c5:df:18:39:b4:cd:0f:17:4f:
         6e:ad:a5:3e:1d:9b:bd:95:94:54:1c:07:46:e7:eb:17:c6:75:
         d4:77:92:dd:2b:ee:1d:af:91:39:2e:c9:2c:1a:42:7b:20:68:
         59:1c:3c:24:d9:30:ef:c2:77:9c:19:af:af:39:4a:ea:38:a0:
         da:bc:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:32:20 2025 by rpki-client