Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File:                     Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier:          1GDRxXpHn6DQhwKCAgkoEtiG+dB/Vjt74UX3AkNAsnU=
Subject key identifier:   2F:8B:F2:06:98:E3:62:AE:CC:4B:41:82:3A:4D:BD:D7:DD:DB:F3:B7
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0776
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number:          0766
Signing time:             Wed 02 Apr 2025 21:33:44 +0000
Manifest this update:     Wed 02 Apr 2025 21:33:43 +0000
Manifest next update:     Wed 09 Apr 2025 21:33:43 +0000
Files and hashes:         1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: BMxtGZwd5QDl2YGwwjfkAXgh+nL2NPXWE/2WYqiwaR8=)
                          2: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: NwxjtAuSig2rvDoAjn33E7f2GIqou7l6suAw9EO2UWA=)
                          3: 211D4B50690811EF9C1CC987C4F9AE02.roa (hash: O4fLWSLP7M21yKqkXao1YXymrONjU0BVRbI7T2L20kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395
        Validity
            Not Before: Apr  2 21:33:43 2025 GMT
            Not After : Apr  9 21:33:43 2025 GMT
        Subject: CN=67edad38-be23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:5b:9b:f8:9e:e2:1b:e2:bc:78:51:59:4e:
                    21:29:a0:f7:20:df:79:4c:96:ed:26:69:07:28:03:
                    82:82:7c:98:b8:e6:03:3f:0f:e7:aa:d9:6b:0f:10:
                    a6:40:3c:99:91:c8:cd:db:b3:f2:82:43:0d:b7:ff:
                    39:bc:01:a3:51:cb:03:8d:47:df:56:eb:df:d0:b6:
                    3f:bc:45:9f:d6:96:ef:d8:fe:75:f3:f1:06:24:72:
                    52:66:49:b8:13:15:b1:1f:f8:35:1c:77:82:ca:70:
                    36:28:f9:33:89:81:f7:f3:db:53:2a:05:64:46:eb:
                    79:ef:86:7e:dc:e6:74:f6:27:3b:f9:d6:e4:2c:4d:
                    fc:e2:27:17:5e:7c:2f:af:c9:45:7b:b2:29:ff:81:
                    85:6e:f5:6e:33:f0:d3:e0:92:78:78:3f:5b:b8:2b:
                    bb:b8:e6:e3:8e:09:b4:b6:1d:5f:96:68:2c:57:af:
                    db:64:d1:28:84:85:24:82:ab:5d:12:9e:bb:67:42:
                    c9:b6:59:61:4a:e8:35:32:c0:dc:9d:4e:7a:1d:51:
                    f8:85:e4:24:29:97:5e:2c:df:94:b5:09:40:c3:dc:
                    eb:44:fd:37:87:25:c0:c4:e5:ed:5e:f1:9f:b4:a2:
                    2f:e1:a0:ea:23:10:86:b7:58:2e:f8:70:4b:e0:75:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8B:F2:06:98:E3:62:AE:CC:4B:41:82:3A:4D:BD:D7:DD:DB:F3:B7
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:6a:42:23:70:c2:d6:e9:c5:5f:a6:f0:76:18:5e:ea:35:
         e8:67:b1:ce:5d:fc:25:08:dc:96:17:c1:d2:f2:27:3e:5d:0c:
         1c:aa:6d:01:8e:60:37:bd:a2:e6:cd:a8:6f:f2:3f:be:22:d0:
         e0:61:4e:57:8d:fb:77:81:bc:92:ec:29:94:d7:eb:59:4a:0d:
         c6:fd:b5:bf:9a:22:b1:3f:27:c6:b8:2e:ea:e2:1c:12:6a:a4:
         e7:4f:a6:1a:0b:8c:a2:f9:ad:c5:49:1d:62:1f:9a:fb:30:cb:
         d9:7d:88:a2:17:0d:24:58:6d:e7:5e:b6:62:3d:a2:d7:46:4e:
         e5:00:62:8c:a4:a2:3e:f6:b1:3f:3b:54:40:6f:a2:44:25:9e:
         9e:aa:33:1b:29:cf:ca:74:4a:09:e4:93:89:c8:f1:f9:6c:a0:
         f2:88:98:5d:65:86:de:57:aa:40:7a:0a:ed:bd:7f:54:67:f3:
         e6:85:1f:d1:69:7c:f1:94:56:cd:78:8b:eb:94:a0:c1:22:ef:
         27:c5:3c:e0:00:2c:f9:76:35:ec:68:73:67:f4:1d:a3:57:40:
         25:ac:b6:cd:dc:73:d2:c5:c9:a1:13:14:26:18:ec:11:7b:14:
         f8:92:73:1e:83:62:c5:cc:b1:19:48:95:eb:1f:2f:da:41:72:
         55:19:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:44 2025 by rpki-client