Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
File:                     rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json)
Hash identifier:          Sumhoc6+G/XGLN93cIrBOKcN+ccTCm9z+sROz9e7XwU=
Subject key identifier:   93:D0:E0:BD:E3:72:A2:53:E0:6D:D8:5F:27:A3:44:BC:16:03:78:97
Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Certificate issuer:       /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
Manifest number:          A3
Signing time:             Sat 29 Mar 2025 05:44:16 +0000
Manifest this update:     Sat 29 Mar 2025 05:44:15 +0000
Manifest next update:     Sat 05 Apr 2025 05:44:15 +0000
Files and hashes:         1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: fm42yDcngPesIUIRZkyGHlzHbMp9GdgvHaVNpsHzpMw=)
                          2: E51087D6F1A011EF8BCCFE7BC4F9AE02.roa (hash: Drjef9//01uynvh/lgqE15j1jV9FBWA4Sl6x0Pf7YP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl
                          rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B4A
        Validity
            Not Before: Mar 29 05:44:15 2025 GMT
            Not After : Apr  5 05:44:15 2025 GMT
        Subject: CN=67e788af-cc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:89:3c:82:c7:4c:42:34:01:06:16:4b:21:
                    a6:84:aa:93:77:06:7d:4e:3b:10:73:a1:17:13:44:
                    4b:60:62:ca:32:7b:5c:f9:79:94:fb:cd:87:80:34:
                    73:2e:0c:2f:16:41:f6:ec:49:9f:69:fc:2e:a5:2c:
                    07:4b:f0:49:e2:37:6b:db:e6:21:cb:ed:60:fa:cc:
                    05:93:18:29:9a:0f:9d:3f:86:a4:34:ac:90:cb:40:
                    dd:c1:d3:de:aa:b8:51:d1:26:ef:bf:64:d1:15:fa:
                    e3:20:be:93:4f:0b:e6:5f:e5:4a:fb:03:cf:8d:97:
                    5c:ea:e2:34:23:e9:9a:dd:21:f5:bf:0d:61:1e:1e:
                    29:39:5f:8f:87:21:c1:1b:c9:5a:61:f7:1c:3a:c2:
                    c4:9b:86:a6:96:bf:26:15:1c:8f:76:51:d1:e2:d5:
                    0a:e8:36:5c:cc:f9:06:19:cd:3a:df:8e:73:de:41:
                    4a:9d:39:3c:87:ad:08:91:25:6a:66:0a:7d:82:1a:
                    87:e8:77:77:18:47:ca:b4:5a:13:23:2b:a7:dc:19:
                    da:6b:6e:25:7b:3a:d1:e1:a1:f4:ab:91:04:28:b0:
                    41:1f:49:d4:49:3f:1f:86:37:4e:fd:92:c3:43:c5:
                    35:a5:0b:95:ca:ff:4d:ac:f1:17:dd:c2:66:ef:bf:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:E0:BD:E3:72:A2:53:E0:6D:D8:5F:27:A3:44:BC:16:03:78:97
            X509v3 Authority Key Identifier:
                keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c2:13:47:29:a7:5b:07:cd:69:cb:0e:40:73:be:92:75:09:
         32:5c:b5:2f:8e:c1:0d:79:71:89:6c:4f:df:74:2b:08:32:be:
         e6:8e:c7:ca:54:ee:0f:3c:93:4b:65:09:7b:b4:4c:62:ba:71:
         69:79:ec:fd:3d:bc:3e:a2:11:2c:10:19:90:81:5b:dc:9d:7f:
         c0:2b:3c:c0:05:2c:fa:52:2d:2d:88:de:52:8c:e7:34:5f:03:
         55:ac:26:a9:40:a3:9c:eb:b6:3c:b1:f1:bc:49:85:7d:96:d9:
         d2:12:bd:7d:01:2e:62:80:2f:52:23:10:0c:b0:87:96:75:84:
         29:6a:bc:f3:13:ee:22:53:7d:d9:27:1f:ff:5a:a1:46:a8:95:
         f0:15:93:3f:24:e8:f1:c4:1a:0c:1f:e1:5d:25:00:09:a4:b0:
         b8:2e:90:74:8c:7f:3d:ac:15:ff:09:36:58:8f:d5:90:fb:c1:
         5a:a2:59:e9:71:a9:82:40:75:ab:c7:6d:8a:44:86:95:60:eb:
         f4:13:7c:75:2f:c8:14:0b:1c:b5:45:93:99:72:2f:c3:da:03:
         cc:76:a1:83:70:7e:af:0a:23:1a:72:aa:2d:df:ad:6e:09:03:
         33:38:63:a7:86:1d:44:90:d9:9f:95:7f:73:d1:5f:8c:89:f3:
         c2:ca:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:50 2025 by rpki-client