Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
File:                     dS97SFPDqcnwf9naxduWq37y398.mft (raw, json)
Hash identifier:          OlxObyQ7XVAJJRxLzc9LgiEZtx3q5f2o3d01+wkDrNU=
Subject key identifier:   92:40:F0:1E:D9:9A:5B:64:9A:71:49:36:40:26:A3:D3:51:DB:43:A4
Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
Certificate issuer:       /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
Manifest number:          0376
Signing time:             Wed 09 Apr 2025 00:36:27 +0000
Manifest this update:     Wed 09 Apr 2025 00:36:27 +0000
Manifest next update:     Wed 16 Apr 2025 00:36:27 +0000
Files and hashes:         1: dS97SFPDqcnwf9naxduWq37y398.crl (hash: BMOHPKIVJWTlth8KcTDNee6aJgvEmi1wmwpDPizsqTg=)
                          2: 6A4842A69F8611ECBE806D30C4F9AE02.roa (hash: vZ6MvUd27mPzfp5A96TFmJZRSLkOxkRd29pgThht6lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl
                          rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 00:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913979C
        Validity
            Not Before: Apr  9 00:36:27 2025 GMT
            Not After : Apr 16 00:36:27 2025 GMT
        Subject: CN=67f5c10b-a1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:48:c5:63:06:4c:17:1b:2c:64:00:b4:fa:
                    c1:7b:f1:c5:37:7b:22:ec:59:12:d7:3d:46:ba:4b:
                    14:c5:64:ab:7a:a9:a4:c6:9a:65:da:ac:06:28:9f:
                    a4:0e:e5:a9:a9:f5:e0:76:8a:be:38:fb:3e:02:34:
                    72:6b:da:d2:37:cb:c7:71:cc:cd:71:2c:77:fd:bb:
                    32:cf:3d:8d:be:1d:a2:69:e7:1d:32:4b:03:5c:af:
                    c7:25:11:05:ac:71:8d:da:ce:e5:89:81:e0:08:fc:
                    1b:07:ee:cb:e5:61:27:4a:6c:e1:44:48:ce:b1:aa:
                    47:02:39:11:74:b5:75:26:8f:91:ec:94:85:f7:77:
                    88:7a:b7:5f:06:3c:0f:5a:cb:b4:67:be:d9:ff:15:
                    c8:09:3b:00:29:2e:f3:17:00:74:15:cc:b0:93:c7:
                    7e:b9:ce:8c:87:53:33:cd:6c:6e:6f:6e:51:74:01:
                    e8:48:a4:77:fa:cd:8a:86:5c:0b:6e:98:70:6c:0a:
                    98:9e:46:c5:15:a6:3c:9c:fd:57:b2:24:de:c5:6d:
                    0f:bc:11:60:d3:77:ce:05:c4:63:54:fc:37:f5:00:
                    f4:25:d2:a6:25:93:56:d4:70:b8:b4:5e:d3:47:c6:
                    9e:12:62:b3:91:e9:a6:2c:b7:d8:18:11:31:f6:c7:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:F0:1E:D9:9A:5B:64:9A:71:49:36:40:26:A3:D3:51:DB:43:A4
            X509v3 Authority Key Identifier:
                keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a2:39:4e:7c:91:cf:81:29:d9:b8:f6:55:db:32:fc:12:8c:
         f4:03:35:35:05:42:3b:f7:f0:ae:6c:6b:9f:7e:d5:d6:53:b9:
         19:61:82:0e:d5:e9:b4:58:03:10:ab:25:16:8c:bb:2c:72:53:
         88:ee:a9:69:4a:5b:db:83:f0:7e:84:39:4f:e6:21:04:6d:5a:
         67:1c:10:c4:c7:1d:91:54:d4:11:76:de:97:b7:6e:4b:50:89:
         bc:a5:63:3b:76:46:ba:b0:cb:bd:e7:f8:ae:2b:13:52:c8:62:
         77:5c:38:e0:26:e4:6d:bd:3a:2b:01:23:9f:b3:b0:56:fb:2b:
         f8:26:81:95:67:3b:f8:bb:80:c4:2f:00:19:a2:a5:be:1d:72:
         41:bb:a9:c6:13:27:cb:56:93:9c:ad:01:2a:28:2a:b2:a1:83:
         b8:69:f0:ad:5a:55:f5:99:ea:ef:ed:ca:43:9c:52:ab:7d:25:
         c9:5b:86:01:7f:aa:10:62:9f:9a:79:a6:a8:e8:7d:9a:6b:a3:
         dc:09:7b:c2:8e:c8:25:b5:6b:28:14:f7:f1:cf:d2:51:65:d2:
         39:9c:4e:22:f4:d8:32:a3:3b:d5:2d:3f:71:4f:72:3c:ac:e7:
         4a:cb:0c:28:94:e6:fe:fd:c7:7f:f9:ee:0d:30:92:5e:8c:44:
         17:51:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:56:22 2025 by rpki-client