Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File:                     SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier:          ojdKdFHCVJZlnqNVgoZGUEADL/r6mQWyNNhYiRa0Szo=
Subject key identifier:   DC:BA:FD:24:33:E7:BE:CB:49:8A:A0:E1:20:07:89:39:7F:40:29:48
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number:          013F
Signing time:             Sat 05 Apr 2025 03:42:31 +0000
Manifest this update:     Sat 05 Apr 2025 03:42:31 +0000
Manifest next update:     Sat 12 Apr 2025 03:42:31 +0000
Files and hashes:         1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: YHJxkVhFLdr8XKGuSkXYKuI2AnkLAOtOzzEtp1/Ltmc=)
                          2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: u5XCjKJ3dW4XeKjruW6bKKkvEYHMaTHcPhAzry86YE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl
                          rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 03:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675
        Validity
            Not Before: Apr  5 03:42:31 2025 GMT
            Not After : Apr 12 03:42:31 2025 GMT
        Subject: CN=67f0a6a7-7447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:a1:55:da:74:89:e1:91:72:cd:35:b9:05:
                    b9:cf:f1:85:62:aa:99:18:a9:6c:e3:99:3f:bf:c9:
                    6b:31:30:ca:d1:ad:71:c4:f1:99:30:0e:65:22:ba:
                    60:df:3e:0b:21:35:b0:2e:73:59:6c:96:76:4b:97:
                    a8:4c:4b:23:3c:0f:ab:fe:98:5a:e9:16:8c:36:bd:
                    74:97:8f:ab:9a:bc:27:d4:3a:b9:d8:63:7b:26:56:
                    6d:74:7c:56:13:46:e9:8d:ad:c2:0c:61:e3:87:f4:
                    d6:36:51:88:d8:3e:65:da:73:d0:46:df:02:d6:a7:
                    e8:d1:bc:8b:bc:4e:b1:aa:b7:11:dc:d3:09:e8:9d:
                    93:e6:6c:c4:be:d9:16:72:9a:91:fe:b9:34:e1:49:
                    55:e4:76:7b:ee:c0:67:2e:2c:ce:46:d7:2f:6c:3c:
                    ad:db:24:79:b1:9f:22:5f:ac:82:fd:a2:ff:c6:69:
                    45:7f:30:6f:44:e7:3a:df:3d:e7:73:cd:2b:21:2f:
                    3f:d8:c9:f0:fd:af:d4:8a:99:49:ea:c4:93:f7:df:
                    50:34:31:58:7f:15:20:76:79:18:16:50:2f:0b:2f:
                    31:43:21:27:ad:10:32:18:45:71:b2:94:66:7e:fd:
                    be:a5:ae:e9:00:96:94:e4:fa:1c:dd:ec:1d:3d:4f:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BA:FD:24:33:E7:BE:CB:49:8A:A0:E1:20:07:89:39:7F:40:29:48
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b2:34:f8:b4:24:55:21:13:bd:ac:92:56:37:c2:72:49:7e:
         1d:26:f2:82:4d:3b:bf:93:fb:03:6e:24:83:5b:eb:7e:d5:0d:
         66:c8:3e:d6:f6:7a:0e:dc:11:1a:94:a5:44:90:43:ec:2f:5a:
         8c:43:59:8d:bc:02:84:dd:7c:67:ca:0d:44:d1:68:a4:79:b6:
         39:43:2e:5f:ba:b5:c4:87:b0:c3:1f:04:aa:eb:c3:fa:5c:8d:
         db:6f:d5:5c:ed:5f:d3:2b:98:53:dd:ff:c6:2c:ac:7d:c4:29:
         7e:a0:77:f9:59:38:2f:34:79:d5:be:93:39:3a:37:1d:83:f7:
         e0:03:a8:09:02:8e:99:f9:3c:53:6a:b4:45:f1:d0:13:15:82:
         c4:eb:b4:2a:6d:9e:eb:ac:6a:65:5a:be:5b:81:19:4a:81:a4:
         89:18:0d:bf:d9:ec:5f:7f:ba:22:be:83:11:e5:89:96:13:02:
         73:7f:9f:21:09:9a:ff:3a:22:63:ea:ed:6a:fe:9b:77:c8:c3:
         79:64:34:7b:be:0a:37:2e:ba:e2:51:ab:1d:2c:be:20:11:07:
         15:2a:71:2c:57:40:96:80:3f:4c:7f:b9:66:a2:7d:87:81:ee:
         d6:ab:ec:62:c1:73:cd:72:65:3c:74:45:ee:f6:47:82:37:7e:
         fe:ac:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:42:31 2025 by rpki-client