Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
File:                     k1ndLhIU62ulYiqzyAtqkhZoDMw.mft (raw, json)
Hash identifier:          uJvSub393BWEP+qFbjwP3gX+/51oDQE2Mn/ucZ5S8No=
Subject key identifier:   2E:71:2A:FA:F4:37:C0:C0:F6:D1:6A:89:14:FC:4B:0C:E6:5B:10:7B
Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
Certificate issuer:       /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Certificate serial:       05EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
Manifest number:          05E6
Signing time:             Wed 16 Apr 2025 22:38:47 +0000
Manifest this update:     Wed 16 Apr 2025 22:38:46 +0000
Manifest next update:     Wed 23 Apr 2025 22:38:46 +0000
Files and hashes:         1: k1ndLhIU62ulYiqzyAtqkhZoDMw.crl (hash: 06x2fz72F7EIASGeDrwezSPiWaDmRitjnrg8+PO03d0=)
                          2: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (hash: My0gxkPTiPIufgJL4YRuXb9RXfxXNWfL0lWpF2RiHBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl
                          rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 22:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BBE6, serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
        Validity
            Not Before: Apr 16 22:38:46 2025 GMT
            Not After : Apr 23 22:38:46 2025 GMT
        Subject: CN=68003177-3eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:2b:66:6f:29:d9:10:42:8d:25:56:bf:2f:
                    e6:4b:ee:a0:ad:b2:65:b4:b1:b2:9d:1b:33:82:ba:
                    49:4d:be:ba:a2:99:4e:0c:8d:ec:c0:42:2c:83:46:
                    33:b7:ba:42:b1:96:1b:15:36:b1:51:08:23:c5:0f:
                    cb:92:0f:41:0e:fd:dd:9c:9f:90:e6:3b:db:35:da:
                    f3:20:94:2d:9f:ca:f7:f8:4a:17:76:d7:ac:cd:74:
                    58:09:45:c2:b7:c2:f3:aa:e7:12:d5:f2:0e:8e:98:
                    d7:81:10:2b:43:97:d6:b6:27:fc:b9:e7:95:7e:77:
                    13:ad:74:ae:71:59:27:01:6b:01:5a:1f:56:52:e3:
                    20:ba:8b:17:43:be:f1:4c:19:41:ff:41:b3:e7:49:
                    e6:48:a6:27:dc:e4:70:4a:29:7c:e1:5d:03:09:1d:
                    1d:61:75:02:8b:33:ec:18:95:ac:97:a6:42:0e:03:
                    67:2a:cb:c7:0d:b4:f7:86:1f:2c:cc:4f:a9:b0:0e:
                    51:a3:20:6b:73:8c:ea:08:6f:6d:87:64:c4:36:22:
                    e0:8f:36:5e:1b:cf:f0:36:45:d3:fe:51:c4:ab:8b:
                    b2:ed:ea:31:80:32:f7:c4:f1:fc:0f:f9:0f:58:c9:
                    57:3b:31:cf:f4:49:37:fe:43:1a:53:bb:7c:fa:99:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:71:2A:FA:F4:37:C0:C0:F6:D1:6A:89:14:FC:4B:0C:E6:5B:10:7B
            X509v3 Authority Key Identifier:
                keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:bb:c5:ee:e6:c5:63:ea:0f:9e:bd:0f:59:88:5c:f0:b6:
         59:32:01:00:2b:5b:d4:88:bf:fb:c3:b5:88:8e:05:9b:bb:81:
         5e:86:f2:4d:cc:8a:75:43:7d:11:f6:33:56:ab:b2:7e:59:7d:
         43:89:9a:bf:13:27:24:e7:57:fa:f0:00:03:51:6a:b7:d5:02:
         de:74:8c:4f:82:c0:fb:83:b2:99:49:b0:23:b6:6a:0c:2a:87:
         83:b6:53:14:94:4a:4e:0a:e7:e3:86:5e:d9:fb:2a:3a:44:01:
         45:24:db:b2:29:56:13:9f:a2:6e:2b:39:92:ff:c8:ca:f9:0e:
         2c:e9:5e:58:a5:6e:89:b2:c1:4f:75:89:ce:53:70:8d:36:e0:
         24:67:bf:d5:69:90:1c:1d:88:b6:77:24:65:1f:1c:cd:16:a8:
         95:a1:ff:1a:48:b2:8d:18:c9:62:ef:4e:41:45:ac:b7:c3:62:
         8e:75:99:76:f0:43:5d:12:e2:92:0a:c0:61:2b:b8:d2:55:3b:
         f4:55:71:37:63:a2:99:c3:91:24:ee:ca:92:d5:5a:be:16:c7:
         42:b7:5d:a9:c9:c6:7a:a5:fc:de:6a:ea:b3:9b:ac:9d:ba:50:
         ef:a2:65:04:78:5d:9d:b7:7a:a0:3b:27:a9:a0:7c:e8:e5:21:
         21:57:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:01:45 2025 by rpki-client