Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
File:                     anm3A54zvprmacUWEDfghAEXYgo.mft (raw, json)
Hash identifier:          r76qdg0BzhoGGuvPEtjTt2VgjMPQlJBe5fQNdhfUmL0=
Subject key identifier:   BE:DF:60:62:01:C6:A8:06:86:8A:3F:61:3F:A4:86:7B:CD:55:D3:9A
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Certificate issuer:       /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
Manifest number:          0187
Signing time:             Tue 15 Apr 2025 02:41:58 +0000
Manifest this update:     Tue 15 Apr 2025 02:41:58 +0000
Manifest next update:     Tue 22 Apr 2025 02:41:58 +0000
Files and hashes:         1: anm3A54zvprmacUWEDfghAEXYgo.crl (hash: +17CKVWkWAz3sx6iA95XyGyI/0vKMPinlNPCIBHszSA=)
                          2: B48D2B70087E11EF81D62A76C4F9AE02.roa (hash: jgvN+U6W90v7INK8jHNiMsVMH34FQv4ohIi//HoXIIo=)
                          3: B7A19306B43111EEB373D20BC4F9AE02.roa (hash: F7j42i8YLD1zwqTSiXoOtI6qj2tusvZUJmdUMfAAFIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
                          rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 02:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Validity
            Not Before: Apr 15 02:41:58 2025 GMT
            Not After : Apr 22 02:41:58 2025 GMT
        Subject: CN=67fdc776-3783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:cb:c8:0a:fb:34:9a:49:81:a2:24:88:cf:
                    12:54:bb:18:4d:b0:0d:eb:14:dd:0a:84:8d:85:3b:
                    08:f4:97:83:b3:db:8f:be:55:70:fa:04:08:b6:db:
                    8c:2b:15:d4:1d:30:e2:53:91:a8:e6:ec:f4:78:07:
                    ed:ab:91:6c:65:f7:d1:3f:df:d7:9b:6b:22:31:3d:
                    a3:2d:93:6d:7c:2c:af:2e:12:04:f4:67:35:4b:8e:
                    ba:7e:5e:10:5c:ce:27:30:ad:73:d4:a2:d6:30:9e:
                    8e:3a:4f:bd:b3:c6:61:90:f5:42:40:23:dc:d4:fc:
                    4b:f6:ee:ae:cf:10:3d:72:56:23:db:27:73:ac:b9:
                    00:d2:be:f3:32:7d:0c:1f:7c:2b:18:50:9a:12:60:
                    d5:83:3c:6f:45:48:1a:9d:7b:8a:51:92:f3:e9:8a:
                    f7:0c:b7:a9:c7:65:7a:55:b8:89:3f:f9:24:11:ae:
                    76:94:02:87:c8:15:55:ef:94:30:58:7c:33:ba:81:
                    83:87:eb:c7:10:5d:d9:56:78:9c:09:9b:c8:75:21:
                    2e:9d:da:36:08:95:e6:be:f3:8f:c7:37:8f:4b:f7:
                    bf:ee:18:78:61:03:2e:ba:63:fa:ab:a9:c5:7d:50:
                    68:8c:23:18:b0:0b:9c:1a:00:99:1a:16:ca:30:b8:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:60:62:01:C6:A8:06:86:8A:3F:61:3F:A4:86:7B:CD:55:D3:9A
            X509v3 Authority Key Identifier:
                keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4a:a8:64:7a:ce:18:10:bf:47:6c:d1:8a:89:ae:8b:e5:7c:
         51:ca:71:14:fa:14:63:ad:d2:e1:f2:bc:03:39:c1:ed:10:70:
         40:b3:14:37:e5:a1:30:d4:19:77:28:c3:37:31:dc:55:bb:b3:
         12:db:5d:05:d1:80:c1:de:38:04:9f:39:b1:c6:56:d5:66:f9:
         9a:69:0b:8d:c6:74:20:d0:f4:1c:ae:73:04:45:34:72:dc:a0:
         b8:76:d2:22:8c:70:45:de:ea:e6:ea:cc:38:aa:3c:ce:c8:c8:
         c3:ca:ad:27:77:a4:0d:62:30:c4:e0:db:dd:2f:68:f2:d2:64:
         d5:6e:00:df:4b:1e:75:47:31:c0:21:37:01:fe:fd:c3:0e:11:
         58:c4:7e:a8:0d:0c:1d:0e:21:5e:88:5a:15:da:b5:0e:8b:ae:
         eb:30:37:99:91:09:13:fc:17:0a:1e:c1:3c:d1:66:ec:7e:33:
         ab:42:af:55:57:fb:38:5e:89:d6:86:4e:c0:92:20:1c:fd:a2:
         f9:cf:2b:c9:a6:30:8e:52:ed:4b:65:c5:27:1a:9a:3f:c5:72:
         1a:1a:43:0c:06:e7:f9:95:13:64:67:12:7c:e1:13:c8:f9:8d:
         1c:09:ba:b3:c3:bc:80:fb:93:b6:ee:d5:7b:5d:85:32:ce:34:
         97:2b:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:14:20 2025 by rpki-client