Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
File:                     u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json)
Hash identifier:          CDl4PPBcHjJuq9jX/TupnfFPuOB1HOX4UrmRpw6Xge8=
Subject key identifier:   60:BD:EB:33:E2:73:98:4D:96:65:AD:CB:45:7E:30:2D:4C:A7:39:C3
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Certificate issuer:       /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial:       07BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
Manifest number:          07AA
Signing time:             Fri 04 Apr 2025 21:28:35 +0000
Manifest this update:     Fri 04 Apr 2025 21:28:34 +0000
Manifest next update:     Fri 11 Apr 2025 21:28:34 +0000
Files and hashes:         1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: ds71vh/oFnqA4/voYBH0pggIfNWCj1vQSBUseYup2Cg=)
                          2: 862720F4031611EB9086351AC4F9AE02.roa (hash: 2zKL2eeTJdxP4POaaALiM0rJiDZ4mdlP/D8Tb5yhoj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
                          rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983 (0x7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD6A
        Validity
            Not Before: Apr  4 21:28:34 2025 GMT
            Not After : Apr 11 21:28:34 2025 GMT
        Subject: CN=67f04f03-5e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:ed:76:2d:47:f5:cf:95:08:22:fe:ce:eb:
                    c0:78:fe:57:98:b2:ee:4e:9f:72:5c:fb:fd:5f:1f:
                    1a:91:76:99:9f:d7:45:68:16:b1:30:1a:7c:b7:9a:
                    4d:01:4e:12:5f:45:3d:d3:e2:22:7c:57:4b:11:9e:
                    ff:2c:9b:92:8b:e0:82:db:f5:77:3d:2b:a4:6d:d2:
                    3d:37:4f:4c:4f:8c:18:d1:da:5f:f4:85:7f:44:38:
                    c1:59:81:84:c2:ef:06:b0:a0:0e:ed:c1:51:38:23:
                    07:3a:90:35:51:53:cb:73:b9:77:a5:0b:9d:b7:b8:
                    b4:0f:57:86:35:d3:fd:c1:63:47:0e:9d:f4:da:99:
                    5e:43:c8:12:39:a1:f0:d3:8a:6f:86:6e:df:3b:4b:
                    7e:e9:fb:f8:11:17:18:be:df:66:5e:25:03:e4:f3:
                    fd:01:1f:9c:a3:05:cd:10:82:a2:58:6a:18:4a:34:
                    34:04:21:cd:0d:e0:75:75:82:f5:9e:71:8f:83:26:
                    d1:de:5c:43:1e:ae:d9:f1:17:57:1c:8a:24:a4:b6:
                    bf:9f:6c:83:fb:6c:8d:fb:c6:2b:a4:e8:47:b3:f8:
                    76:aa:d1:28:1a:4c:94:91:96:02:66:e0:14:ed:bc:
                    84:65:8f:c6:da:f0:26:e4:d1:74:e8:7f:83:6e:3e:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:EB:33:E2:73:98:4D:96:65:AD:CB:45:7E:30:2D:4C:A7:39:C3
            X509v3 Authority Key Identifier:
                keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:5e:ad:12:69:1e:97:8e:32:ff:39:b9:b2:65:ac:3b:21:f7:
         38:2a:02:df:c7:ea:75:19:0e:8d:93:12:8a:c8:ee:86:36:be:
         f1:6e:df:3f:c1:bb:8d:50:39:56:57:41:a8:b8:cf:8a:87:88:
         a9:dd:69:7d:b5:fa:51:71:5d:64:9b:70:2c:20:31:0a:0b:24:
         b3:b9:74:cb:ce:55:a7:fa:f7:42:02:08:2b:89:5b:e0:76:33:
         ac:cc:61:a4:45:01:0f:a3:e7:25:cc:07:e2:56:0d:ba:25:43:
         56:75:45:81:7e:d8:04:cd:de:89:0a:3b:1f:32:5e:9a:f3:37:
         d7:f0:9b:2b:69:f8:a7:07:44:92:0a:13:14:42:16:69:fa:de:
         07:46:28:21:8a:0f:33:dd:d2:72:3c:4b:7e:c4:5f:d1:bf:52:
         d2:0f:a4:0b:1f:95:59:f0:a1:f6:0c:9d:eb:a7:d6:27:e9:72:
         64:25:52:7e:93:29:fa:ce:e4:8e:1f:64:06:7d:66:5d:9d:f7:
         9c:32:41:7b:88:90:39:ab:82:50:01:96:2f:2f:76:ac:36:52:
         67:d8:33:77:f0:11:f8:d2:1a:54:3c:7a:fa:9a:2a:f3:96:e7:
         0c:15:db:60:ad:b3:3c:86:09:fc:fe:d7:5d:d5:87:dc:db:8f:
         64:c6:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:46:13 2025 by rpki-client