Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
File:                     pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json)
Hash identifier:          8Tk1cT3XVTl5Kspfxve19xbNFa5ULYXOU0/nswXJk1E=
Subject key identifier:   B6:A7:A2:ED:4A:3B:93:3A:59:51:56:89:F5:59:A3:27:4F:FC:66:B9
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Certificate issuer:       /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial:       03C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
Manifest number:          03C0
Signing time:             Wed 09 Apr 2025 00:23:01 +0000
Manifest this update:     Wed 09 Apr 2025 00:23:01 +0000
Manifest next update:     Wed 16 Apr 2025 00:23:01 +0000
Files and hashes:         1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: 3ZslT34SepzkRYaowD6OcxgT50jNsoOSFyhew/p4IXE=)
                          2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: ABrIq2phc9urb6rkViq/Ir7haK/5vojTJpbzqSfLFQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
                          rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 00:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146F33
        Validity
            Not Before: Apr  9 00:23:01 2025 GMT
            Not After : Apr 16 00:23:01 2025 GMT
        Subject: CN=67f5bde5-99be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:eb:dc:1f:f5:31:db:29:31:d9:63:84:2c:
                    31:fd:38:6e:c5:da:99:2a:c7:bf:2e:ae:c9:ad:d1:
                    64:82:79:13:d4:d0:e9:63:94:34:37:90:40:57:89:
                    71:f2:0b:e7:32:2d:2a:7f:37:1a:e3:bd:ee:f0:6f:
                    41:d5:e0:52:c3:61:e4:ae:28:b5:9f:2e:fd:17:7b:
                    d6:72:d0:55:1f:ac:15:54:46:4d:94:b6:c9:76:24:
                    ab:b8:7c:67:36:45:7c:e8:81:22:a5:66:8b:87:df:
                    0d:a5:cd:ee:a6:c9:8f:f0:40:5c:b5:7f:f1:3b:90:
                    0d:aa:2d:b5:81:c6:19:d5:95:82:40:20:32:25:49:
                    60:98:a3:fe:cc:fc:9e:8b:ba:0f:d4:29:7d:13:35:
                    b2:32:9e:7b:f6:8d:8f:55:03:b2:ea:4b:97:e8:da:
                    0d:3e:37:1c:91:76:a9:f5:bf:b5:26:9e:a3:f2:51:
                    5e:e6:3d:3a:c3:63:d2:e9:62:f2:09:93:23:42:80:
                    a0:29:3e:c1:14:52:28:d6:9e:9a:56:c0:d1:85:53:
                    f9:77:b7:d7:09:3c:e0:0a:a6:87:64:3d:3c:d5:c0:
                    69:42:69:61:12:59:b7:e0:e1:48:ae:75:f0:ab:d1:
                    38:38:52:08:b7:f1:d7:45:0f:ae:59:66:d7:6c:1d:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:A2:ED:4A:3B:93:3A:59:51:56:89:F5:59:A3:27:4F:FC:66:B9
            X509v3 Authority Key Identifier:
                keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:69:b6:cf:30:38:1e:8b:86:a3:c7:ff:7d:d8:57:01:91:
         0b:75:96:5d:e7:98:f7:50:3e:01:8e:b8:17:b0:ec:33:54:e2:
         ac:13:6b:5b:b5:70:be:44:40:22:98:c9:5f:7b:c1:81:fd:0b:
         c4:7f:b2:2b:96:a0:e5:5c:12:46:db:48:46:bc:39:a5:15:78:
         67:73:2f:58:9a:50:3a:2f:87:e0:37:3f:ac:7f:f0:82:3c:cd:
         65:80:25:f9:39:f1:7b:5a:d5:55:98:ad:c9:8b:af:37:81:09:
         2c:10:c5:6c:bd:54:a4:58:9a:f4:c9:a6:46:42:b1:d7:cd:51:
         ae:7c:3b:88:79:47:e4:73:4e:79:a6:40:c6:a3:a1:3c:00:00:
         5c:bd:6b:eb:3a:64:8b:f6:19:df:d7:f7:e4:3b:11:7a:6d:6d:
         97:7a:88:d3:df:f0:9f:b3:7c:a0:09:e5:43:38:63:00:c9:96:
         e9:2e:fc:19:9c:12:0b:ae:2a:20:08:b9:3e:81:43:df:82:18:
         3a:3d:40:79:ae:1f:06:13:ad:c4:bf:b7:7f:cc:91:e4:6c:8b:
         66:35:45:af:98:98:02:d3:d5:79:d9:1b:f4:39:fa:ac:4a:44:
         c1:47:41:66:ff:84:20:8e:71:19:18:c3:e7:ce:e8:42:00:75:
         bf:1b:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:35:41 2025 by rpki-client