Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
File:                     erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json)
Hash identifier:          XO5TD6enETMHXn8s+Zqs6uz/MiP2dbwPr3qeKls71Z0=
Subject key identifier:   CC:7A:69:9E:41:E0:58:01:6C:A4:E7:F9:A7:18:17:74:06:49:D9:58
Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
Certificate issuer:       /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
Manifest number:          15
Signing time:             Thu 17 Apr 2025 06:51:15 +0000
Manifest this update:     Thu 17 Apr 2025 06:51:15 +0000
Manifest next update:     Thu 24 Apr 2025 06:51:15 +0000
Files and hashes:         1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: pRQ483U03B9JY5qRTRo1dRxJpjhxqEoaBZGxjsLLTaI=)
                          2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: eiqihH3alG4cpxSKP/Yj1LxkWhK+ibmojtLolUx4Bhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
                          rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 06:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
        Validity
            Not Before: Apr 17 06:51:15 2025 GMT
            Not After : Apr 24 06:51:15 2025 GMT
        Subject: CN=6800a4e3-ec7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:f8:e9:ec:73:79:6f:eb:fd:8a:8b:91:7d:
                    e7:ae:c0:48:72:74:f3:a2:79:6d:d8:c1:1b:38:64:
                    09:3e:80:ac:64:f8:66:ce:12:b8:9f:45:03:d0:67:
                    1b:85:5d:2c:0f:34:19:89:9d:5f:b6:ef:74:6e:9d:
                    b3:7f:24:44:98:00:6a:3e:9b:65:28:01:ff:3d:17:
                    04:bd:72:bd:08:49:00:d1:71:32:11:b7:8a:21:d9:
                    3e:84:ef:56:6f:41:4d:cf:91:1b:9e:7e:33:42:f8:
                    cb:ff:d5:fe:cc:eb:55:76:6d:87:2b:ff:7a:5c:78:
                    9c:58:72:f3:e0:12:95:b4:31:36:5d:e1:04:08:2f:
                    25:c8:7a:7f:3c:98:a9:97:e8:aa:39:fd:87:49:e4:
                    9c:8e:b2:98:6e:7d:9a:8e:3d:48:ed:f2:6e:1a:76:
                    2d:3c:5c:cb:8c:51:76:79:af:3b:b2:00:05:d8:35:
                    d0:2d:cf:80:3a:56:cd:9a:a3:07:81:c7:55:5a:7d:
                    3c:1f:04:35:b0:60:f3:9f:ec:9e:16:6a:ab:c6:f6:
                    36:e6:df:c5:76:a2:5c:0b:af:4e:57:06:63:24:a7:
                    8e:91:33:be:84:af:3e:74:f6:c5:8a:aa:ef:7d:fd:
                    35:b4:fc:c5:83:60:70:cf:32:9e:8d:80:80:81:f8:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:69:9E:41:E0:58:01:6C:A4:E7:F9:A7:18:17:74:06:49:D9:58
            X509v3 Authority Key Identifier:
                keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:91:8b:9c:53:8e:b6:d6:78:42:83:bf:64:aa:4d:07:56:
         c8:62:f8:b1:42:81:98:01:6a:08:a0:b9:cd:7c:ac:6e:3b:36:
         25:18:7d:93:c8:e3:6c:e9:a9:d9:06:43:80:5b:32:ac:18:b7:
         e0:37:10:ce:26:ec:d7:5e:ea:9a:27:e9:9f:98:a2:27:26:5f:
         c9:34:df:4e:60:99:25:79:c0:36:48:8a:ca:c7:e5:85:0a:93:
         09:6c:1c:b6:2d:5d:d4:7c:77:b5:17:8f:3c:e1:1b:98:57:79:
         f7:f8:7b:18:b4:58:64:5a:86:db:c7:94:5f:45:2c:76:f2:3b:
         c3:40:f5:7f:bc:44:be:28:79:2f:cf:bb:8f:fb:e2:50:bb:38:
         14:81:e6:d3:eb:f1:9f:f6:17:d2:15:84:18:57:f3:cd:91:6e:
         0f:09:5c:16:a1:af:4d:03:0f:f4:bd:42:9d:05:09:bd:5a:37:
         bc:c9:35:01:dd:45:00:61:8a:b2:29:14:11:dd:76:40:b2:0a:
         23:62:b0:be:77:64:e7:66:48:e8:f5:13:8b:20:ab:46:e1:95:
         50:f3:b3:cd:58:91:d9:99:40:e6:1e:68:32:a8:1f:70:45:d3:
         d8:b0:00:e7:2c:f2:4e:8b:29:93:59:f0:48:0c:5b:dd:19:6c:
         8b:de:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:21 2025 by rpki-client