Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
File:                     9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json)
Hash identifier:          X/GGugJ659tVNG04MkSP7FGFJzNmFA8x/9dQhyjn96k=
Subject key identifier:   41:02:01:3F:72:E0:29:15:28:C4:54:08:A7:5B:2E:59:4A:47:74:F7
Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Certificate issuer:       /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
Manifest number:          060D
Signing time:             Fri 04 Apr 2025 23:46:11 +0000
Manifest this update:     Fri 04 Apr 2025 23:46:10 +0000
Manifest next update:     Fri 11 Apr 2025 23:46:10 +0000
Files and hashes:         1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: 5Mx1XONOJa7q7V44wX6aNC0fkQSIfKM+gNiiAXyRY2I=)
                          2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: fvo1aPGM+n05nvJm6qW9Z2hmGhNw4J6QEIdDkjbjrFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
                          rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21
        Validity
            Not Before: Apr  4 23:46:10 2025 GMT
            Not After : Apr 11 23:46:10 2025 GMT
        Subject: CN=67f06f43-7f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:6c:65:f3:c0:69:0a:45:1a:90:9c:d6:1f:
                    f9:fb:ce:18:15:fe:ab:28:ef:8d:83:1c:a0:e1:40:
                    36:e9:f3:d1:fa:ec:44:9c:70:26:cc:07:0b:91:78:
                    b5:5a:54:f9:2e:63:c7:68:cf:44:6d:d9:98:b4:c1:
                    dd:b6:5a:33:f5:1c:46:99:e8:52:10:63:60:7f:69:
                    72:2a:c3:9b:2e:59:cf:42:da:db:4c:74:a0:e3:02:
                    fa:34:25:20:db:86:c1:cf:d4:64:08:dd:88:24:ec:
                    da:b3:77:83:67:85:87:2e:74:20:62:8e:a7:ce:2b:
                    8f:c6:41:b5:96:b2:77:b2:3c:f3:87:3a:51:8a:a1:
                    23:ad:86:75:93:e4:1a:17:e5:00:f1:8b:48:5f:f2:
                    ae:f5:0a:7e:e5:30:fa:b9:8c:52:fa:66:17:48:81:
                    8f:44:74:0c:01:ef:06:d8:c8:19:c1:af:17:09:ef:
                    01:be:c6:8f:70:bf:2d:66:e0:89:6e:ec:1d:e9:a4:
                    56:39:f2:b7:8c:a0:5d:4f:39:52:c4:15:cc:90:1a:
                    6c:6f:79:28:f5:79:00:49:6f:b9:b1:07:0f:f6:84:
                    fd:4b:81:cf:a3:c4:90:d3:0e:78:de:0a:62:e5:e4:
                    6b:1a:4b:15:95:97:52:6c:5d:e7:a5:06:27:d2:be:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:02:01:3F:72:E0:29:15:28:C4:54:08:A7:5B:2E:59:4A:47:74:F7
            X509v3 Authority Key Identifier:
                keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:5c:8d:38:2c:f1:d1:19:ed:2e:01:89:e3:74:4c:f3:b5:
         14:07:d5:59:14:f7:c4:8e:70:76:79:4a:5f:17:a4:af:3f:05:
         cb:d6:76:67:a3:be:80:a5:fd:b1:36:b0:f6:a1:f4:94:a5:91:
         c6:67:d7:0d:8c:da:0f:83:c9:0b:ab:b8:12:24:52:20:ad:48:
         e9:83:e9:09:79:29:d5:6c:eb:50:80:76:b0:ca:c1:25:2f:de:
         14:11:d3:96:e5:51:8f:17:30:e7:f3:e3:5a:37:ad:6d:33:5b:
         04:bc:fd:24:4d:70:d1:d7:fe:c5:83:ab:0e:53:57:3d:45:ec:
         33:77:fc:e7:7b:6c:71:15:84:82:14:52:c4:8f:11:f7:1c:00:
         b9:44:8d:c0:a9:74:69:33:d0:86:4a:dd:cd:d8:b5:46:d3:2a:
         da:43:69:c0:1e:b8:d7:54:bc:9b:bf:a0:90:b8:e7:dd:20:e0:
         65:9f:14:64:79:31:30:1d:f3:cc:17:63:cb:69:36:c8:28:97:
         f8:78:81:66:21:e2:2b:9a:5a:30:fc:ec:72:93:65:ed:6e:07:
         bf:1c:a4:ca:f8:2c:2c:21:12:65:da:d1:ff:2b:44:a0:c8:37:
         22:b9:7a:47:fd:f2:58:c0:fe:9e:f1:43:95:4c:65:98:fd:fe:
         e8:a5:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:00 2025 by rpki-client