Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier:          Pch48Gl424axtmBpfTkZZvqMsd9jCyWs+zQrJYn7nLs=
Subject key identifier:   0B:3F:E6:37:FC:A5:DA:3B:55:94:D3:F4:1F:01:48:11:52:54:36:AB
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number:          96
Signing time:             Thu 17 Apr 2025 04:47:26 +0000
Manifest this update:     Thu 17 Apr 2025 04:47:25 +0000
Manifest next update:     Thu 24 Apr 2025 04:47:25 +0000
Files and hashes:         1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: FIgMF+Aa/Yfu9pHRhV0+3kjpGpw47Eh+IZ8UcnRvZC8=)
                          2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: jYgy4yMQyKQf5VxNbJ2NKQFUgnsZsFyOqLwxVUIrb0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 04:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Apr 17 04:47:25 2025 GMT
            Not After : Apr 24 04:47:25 2025 GMT
        Subject: CN=680087dd-1a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:51:15:52:13:fc:f3:12:61:e7:ef:2c:6e:
                    31:f2:53:16:1f:19:22:4e:5a:f2:b7:99:79:61:fc:
                    93:23:60:50:f7:f6:21:14:2a:94:ca:e8:ee:a3:2b:
                    1d:14:32:c9:16:15:c6:77:91:55:15:e8:df:a9:3d:
                    24:30:d0:03:df:99:b7:e8:4f:b9:47:1b:73:e9:9d:
                    83:35:c3:44:d9:d7:8b:1f:ef:40:9b:ce:71:17:0f:
                    fe:5b:2e:0a:06:a2:a0:10:73:f5:c4:88:80:83:c3:
                    47:df:bd:3d:8f:a8:55:a4:c2:07:5f:c6:bf:75:c1:
                    1f:7b:cc:96:69:38:a3:65:8a:6f:fe:60:eb:3b:20:
                    1a:4b:84:2c:28:3b:18:c5:78:d2:0d:f3:b3:26:52:
                    79:9e:8e:15:b4:a7:ec:60:31:2f:05:88:96:71:ba:
                    8a:f7:42:7d:c5:36:23:ea:1e:36:15:4d:f1:72:00:
                    2a:8b:de:a4:f0:88:15:4a:c5:b3:fd:a9:93:20:6d:
                    3a:3d:1c:fe:e3:b9:4d:4b:11:82:17:92:1e:08:5a:
                    db:7d:da:01:db:16:b7:b5:a0:50:6b:d5:27:75:b8:
                    19:43:37:14:c8:1f:d6:c9:50:2d:03:25:c9:05:e6:
                    77:8d:d5:38:4a:5e:c8:92:7d:70:8c:46:8d:d1:1a:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3F:E6:37:FC:A5:DA:3B:55:94:D3:F4:1F:01:48:11:52:54:36:AB
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:cd:23:78:d4:f8:55:66:07:26:02:dc:6d:fc:97:62:de:
         4f:74:08:3f:6c:c9:95:69:2e:25:16:de:80:03:a8:33:72:08:
         32:a0:70:ad:ae:6d:8d:98:71:0e:c8:ae:38:a3:94:14:a5:90:
         d3:24:18:d9:1a:49:71:59:bf:7b:c8:96:1f:4c:de:89:a7:d5:
         8a:2b:55:a5:3e:f8:ff:87:29:f8:06:7a:b2:b8:8d:13:01:2f:
         1b:bd:a8:46:fe:d3:17:bb:d2:91:ee:f2:a1:a2:21:5e:f1:39:
         d4:14:30:06:ca:86:4b:a4:63:98:8a:10:3d:aa:a2:10:5f:94:
         6d:9b:9d:92:86:9d:61:ec:86:58:12:09:83:8c:27:25:ab:19:
         61:69:fb:30:16:46:d2:d6:dc:b4:60:ff:aa:a2:22:55:78:95:
         a4:b2:a6:1b:f2:86:02:12:3f:c5:58:3f:2d:f0:f0:60:c0:82:
         05:3b:7d:bb:05:0e:6c:9b:db:7c:38:86:ca:71:f2:21:0e:43:
         d6:88:09:de:59:be:1a:b1:cb:eb:8c:a2:07:b9:be:83:ee:98:
         0d:37:16:09:ad:d0:43:5a:35:84:0a:c7:fb:ca:06:d6:7a:c8:
         fb:2f:23:b6:a1:b4:4d:e9:b0:db:aa:a9:06:53:6c:6e:f1:c0:
         72:35:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:38:38 2025 by rpki-client