Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File:                     d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier:          YJPOMWCZn92tJbUKjR27e0rvnHbDU1NWKQob75NJZUY=
Subject key identifier:   E7:56:81:08:8B:2B:9A:E2:CD:DB:A1:7F:C8:9C:64:D3:6C:23:DE:C3
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer:       /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial:       0A3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number:          0A34
Signing time:             Wed 02 Apr 2025 19:47:27 +0000
Manifest this update:     Wed 02 Apr 2025 19:47:26 +0000
Manifest next update:     Wed 09 Apr 2025 19:47:26 +0000
Files and hashes:         1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: dNbIOcYEbFma7CWcKl0VEfIbx7C3kQKkT629eRwNP3k=)
                          2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
                          rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 19:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2618 (0xa3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A821
        Validity
            Not Before: Apr  2 19:47:26 2025 GMT
            Not After : Apr  9 19:47:26 2025 GMT
        Subject: CN=67ed944f-e57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:36:1f:9f:93:6b:99:59:c6:65:1b:99:46:
                    28:5f:4c:68:79:20:1b:7d:1e:3f:4d:2f:48:c8:7c:
                    70:c0:01:75:75:9a:85:35:4c:5a:b4:ad:5f:17:6b:
                    e8:c7:a8:6c:fd:4e:30:90:53:e1:67:c7:6b:a4:b8:
                    e4:15:5b:7e:a3:f4:6b:2f:12:9d:76:a7:86:f5:cd:
                    4d:72:eb:90:03:24:eb:69:0d:90:f1:16:31:2c:12:
                    4c:3c:1b:47:9f:c9:9d:eb:29:ea:ab:04:df:47:c3:
                    17:f7:e3:70:8a:55:55:78:08:d6:a8:9c:72:2b:a8:
                    e5:3a:90:86:6c:51:25:e3:2f:51:27:a5:4a:6e:e8:
                    fe:79:42:a1:e1:3e:82:8d:3b:8e:36:7e:b4:0a:a7:
                    20:e9:38:f5:8b:ae:23:83:fa:2b:f5:3a:1c:ba:36:
                    ac:83:2c:d1:f9:be:aa:10:4d:57:a5:ea:96:89:c3:
                    37:c2:53:f3:99:6d:c1:bb:a5:b5:01:f6:00:3d:48:
                    05:be:3b:f4:45:60:77:02:c1:65:64:8a:df:d7:89:
                    d3:af:5f:d6:31:a5:99:d5:c5:aa:58:af:ff:97:c0:
                    50:45:ea:8c:11:70:6e:17:20:26:f2:03:c8:87:7a:
                    1c:94:4d:1c:35:6b:e9:ee:91:e9:36:54:60:1d:21:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:56:81:08:8B:2B:9A:E2:CD:DB:A1:7F:C8:9C:64:D3:6C:23:DE:C3
            X509v3 Authority Key Identifier:
                keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:58:2d:a3:4c:dd:58:db:e7:90:4d:d5:73:40:8a:c5:f6:
         bd:f4:de:d7:91:77:1c:0e:2b:62:b4:bb:ff:58:49:51:67:f8:
         ba:d9:2b:c9:df:f2:1a:47:43:aa:5f:fe:2e:d6:8e:7d:9a:d7:
         b9:bb:2d:dd:f3:c2:b0:76:9f:ab:af:d7:fe:ec:33:69:54:c4:
         ab:42:2a:df:4e:b9:ec:f1:5b:42:e4:96:7c:91:f4:6e:b0:63:
         35:67:e8:47:48:1d:ef:81:bc:ac:09:12:5e:0f:ed:00:b2:e0:
         29:63:b9:25:49:89:39:0a:3a:c4:bb:02:e0:41:91:03:30:be:
         e4:63:75:b5:13:6e:e1:95:37:42:a0:ea:0f:99:ad:95:15:0c:
         91:8b:57:34:53:ed:ec:a3:8a:ab:1b:ac:e5:dd:2e:c9:c3:cd:
         b0:1b:6e:51:7c:bf:42:70:08:c7:9a:1a:4a:a2:d1:94:cb:12:
         f0:c6:b5:23:60:27:a5:45:7b:1d:e0:95:fd:00:fa:6e:76:2d:
         e2:97:3d:bf:18:73:e0:d0:34:c8:ec:a2:c9:3b:00:a2:17:f7:
         c9:03:23:fc:e2:cd:ae:65:29:19:cf:32:e7:cf:12:1c:3e:b0:
         d4:e2:ce:65:13:4b:0e:e6:8f:92:c1:fa:84:98:cd:5e:a2:1f:
         1b:9c:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:45 2025 by rpki-client