Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          RP31jjyaNrsunTkVj6+hsZLPloJRFmwsRQmbymYsJW8=
Subject key identifier:   68:4B:54:44:3A:02:06:FB:95:69:23:5C:FB:D3:44:6F:54:03:58:AE
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       06FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          06F8
Signing time:             Wed 02 Apr 2025 21:57:57 +0000
Manifest this update:     Wed 02 Apr 2025 21:57:57 +0000
Manifest next update:     Wed 09 Apr 2025 21:57:57 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: Z6SFWSft4QYS3SGoZH/W6z1HNNIOi968BaAXglURAUk=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: cX9Jr6xc2q7kpQ4bV2j0kItAk4ZpyW8j6vKTdZBHzDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A
        Validity
            Not Before: Apr  2 21:57:57 2025 GMT
            Not After : Apr  9 21:57:57 2025 GMT
        Subject: CN=67edb2e5-67e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:6c:f2:3d:de:1c:63:06:76:81:1c:04:62:
                    ec:f3:6c:2d:1d:35:61:92:8e:0c:ec:d3:f9:bf:38:
                    86:a6:61:bb:15:56:04:f2:59:3f:45:95:bf:fe:15:
                    dc:35:74:a6:b3:60:29:9e:3c:d4:0c:e2:4a:27:da:
                    d2:8d:ff:5d:80:15:a3:96:c6:39:cf:f9:20:b3:c3:
                    54:dd:62:97:37:32:b9:65:b8:ce:60:b0:1a:00:69:
                    ba:a5:1c:4e:56:3a:0e:8a:cb:eb:f0:05:47:da:a1:
                    20:95:23:68:af:83:91:f9:10:07:39:89:bf:36:e3:
                    9d:02:18:88:c8:e1:49:78:a9:86:36:31:80:48:3a:
                    5d:0e:e3:01:72:0e:3c:44:18:2f:94:fc:56:48:b9:
                    04:04:17:48:25:94:47:94:54:c8:90:43:b1:05:54:
                    1b:12:09:74:7a:67:62:9a:82:72:62:93:ab:04:f1:
                    ad:60:7f:b9:8f:8a:2b:92:f0:97:88:7f:b0:7f:75:
                    a7:8f:a0:69:29:7f:51:06:61:16:ae:f1:5c:d8:23:
                    f3:e7:77:dd:5f:5c:76:60:7c:3b:ec:62:6b:5a:da:
                    a4:4c:42:79:58:9c:33:47:93:64:72:d0:b0:d8:79:
                    96:71:16:8d:b3:14:16:ad:26:9b:24:35:d7:ce:bc:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4B:54:44:3A:02:06:FB:95:69:23:5C:FB:D3:44:6F:54:03:58:AE
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:5a:e8:af:79:b4:35:a2:f3:93:76:4a:5e:1a:ee:63:e9:da:
         26:6f:58:b8:dd:08:0f:b1:17:a6:17:c8:9c:4d:8d:52:e8:88:
         0e:cc:a7:9b:87:a4:40:ee:3d:32:57:09:2d:d0:8d:8d:7d:e7:
         c9:98:a9:fc:c3:24:a9:3d:97:99:29:57:ed:c9:32:b4:42:a1:
         a9:55:5f:32:6c:71:32:ce:4b:ef:ad:1d:dc:95:cd:ee:1a:e7:
         fb:48:99:0f:93:ec:c4:ae:e5:41:3b:ea:48:22:b5:0e:9d:04:
         4d:d0:32:03:74:0c:2c:17:58:7c:c2:54:9c:ff:50:41:98:c4:
         0c:e5:15:68:69:a3:22:56:9b:e1:37:91:98:92:8f:4f:e8:3a:
         d0:eb:22:0e:7a:5c:e2:15:0e:f3:56:10:e9:d1:0a:f4:eb:a7:
         ad:9c:66:33:bc:56:45:3a:74:7d:99:5b:bc:ca:75:7a:5a:9a:
         5f:6e:ef:50:87:4a:8b:d4:38:5a:e0:e6:85:8d:35:62:8f:ef:
         b6:35:f7:33:3d:a8:c8:67:9d:5d:b8:3d:a9:8d:80:a4:10:47:
         31:8c:c1:32:84:09:54:f7:53:c7:9d:cd:14:8c:4a:27:f5:f3:
         d2:d9:6c:7e:bc:cf:fe:68:22:4a:29:e6:e6:37:cc:d5:cd:5e:
         58:07:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:15 2025 by rpki-client