Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.mft (raw, json)
Hash identifier:          j99oG9kaQGcfatBnTpwHRVZmML2sP+5F6Q7oERA27OQ=
Subject key identifier:   12:8E:ED:E8:83:09:AD:C0:52:25:A9:35:3A:1C:4B:E9:88:74:3F:9E
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       347E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
Manifest number:          3474
Signing time:             Thu 10 Apr 2025 14:36:42 +0000
Manifest this update:     Thu 10 Apr 2025 14:36:42 +0000
Manifest next update:     Thu 17 Apr 2025 14:36:42 +0000
Files and hashes:         1: Teu44SIr4OPyOu23UkXg-XuHx00.crl (hash: jw7LGtpjVPFJFsvg4QZf24QjhJDsg51RHgg+P99Fag8=)
                          2: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (hash: yf+DtpQHK15DsIR7hfI9Gbc6iXm71Iwwp13I2Suk7Rw=)
                          3: 66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (hash: 69INgpKoMOy/gwg7BVvVMfejSm+vv8+6md6SESKON5E=)
                          4: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (hash: QLCxOEmWgCa369miIkbLMZGjORq6IjjCOA26AQZ1+A8=)
                          5: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (hash: VVrcitZ2B7U6+APe/mOfl0d7tYYMkpvIARKDnYAu3Cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 14:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13438 (0x347e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76
        Validity
            Not Before: Apr 10 14:36:42 2025 GMT
            Not After : Apr 17 14:36:42 2025 GMT
        Subject: CN=67f7d77a-2272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:e3:e0:26:db:af:28:d1:77:9d:30:5e:9f:
                    bb:77:bb:6c:0c:1a:ac:19:3e:08:76:22:35:d5:c6:
                    e3:00:71:04:4c:93:0c:ba:a3:e4:6f:e0:2b:9f:88:
                    68:cd:f4:ca:97:08:bc:95:4e:bc:06:45:1c:65:dc:
                    d6:97:1b:1d:06:bc:f2:8a:96:06:a2:3f:ef:e3:87:
                    51:2a:53:bb:d1:9a:b5:99:dc:41:b5:c4:5e:dd:8a:
                    01:b9:a9:8d:91:d2:8a:8e:b3:0f:a3:cc:06:c7:e6:
                    3e:e4:39:ba:e9:10:0f:17:18:5d:7e:13:38:06:a7:
                    3d:ca:1d:1f:0f:05:6d:94:49:cd:ec:31:6d:bc:ea:
                    5f:a4:a1:5a:4e:f8:e2:f5:7f:fb:9f:1f:a3:63:d6:
                    9d:25:32:b3:5e:ea:93:63:6c:99:17:8a:0a:62:f6:
                    9e:33:d5:7a:42:48:97:ed:69:2f:aa:a3:71:eb:b6:
                    48:50:a6:3e:32:c3:95:4f:dd:1b:c0:af:e2:61:86:
                    05:44:d4:9f:b6:24:33:7a:aa:56:9c:a4:b0:c3:9f:
                    4d:06:90:97:79:45:7e:f4:8d:cd:af:a6:cc:d8:ee:
                    aa:72:0e:c4:63:04:28:ec:72:23:6c:44:5d:e9:7e:
                    50:e4:6d:20:db:7c:61:45:dc:01:e5:3f:fe:b0:50:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8E:ED:E8:83:09:AD:C0:52:25:A9:35:3A:1C:4B:E9:88:74:3F:9E
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f4:f3:14:6d:22:e8:10:28:19:80:4b:22:9c:87:e9:90:c3:
         e3:30:75:0d:10:ef:1b:97:aa:c8:8c:08:a9:7c:d0:1f:54:0d:
         b9:71:1e:42:b1:72:88:0b:ac:d1:8d:92:57:c5:f1:7a:d5:da:
         f5:0c:51:19:77:e7:da:37:e7:c4:1c:39:ea:f6:f4:8d:01:54:
         58:52:f8:e4:01:ac:ca:b3:51:09:53:d9:f3:3d:26:a7:4f:8a:
         36:b0:88:f5:87:7e:51:06:d2:79:89:b2:81:da:42:9d:c1:84:
         90:e0:58:25:27:0c:93:47:a5:85:9c:5f:fa:65:95:6f:87:dc:
         9d:75:e8:e2:d6:53:f0:94:07:9f:68:c4:bd:d0:02:ab:59:4f:
         c9:b7:02:f4:b6:ad:26:e6:11:bd:5a:16:c0:e8:24:2c:76:6a:
         39:82:49:fc:b8:65:67:b3:8a:ed:78:9a:1b:a5:bc:7c:23:89:
         65:4c:2a:de:9b:12:df:88:3a:73:66:12:92:03:21:a3:8a:99:
         0a:c1:01:8d:ef:fb:1c:db:de:c6:ea:44:48:33:dc:f4:9a:a7:
         82:09:80:43:b5:62:d0:a0:64:2f:f0:7e:53:64:db:5d:0f:c4:
         4d:07:3b:17:66:9a:5e:3b:da:99:e2:63:05:e5:12:4b:df:0c:
         90:fb:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:24 2025 by rpki-client