Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
File:                     _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json)
Hash identifier:          0xncg7Vzgj/TmioXB8i/F8dCKpX3cawZ2PxUXFe24ak=
Subject key identifier:   D1:06:3E:98:A0:4D:06:78:5B:6D:DF:70:A9:FA:0C:71:F6:0C:E8:E6
Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
Certificate issuer:       /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Certificate serial:       0B41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
Manifest number:          0B3B
Signing time:             Sun 06 Apr 2025 18:57:00 +0000
Manifest this update:     Sun 06 Apr 2025 18:57:00 +0000
Manifest next update:     Sun 13 Apr 2025 18:57:00 +0000
Files and hashes:         1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: RNRNtO5L3AY22A6nt3Ibjr7y6nUarciEvaSru03onU8=)
                          2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: MfEk5NxWi8gs+2M+DhUKf65mWDxmQTJBopQpU/oINak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl
                          rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 18:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2881 (0xb41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916269D
        Validity
            Not Before: Apr  6 18:57:00 2025 GMT
            Not After : Apr 13 18:57:00 2025 GMT
        Subject: CN=67f2ce7c-5f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4e:d8:be:fe:d9:7c:6b:dd:5d:ea:94:0e:7e:
                    47:85:16:e7:4e:63:ae:a7:e1:b9:b2:fb:35:6e:3c:
                    e0:79:6e:65:b3:ba:a7:9d:ae:11:31:bd:24:8d:ef:
                    16:bb:cb:ea:17:0e:a8:33:78:d5:2a:cd:dd:8e:4c:
                    eb:df:37:e5:a3:16:30:da:fd:2c:4f:fd:66:4a:27:
                    cc:4f:93:8a:0e:0f:aa:4a:2e:b0:76:16:11:7f:b8:
                    f0:4e:6f:04:d7:9c:13:4b:53:20:fe:c0:02:09:a5:
                    d0:a8:a4:aa:fd:ed:61:e7:d1:ab:46:4c:fb:c5:c9:
                    20:69:3b:14:ea:f7:2b:b1:f8:a9:4c:4d:ab:29:28:
                    2a:b6:83:11:36:9c:60:db:a2:71:18:b7:51:aa:88:
                    d4:5f:07:33:56:e2:b5:25:a7:b9:03:bf:b6:c0:ea:
                    b3:3b:95:11:31:27:9b:d2:9b:a2:fb:73:2b:2b:7a:
                    45:97:04:a3:07:98:50:dc:a9:40:1f:a5:0e:67:ef:
                    37:fc:d2:25:3d:b0:a6:a7:77:90:c9:0f:29:31:a6:
                    72:ca:c5:29:26:60:93:f6:fa:93:3f:b9:87:e5:09:
                    3c:f3:76:9b:29:05:8d:5d:8b:d2:a8:71:3c:24:52:
                    e3:e3:89:63:40:d8:ca:a6:24:41:1c:2a:11:b7:65:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:06:3E:98:A0:4D:06:78:5B:6D:DF:70:A9:FA:0C:71:F6:0C:E8:E6
            X509v3 Authority Key Identifier:
                keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fe:4a:f5:e2:64:1b:fc:34:26:62:33:99:32:e2:72:4e:93:
         9e:01:e9:71:d4:32:71:11:f0:2b:54:d9:a6:0c:1d:1f:55:db:
         6a:82:6d:53:9f:e8:20:b4:6c:7a:fb:a8:5d:9c:4a:78:7d:23:
         4a:af:ee:1c:a2:f6:2f:a8:1b:73:44:78:c6:dd:74:bc:95:81:
         c1:9b:9b:02:de:a2:74:09:18:b6:6e:56:63:cc:ba:48:5c:94:
         7d:29:75:fb:f0:d1:6a:2a:39:56:42:b6:d5:58:8d:5a:d4:f4:
         94:94:5f:bc:41:85:10:e3:fa:bd:24:37:6d:9d:82:db:d5:c8:
         5a:e1:2a:91:b2:65:13:cd:a5:68:33:ff:c4:a9:a4:aa:a7:e4:
         97:58:44:9d:88:fa:dd:0d:23:30:13:e2:f8:f6:42:11:28:5c:
         45:0b:a0:6e:a0:95:1e:a5:fe:04:e4:40:c0:08:3f:a7:7f:93:
         52:a7:82:07:91:ae:cf:d9:b3:fa:a2:59:c7:29:34:78:1a:14:
         25:17:a4:1c:91:c4:00:19:36:b2:19:5e:c8:f9:a0:1d:39:ed:
         f6:cc:ad:e2:a0:4e:db:32:92:e9:b8:53:ab:1b:1a:10:77:95:
         5f:74:91:c6:ff:6f:04:35:98:1c:27:56:78:ca:55:61:fe:7c:
         d6:5b:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:38:32 2025 by rpki-client