Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File:                     f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier:          0ug8RphrHRMv6PHgLh+wPhftz1/hyStzZkkxaqxBTXk=
Subject key identifier:   A9:B0:B6:02:93:B8:57:73:E9:C3:82:B8:9B:67:00:DB:F3:C3:44:83
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer:       /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number:          3C
Signing time:             Thu 03 Apr 2025 06:50:32 +0000
Manifest this update:     Thu 03 Apr 2025 06:50:31 +0000
Manifest next update:     Thu 10 Apr 2025 06:50:31 +0000
Files and hashes:         1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: mHLaMOb+zDduCtGWtk8DwuJnMz+LV025dJeNYsgwN3s=)
                          2: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: 6wwD4dCdXwtS+LnCDXktDC+zo03fJil5+xbscBQAfeQ=)
                          3: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: qhXg7OZORCQmwfeMjxBNXmP6ZMvJvKn0GRTuJzNo35M=)
                          4: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: m2+w3MuoT8jahcLbP8IymDcYrHQo98+RI8vF7vbfRjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
                          rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163358
        Validity
            Not Before: Apr  3 06:50:31 2025 GMT
            Not After : Apr 10 06:50:31 2025 GMT
        Subject: CN=67ee2fb8-aeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:b6:d9:86:b2:43:a2:b6:3d:54:75:14:b2:
                    13:02:3f:ae:91:0c:b1:cc:f9:07:16:50:3c:c8:51:
                    d3:89:d9:b2:d1:2e:cf:c7:a1:ad:00:93:fc:69:50:
                    f1:93:e8:a1:0f:76:19:2f:f7:66:6d:05:c0:0f:6d:
                    7a:93:e8:cd:9b:e3:cc:8d:ed:0d:b0:95:97:50:f7:
                    55:8d:f1:84:6d:c1:1a:f4:e9:8d:b9:13:29:e7:5e:
                    05:f8:e6:04:91:bc:f4:6d:e1:74:74:3d:08:4c:cc:
                    9e:31:a0:49:dd:e7:18:9e:59:c1:23:3f:c1:bb:82:
                    71:bd:f5:60:44:9a:4e:4f:85:55:16:5b:89:76:75:
                    80:75:5f:f1:2b:1b:09:bf:c9:3a:f7:1d:00:49:e8:
                    3c:76:f5:e0:16:fb:c2:79:45:f9:b9:03:f0:68:53:
                    42:57:41:d3:21:b8:35:2b:51:d9:51:02:c9:23:64:
                    21:cc:c2:b2:d6:ec:7e:2b:59:ab:68:af:bb:bf:9e:
                    1d:c7:29:78:56:47:bd:a1:8a:77:c4:92:87:62:7e:
                    f6:50:d0:d8:a1:d1:4a:14:68:c5:16:9c:5f:06:34:
                    38:77:65:b6:7a:c7:81:25:02:2a:77:7e:40:0b:b3:
                    56:9b:d3:b1:d8:86:0a:d3:26:ca:b7:77:16:40:fe:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:B6:02:93:B8:57:73:E9:C3:82:B8:9B:67:00:DB:F3:C3:44:83
            X509v3 Authority Key Identifier:
                keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:51:5a:c6:97:d3:ed:d8:10:06:33:96:76:93:ef:44:a9:
         88:df:36:09:02:da:31:62:02:a5:4f:06:82:a5:e6:b5:47:c2:
         39:88:48:42:8b:44:0e:cb:de:c9:64:2c:c8:0e:c8:07:f1:b5:
         5a:2d:42:b8:f2:f6:33:0e:b7:27:e2:d9:b1:1e:ee:24:8e:4d:
         99:f6:25:37:9d:17:4c:16:19:cd:57:eb:24:e3:0d:1b:5a:ba:
         fd:3c:38:05:f0:09:db:ae:83:76:bd:3d:03:00:97:c1:66:11:
         ae:51:b6:58:3a:0a:f0:d1:25:56:ce:f4:d4:2a:45:7f:67:48:
         42:41:d7:08:bf:89:27:70:5b:9e:8c:c5:94:96:6e:78:a5:70:
         53:bc:33:c5:1a:ca:ee:f5:13:24:4f:be:51:63:74:92:c1:06:
         5e:28:6b:e0:0b:7b:bb:4a:c2:92:41:55:d1:0f:d0:b4:7d:61:
         78:f6:5e:24:5e:7a:c6:ab:95:f0:a3:2e:7c:01:8d:4e:76:e8:
         f9:8d:10:d1:6a:1b:45:ce:82:57:56:fa:0d:5a:ba:46:1e:7b:
         42:8f:3c:15:6b:ec:45:e8:36:8b:1b:b6:01:73:da:51:4a:46:
         eb:f8:c3:27:9b:fa:62:e9:c1:8f:1e:9b:b5:b1:7d:53:9a:1f:
         35:09:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:06 2025 by rpki-client