Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
File:                     LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json)
Hash identifier:          QyRsRr4oeF0ddIJG5+Yq+dWNf1On6g9ZOxjHugF9oCw=
Subject key identifier:   A0:82:3D:33:C7:AB:4F:08:D8:0E:36:1D:CA:91:14:11:A5:60:38:6C
Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2
Certificate issuer:       /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2
Certificate serial:       05E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
Manifest number:          05DC
Signing time:             Fri 04 Apr 2025 23:05:47 +0000
Manifest this update:     Fri 04 Apr 2025 23:05:46 +0000
Manifest next update:     Fri 11 Apr 2025 23:05:46 +0000
Files and hashes:         1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: 5pgwecjxkbgj9eOx4gPv6f6X3g1Z97bWMCjkxCOPY8g=)
                          2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: Q1d1g05zi4G/ogm4b/r2cc7LZ3pSsv6EHqXO8XveQLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00
        Validity
            Not Before: Apr  4 23:05:46 2025 GMT
            Not After : Apr 11 23:05:46 2025 GMT
        Subject: CN=67f065cb-b51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:5e:c0:ed:aa:ff:23:f7:a8:fd:3a:bd:f3:
                    19:f9:16:6b:a4:26:f2:84:53:50:1b:2e:8b:64:15:
                    f9:8b:2e:c5:19:18:d3:97:46:77:45:17:d9:a3:b5:
                    2a:51:25:fd:90:d5:31:38:7e:9a:09:fe:b5:1b:b2:
                    a1:ec:5f:32:0d:af:d3:a5:7a:fc:88:cd:0a:52:10:
                    74:ac:da:ca:94:7e:10:81:ae:f0:ae:2c:cd:1e:be:
                    50:bf:74:98:14:c9:e0:ff:15:fc:66:12:60:31:a1:
                    95:ea:70:e6:08:36:17:92:b2:2f:da:5e:7a:eb:1f:
                    56:1b:d8:45:ed:81:21:bc:dc:77:eb:19:59:60:6f:
                    57:fa:2f:8a:4c:35:a1:23:86:00:38:9e:3a:1a:d4:
                    e7:a1:f4:6e:34:ad:8f:24:4d:0a:9b:92:f4:cd:ed:
                    1d:40:83:c9:83:e1:1f:44:10:41:43:78:08:e2:d5:
                    f7:86:4c:23:68:14:d5:83:bd:1a:1d:fe:4d:60:04:
                    50:06:22:9c:d9:79:5a:7a:8d:32:ae:12:35:af:48:
                    5c:b6:1f:fc:f3:c0:af:15:c7:f5:9e:9f:08:1e:66:
                    37:68:d5:12:9f:9d:ab:62:10:4e:fe:6f:0c:f7:f9:
                    a2:f8:73:a7:be:ac:c9:08:8a:12:ae:25:4f:21:31:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:82:3D:33:C7:AB:4F:08:D8:0E:36:1D:CA:91:14:11:A5:60:38:6C
            X509v3 Authority Key Identifier:
                keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:88:97:02:46:a4:e7:6a:7d:64:df:d4:9e:a1:19:fc:43:
         9e:db:d7:d0:22:db:02:70:e3:5d:6f:12:f9:09:2d:f3:43:7d:
         15:ec:10:9d:3f:b9:de:4d:c2:27:7b:81:12:b2:55:9b:d2:06:
         14:0a:5c:7a:d0:fa:55:d2:c2:9a:f0:0d:b9:0d:e8:77:1b:c3:
         d3:b8:10:56:5b:a8:24:9d:42:51:b9:45:1e:bc:b1:85:96:37:
         a7:ad:0e:fe:fb:63:f8:60:44:8f:c9:18:dd:07:71:30:9d:33:
         f6:c3:72:02:25:10:0e:e1:d1:19:aa:f5:dc:f6:10:5f:ac:3a:
         80:87:4e:97:13:43:04:34:c7:1c:fc:16:6d:77:68:f2:0b:ce:
         59:09:8a:5b:35:99:b0:a3:81:ee:fc:3d:a5:b9:ed:3c:1a:fa:
         7b:19:b4:5f:03:10:fc:bb:49:1c:9c:63:4a:d4:f9:88:16:c5:
         0b:80:cc:45:53:b6:cc:a2:59:b3:e3:9c:b6:62:1d:dc:7a:3a:
         6f:51:6d:67:32:7e:e5:40:b4:ff:1e:52:7f:58:49:bd:40:8e:
         88:e8:6c:2d:8c:39:df:c2:ef:bf:00:b5:10:90:27:02:ef:53:
         e6:ef:89:b2:4f:72:22:00:ec:3b:d1:1a:19:82:bf:aa:a1:a8:
         16:0a:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:02 2025 by rpki-client