Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
File:                     DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json)
Hash identifier:          0nMJ3VTfiFc/UdVb0BakZXJBP5GURifJixwo5fekfH0=
Subject key identifier:   FB:83:ED:A0:55:3C:64:19:EE:7F:B3:75:F5:96:27:8B:AD:E4:BA:BA
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
Manifest number:          70
Signing time:             Sat 05 Apr 2025 06:11:19 +0000
Manifest this update:     Sat 05 Apr 2025 06:11:18 +0000
Manifest next update:     Sat 12 Apr 2025 06:11:18 +0000
Files and hashes:         1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: mJmu+XGgvKJyEGQVjfZ9RwNEzZemD4YkBivD6qYex3Q=)
                          2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=)
                          3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 06:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2
        Validity
            Not Before: Apr  5 06:11:18 2025 GMT
            Not After : Apr 12 06:11:18 2025 GMT
        Subject: CN=67f0c986-2c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:ed:5c:76:43:01:00:25:9b:16:2a:a3:46:
                    a1:72:a2:00:ce:a3:1a:a0:d9:fe:30:5a:f0:8a:33:
                    d4:62:83:53:4f:33:ef:54:a8:7c:00:4d:ad:70:d4:
                    4f:66:53:f3:f2:66:b3:67:cf:11:49:1f:e2:e8:be:
                    21:b2:a7:c8:5a:0b:ce:85:a5:ff:59:11:cd:f1:a0:
                    ef:ce:40:76:0c:22:3d:e8:cb:ea:45:b5:09:58:0f:
                    a7:0d:03:37:75:36:1a:a3:da:d6:53:7f:28:af:67:
                    3c:f6:85:cd:57:be:66:23:40:11:80:10:00:c9:19:
                    85:8f:70:27:be:08:79:94:0d:b6:05:36:2a:f8:38:
                    52:ea:fd:cb:2e:fd:a6:b3:e5:0e:8c:e2:f8:df:0e:
                    ee:1a:b9:b8:43:a6:71:70:32:e1:f4:1f:85:6c:9c:
                    b4:01:7d:37:91:57:25:be:7a:10:a4:d5:de:7c:4e:
                    95:ef:48:a8:8a:a0:f9:25:c6:e3:c1:13:76:04:e2:
                    a7:1f:7b:76:b1:5f:95:e2:58:d5:9b:6b:f1:f4:9a:
                    12:26:c3:88:c5:29:e2:3d:c0:94:d7:c6:d0:79:0d:
                    7c:52:57:c2:d0:c8:7c:5e:b4:e6:e9:89:1e:7d:ae:
                    42:fd:c2:d5:0d:96:f5:26:ee:84:e7:1f:58:67:94:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:83:ED:A0:55:3C:64:19:EE:7F:B3:75:F5:96:27:8B:AD:E4:BA:BA
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:70:ae:85:38:7d:b6:32:d2:74:6c:2f:0b:37:1c:7a:26:f4:
         ce:f1:26:17:6f:ac:1d:90:51:fe:58:11:12:fc:7a:04:82:13:
         09:f3:b7:3e:dd:8c:d3:65:16:f6:7a:1e:03:4f:6b:14:2a:8e:
         11:05:8a:ed:f5:22:f8:41:ef:54:8c:28:aa:63:0c:75:cc:f7:
         da:9d:37:a2:81:08:08:33:1a:13:26:6a:b8:57:7a:9e:73:f4:
         5c:c9:1c:9c:ed:7d:3f:1e:20:c3:12:27:85:1c:bc:bd:33:63:
         d5:fe:8a:8b:d1:37:cc:a9:3e:88:31:d5:78:f2:df:9f:8a:f6:
         6b:f0:ce:66:a4:58:59:d3:06:e9:c8:0e:b0:dc:ad:da:0f:10:
         e0:9a:10:83:99:ab:ad:1e:c5:ca:ae:9f:cb:e2:f6:fc:93:0c:
         bf:6d:19:e3:c5:44:85:0c:26:e1:08:24:f5:58:f1:16:1d:d3:
         85:05:a8:ef:e6:85:04:1f:4e:4c:46:89:c9:8a:3d:e4:b1:a9:
         f6:02:d7:95:76:32:5d:4c:f0:4c:ca:58:c4:ee:e4:25:4f:05:
         53:2d:02:d0:ff:5f:4c:ad:f4:2b:41:20:4c:4b:91:d7:ca:07:
         a8:78:02:db:63:f2:b9:e9:75:4e:f0:65:f5:f7:f7:6c:df:66:
         30:84:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:23:42 2025 by rpki-client