Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
File:                     eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json)
Hash identifier:          syYNwmf490761RtGuHRN1rzI5838MtRyVbItlZflJq0=
Subject key identifier:   F1:26:60:72:A6:B7:F0:91:BA:A9:D5:58:B6:FE:4D:C1:EA:16:CB:12
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Certificate issuer:       /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
Manifest number:          4B
Signing time:             Thu 03 Apr 2025 06:35:11 +0000
Manifest this update:     Thu 03 Apr 2025 06:35:10 +0000
Manifest next update:     Thu 10 Apr 2025 06:35:10 +0000
Files and hashes:         1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: Au/Gbe291/h81iNXCM0zv+XC4It3k0C7WUadN/IdY64=)
                          2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5
        Validity
            Not Before: Apr  3 06:35:10 2025 GMT
            Not After : Apr 10 06:35:10 2025 GMT
        Subject: CN=67ee2c1e-23e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:a1:ef:74:47:32:f5:e2:b3:c0:af:58:43:
                    a2:7a:4d:fc:e5:3b:0d:60:d3:7b:10:2f:a6:4d:8b:
                    78:b5:f2:62:73:89:a2:9d:4b:27:98:4f:db:43:ed:
                    05:ed:8c:6e:03:42:5a:2d:25:98:45:82:2e:ea:1c:
                    45:69:38:ba:ea:0a:c6:ba:f9:af:e5:80:68:4d:8c:
                    6a:fd:38:17:7a:c8:4e:3f:f5:b9:33:4a:8e:d0:b5:
                    5a:2b:4b:03:dd:d3:e9:72:cd:f5:fb:e3:82:54:fe:
                    12:4e:3a:4f:f1:4d:50:48:6f:84:09:dd:a8:39:31:
                    4c:2b:97:77:c3:e4:cd:c0:15:cb:a2:48:63:f0:1e:
                    83:57:de:dd:29:73:18:1d:d1:18:d9:1b:6d:d2:3a:
                    c7:a3:78:1d:7f:14:75:1f:0f:3f:e2:56:d1:e5:9a:
                    fa:60:2f:d0:36:17:6a:e8:26:22:fc:00:5e:4a:0b:
                    f9:dc:76:27:39:4b:4d:5f:d6:c8:bc:62:d9:cf:87:
                    7a:ce:c2:87:84:3b:79:14:a5:51:f8:84:fd:10:2e:
                    67:75:74:84:d4:e3:ae:e1:2d:03:01:79:2f:91:01:
                    6e:b1:f4:9d:50:7d:b0:d0:ef:22:79:1c:29:da:2e:
                    07:56:7b:f6:aa:d3:1f:b3:0b:1a:65:bf:c8:cb:5b:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:26:60:72:A6:B7:F0:91:BA:A9:D5:58:B6:FE:4D:C1:EA:16:CB:12
            X509v3 Authority Key Identifier:
                keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:a5:1c:c2:1f:ac:13:ef:27:29:53:44:d7:57:c1:48:a8:
         10:06:3e:a1:83:ac:d8:f2:ce:01:75:b0:03:c8:35:3a:f0:5e:
         dd:3d:ff:b0:de:8a:e8:c4:bf:00:1f:89:33:8f:56:8f:55:74:
         89:0a:44:b5:7f:7a:50:e2:89:86:fd:f2:42:52:4c:c9:7a:4c:
         75:83:ce:09:d8:5c:20:f6:12:fb:d3:05:9a:2a:33:48:89:37:
         7d:41:ab:0c:ad:55:9f:d9:ac:21:85:44:e0:c4:91:ff:f3:e7:
         fe:56:0c:04:26:ad:9c:f5:54:c6:82:17:5f:81:43:b9:3f:53:
         5c:dd:15:c9:15:75:bb:fd:b3:ed:8d:df:7f:da:59:4d:ea:d0:
         92:b0:87:b2:aa:da:b6:dd:40:9a:2a:f2:60:53:41:47:6b:8a:
         00:17:ab:72:46:ca:d3:17:55:40:b8:c2:fa:e4:95:ed:51:69:
         1c:e2:7a:58:bd:b6:41:ab:c1:4e:4f:26:44:82:d2:aa:5d:0c:
         c1:1a:75:0e:a9:de:04:76:81:13:ec:45:14:9c:92:48:f7:d6:
         94:68:23:2f:a6:e2:ae:c8:6c:08:3a:8b:67:c7:db:ab:3b:b3:
         45:df:e5:cf:04:bd:25:a4:6c:6e:e5:9a:c4:67:ae:0a:31:5b:
         13:c6:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:43 2025 by rpki-client