Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
File:                     B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft (raw, json)
Hash identifier:          bcLZwyYFxNADcoKyOR6F5PxDeQXINfoP+DGUa0gOkjQ=
Subject key identifier:   ED:E7:8E:C0:4B:CC:12:C0:35:E5:9C:C7:AD:C6:82:BA:27:99:A3:3D
Authority key identifier: 07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B
Certificate issuer:       /CN=A9177157/serialNumber=079CFCC512EA61966FA319A2988C92FD86BDF88B
Certificate serial:       10CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
Manifest number:          10C2
Signing time:             Fri 04 Apr 2025 17:24:38 +0000
Manifest this update:     Fri 04 Apr 2025 17:24:38 +0000
Manifest next update:     Fri 11 Apr 2025 17:24:38 +0000
Files and hashes:         1: B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl (hash: 9YmaIIB60rmR+jOKwQyzL3fQ7pmDHa9ENHaYS9s+LO4=)
                          2: 78CEA40E63CE11EBB442586CC4F9AE02.roa (hash: S44RGYvUcki16JBFrbb/EQ+b+VzZlhCn8dFhJGjwF1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl
                          rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4300 (0x10cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177157
        Validity
            Not Before: Apr  4 17:24:38 2025 GMT
            Not After : Apr 11 17:24:38 2025 GMT
        Subject: CN=67f015d6-7b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:fd:87:e2:03:b6:3b:6b:b8:39:a3:13:c7:
                    bc:24:5c:30:ed:2b:b6:e9:ff:d2:4a:79:f6:95:e1:
                    ab:1e:f9:6a:b3:3f:50:8a:06:fa:7e:c8:6d:e5:a0:
                    35:31:2c:38:f7:0d:38:ed:16:a2:7a:6c:83:11:93:
                    e8:6e:1b:1f:29:0b:95:d0:ff:cc:13:5b:cf:59:1c:
                    41:99:58:d3:5e:b0:77:86:54:20:a4:0d:34:52:81:
                    e8:4b:55:c7:7e:1a:53:4a:7f:dc:f9:dd:78:dd:eb:
                    85:01:6f:67:a1:b4:d8:12:56:88:6c:63:c7:16:9d:
                    e1:3a:f4:9e:ed:a2:4e:50:1d:cf:8d:03:63:e6:b3:
                    da:88:6f:17:86:ea:91:22:8b:53:51:8a:a3:e0:08:
                    ef:43:cc:09:8c:c9:3e:0b:b2:53:56:92:de:69:82:
                    05:a2:5b:28:42:2a:b1:fc:84:40:26:f8:01:d7:b7:
                    e0:6e:48:93:7d:96:5b:38:1b:0f:a1:af:5f:d6:c1:
                    d5:17:7d:15:22:36:5c:0d:35:15:3a:20:e4:d3:31:
                    e5:0d:c4:69:85:7d:6a:6e:07:19:c4:14:da:b7:5a:
                    d8:39:4a:78:0f:47:99:60:a1:24:10:4d:8e:3d:90:
                    14:22:eb:a4:3a:ef:a9:43:a9:b9:c3:bc:65:bb:09:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E7:8E:C0:4B:CC:12:C0:35:E5:9C:C7:AD:C6:82:BA:27:99:A3:3D
            X509v3 Authority Key Identifier:
                keyid:07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:55:c7:66:13:4d:eb:af:db:d9:48:67:b3:84:27:08:9b:70:
         4d:75:57:1d:e4:fd:df:e4:44:23:44:3c:80:40:2c:8f:f6:12:
         26:f5:02:ad:27:b0:64:22:61:f1:d3:ea:57:a8:04:8d:d5:1e:
         77:f2:f9:55:64:7d:45:f1:e8:3c:c8:66:bd:e1:1a:44:5e:85:
         8d:6d:38:b4:b1:81:35:14:1e:12:08:cb:8d:c3:b4:98:db:e1:
         b6:42:dc:f1:f7:b6:c4:14:ac:b7:6b:b2:43:b1:a8:0f:d4:11:
         ca:4a:24:ef:e6:fe:a7:c0:a7:8a:90:7e:7f:2a:4f:c2:84:14:
         4f:a9:69:bd:a6:90:89:56:61:6d:16:ab:0b:3f:ee:71:06:88:
         ab:b6:fa:b5:12:6c:23:d3:5f:f0:78:1b:85:ef:65:fa:72:c6:
         c4:c1:55:4a:22:a5:d7:1e:bf:47:5d:31:f2:34:77:ea:1c:b9:
         68:30:69:51:12:0d:3b:59:66:68:d3:38:62:86:3f:6d:29:75:
         ad:6e:b6:06:11:62:69:24:c0:5a:ce:99:ee:74:09:0d:1d:33:
         f7:16:8a:dc:ae:c9:4b:ea:40:c5:22:c0:0e:e5:a5:d6:95:70:
         cc:28:bb:90:d8:fb:a3:02:54:10:01:3c:36:d4:a1:36:db:a4:
         b0:f0:ba:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:10 2025 by rpki-client