Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
File:                     JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json)
Hash identifier:          EbukIWlE0Wahc+ZDR6/LbdtV78JeQH6R1PD7nkgPyd0=
Subject key identifier:   44:98:08:37:C5:E9:3A:ED:A6:C9:2E:E1:18:B1:EF:CF:8D:C2:96:6A
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Certificate issuer:       /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial:       0637
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
Manifest number:          0630
Signing time:             Tue 08 Apr 2025 22:24:11 +0000
Manifest this update:     Tue 08 Apr 2025 22:24:10 +0000
Manifest next update:     Tue 15 Apr 2025 22:24:10 +0000
Files and hashes:         1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: dMhS8Av3r0DgetsfByHr5xvHiUj5XGx8scDdHoy2vhM=)
                          2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl
                          rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 22:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00E
        Validity
            Not Before: Apr  8 22:24:10 2025 GMT
            Not After : Apr 15 22:24:10 2025 GMT
        Subject: CN=67f5a20b-ee2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:17:43:a4:44:eb:fd:ab:b1:1c:66:f1:8b:
                    b3:05:79:22:fc:c2:0f:54:c6:6f:52:6c:9c:94:a5:
                    18:d7:04:0b:4d:57:80:8e:7c:2e:52:e3:15:6f:f4:
                    c5:cd:dc:36:94:68:97:4e:7b:5c:14:fe:05:09:81:
                    3e:33:d5:21:8b:e5:22:96:fd:72:42:45:88:d3:d9:
                    ef:ad:fa:19:da:d6:88:7d:e0:ab:38:51:bf:ec:f1:
                    7f:87:7c:f7:d2:7f:93:1b:42:3d:82:56:e1:80:86:
                    c9:35:1a:cb:c8:1c:31:e6:b3:79:37:14:30:56:af:
                    b8:13:a2:97:9a:f7:de:90:33:9d:1b:fb:27:b2:1e:
                    66:58:e2:9d:32:a5:9c:71:10:0b:d4:51:1f:90:c1:
                    3f:78:21:44:94:38:90:98:3e:dc:f8:3f:8f:0c:ef:
                    4b:29:81:cf:36:05:af:bc:2d:2c:af:9b:b0:bf:b9:
                    2d:a0:72:3a:68:93:e8:5f:e5:ae:1d:3c:f5:df:6a:
                    1c:ef:5e:05:83:2e:b2:ff:53:32:09:84:bf:49:30:
                    60:3d:b6:84:63:53:6a:5a:35:9b:30:db:d9:56:2a:
                    46:4f:1a:fd:28:43:f3:71:19:d0:77:a1:f7:62:6c:
                    e0:d1:7b:89:ab:36:f4:a2:0e:27:78:e5:8e:f4:7c:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:08:37:C5:E9:3A:ED:A6:C9:2E:E1:18:B1:EF:CF:8D:C2:96:6A
            X509v3 Authority Key Identifier:
                keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4b:15:8a:b4:28:5c:3e:3d:7a:2a:77:c3:f8:69:b0:24:63:
         d5:ea:78:03:47:29:31:37:88:57:97:00:51:99:a9:52:4f:97:
         12:8f:92:48:16:21:05:25:47:f3:3f:79:f6:f6:63:fb:c1:c6:
         a1:cb:a5:a0:c9:cb:ac:61:62:94:f7:63:58:b4:bc:20:89:b8:
         9e:fc:6e:3a:12:28:e6:bb:4c:63:1c:8d:cb:75:77:1c:d2:10:
         80:32:10:da:22:aa:49:40:7d:96:82:04:bf:a6:a4:a4:47:b2:
         ef:fa:bf:50:1e:6c:cf:97:94:71:b3:d3:2f:b0:b6:d8:1a:d2:
         38:79:ac:2d:1a:d1:7a:1f:20:fb:3f:13:ea:2b:53:15:37:f3:
         96:63:ee:b7:86:04:ef:4e:f5:ae:43:e8:5d:01:b8:2f:6d:0f:
         f7:9f:44:da:7b:59:ae:77:68:d5:11:59:11:b4:1d:d7:00:aa:
         43:c4:73:db:1d:c6:5f:df:6a:b5:b7:e3:69:5f:d9:b2:f7:91:
         c3:f4:84:4c:20:29:52:42:24:81:50:19:91:a9:4c:b4:24:e7:
         80:18:01:54:f7:b8:e4:bb:80:08:52:ad:3a:85:1a:ce:e8:b7:
         3a:a8:9c:7e:b0:06:e4:42:cd:34:f1:8f:75:a2:d5:a6:de:01:
         3a:f1:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:21 2025 by rpki-client