Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          D+oBHPcOGP8s96WtxnSCO3YcA+4k/mOPpqymE3YzTew=
Subject key identifier:   AC:5F:1E:7C:29:F1:B5:48:BD:D0:F0:14:D6:86:98:8E:FD:EE:31:68
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          6E
Signing time:             Thu 03 Apr 2025 06:13:59 +0000
Manifest this update:     Thu 03 Apr 2025 06:13:58 +0000
Manifest next update:     Thu 10 Apr 2025 06:13:58 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: vBsM3CeyRGP/bWMfYlLN5aQDuaZJM87MawcMITVFeBE=)
                          2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=)
                          3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=)
                          4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854
        Validity
            Not Before: Apr  3 06:13:58 2025 GMT
            Not After : Apr 10 06:13:58 2025 GMT
        Subject: CN=67ee2727-c6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:f7:a2:2b:ff:e5:ae:d3:7e:96:ec:d0:89:
                    9f:33:49:d8:0d:8d:5f:7d:fa:4e:b6:47:ae:b6:e6:
                    31:ff:23:4e:50:81:ff:e6:dc:a2:22:3c:2f:18:f1:
                    5d:75:dc:8c:40:f6:ff:c2:4b:af:1f:85:91:dd:4e:
                    fd:bb:33:a5:b0:ca:23:1d:0c:39:69:af:88:e0:a5:
                    86:a2:5e:39:af:18:f5:6b:f4:82:17:c7:ce:10:23:
                    dd:e3:ee:5f:d3:24:49:27:50:2b:a9:47:72:6b:b5:
                    54:2e:02:29:9a:a1:1f:0b:78:65:ed:45:af:6f:fe:
                    5b:79:3d:70:50:4b:fa:ea:5c:b1:76:2c:13:0c:d5:
                    cd:f7:e3:43:4c:29:d3:61:5f:87:84:73:81:3b:e9:
                    52:c0:42:68:5b:82:02:e2:2c:4b:e2:f6:50:b9:9c:
                    69:e1:ad:45:e1:46:05:4d:51:a1:46:dd:dc:0d:7f:
                    ad:3d:85:e0:63:ad:07:5d:92:bc:17:a5:84:42:99:
                    b2:3f:fb:d4:63:f3:5f:92:ca:9c:b7:07:ae:5e:2d:
                    9d:ba:bf:58:be:da:8c:0b:6d:3b:48:a5:a4:03:5f:
                    5d:af:d8:a9:4b:71:78:87:df:b8:00:23:9d:69:7d:
                    70:1c:10:bf:b3:c7:53:e8:bd:9b:7e:e0:49:15:31:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5F:1E:7C:29:F1:B5:48:BD:D0:F0:14:D6:86:98:8E:FD:EE:31:68
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1c:f6:23:62:7f:1c:90:d2:20:3c:a9:b6:19:9a:aa:3d:29:
         0b:97:fe:18:84:6b:e2:ce:b0:87:33:81:d4:86:64:bb:45:7d:
         14:e4:3b:c0:71:af:d0:39:cf:e4:c5:7d:2c:12:8c:60:f1:f7:
         d8:e5:bc:79:7e:ab:97:81:a8:80:c1:76:a8:07:f7:53:26:32:
         ca:50:aa:0c:2b:ce:9d:4f:76:22:53:a0:28:01:3e:93:60:dc:
         3a:62:8c:e8:6e:e0:97:a5:1a:fa:c8:fb:47:af:2f:91:16:fa:
         7a:4d:31:2a:54:7b:af:1c:2a:ad:b2:5f:d7:3d:98:16:33:2d:
         7a:fd:97:1a:09:cb:46:1f:54:64:82:ab:f4:20:ba:b1:ee:85:
         b9:a1:7a:11:24:3c:93:38:62:0d:c6:f4:14:69:3a:3c:de:81:
         f5:21:3d:f0:b9:42:46:02:91:c3:13:20:95:1e:ab:fc:ce:14:
         70:d3:63:00:b4:bb:ec:2b:30:85:ab:78:59:6a:79:59:66:43:
         4b:dc:9e:17:ed:ad:4a:62:05:c6:58:8e:58:14:1d:2e:8e:17:
         ec:e3:53:8f:ff:c0:35:d7:38:8b:07:a6:30:7e:11:35:94:83:
         83:85:04:9c:c8:8f:b1:d0:66:6f:e0:68:32:d0:b8:9b:10:17:
         74:86:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:16 2025 by rpki-client