Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File:                     xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier:          KPk1f/cJs+aBSnbv2rfDv3Rdyq/+ZyVFr5UQiyPkMoc=
Subject key identifier:   E8:08:23:31:0C:B3:71:41:AC:21:49:AA:DD:32:7A:59:75:39:E1:5F
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number:          07BF
Signing time:             Thu 10 Apr 2025 21:03:56 +0000
Manifest this update:     Thu 10 Apr 2025 21:03:56 +0000
Manifest next update:     Thu 17 Apr 2025 21:03:56 +0000
Files and hashes:         1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: XokCFRTYy55DAaUrCOe9iE7p4+W6Khlk08OA+5FOlE8=)
                          2: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: 1xBZeIspk3p68aari9nbkv5Zmt0QjTFZs3Q9VqPkQFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 21:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488
        Validity
            Not Before: Apr 10 21:03:56 2025 GMT
            Not After : Apr 17 21:03:56 2025 GMT
        Subject: CN=67f8323c-d39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:df:99:e3:02:28:aa:87:1f:fa:f9:f3:4f:
                    45:59:37:e6:35:f9:6c:19:91:2c:f3:ca:a0:6a:d4:
                    ad:ec:eb:5c:d8:c2:6c:2f:c1:50:90:15:e1:49:22:
                    19:24:50:fb:6d:a0:25:51:76:d2:b5:02:f6:ad:e7:
                    55:36:05:5f:fa:ab:23:8b:aa:76:0b:d6:ee:04:63:
                    61:4a:41:88:9e:25:75:a2:07:95:41:db:7c:97:92:
                    32:fe:87:ce:77:97:2d:86:29:95:ac:b9:d9:06:29:
                    27:f5:6a:47:20:a5:d7:c3:91:18:e8:b0:d1:1d:04:
                    df:2b:5b:a7:1b:a2:5f:dc:f5:f8:ef:c4:3b:d7:32:
                    50:59:4b:10:bd:07:7a:e4:08:3e:94:9a:ec:7d:05:
                    33:90:d1:bc:05:a0:4b:09:cf:da:43:fc:c9:06:e2:
                    72:85:04:8f:9d:ec:b6:02:58:bc:73:e7:40:e3:2b:
                    09:dd:c8:7b:da:28:b1:a5:01:78:61:09:f1:9c:9b:
                    89:03:be:be:65:c4:d7:26:11:71:02:a8:c2:20:32:
                    a8:c1:43:e1:65:44:95:14:7f:f8:cc:bd:25:4b:59:
                    16:c8:58:6d:45:a9:73:97:47:ae:73:48:e5:b9:81:
                    f8:ef:0d:8c:23:e2:bb:94:c4:34:01:c4:81:94:10:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:23:31:0C:B3:71:41:AC:21:49:AA:DD:32:7A:59:75:39:E1:5F
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:d2:2c:88:b9:b0:24:77:ee:dd:71:96:3f:23:e3:71:bf:
         9e:4a:94:f0:22:b1:ff:b7:d0:29:ae:37:ef:26:d0:2b:5b:47:
         ea:1d:8a:73:f1:bc:d4:e3:6b:24:ee:cb:92:73:79:67:00:e3:
         67:60:37:68:7c:c1:1b:2c:31:26:54:4d:2d:1c:d6:73:30:15:
         2c:85:65:45:6c:70:3b:b5:da:3d:a0:f8:a6:8e:21:ae:ea:3b:
         5a:db:26:ff:5f:a9:ed:ac:86:38:42:46:50:14:c4:87:c2:40:
         f1:08:ec:b5:b6:4b:f9:9b:f4:b5:01:dc:05:09:a4:91:ac:1d:
         a2:7a:dd:8b:5d:49:2d:51:ae:a9:f3:a3:16:69:0a:bc:bf:04:
         10:ae:90:de:47:de:50:f0:07:81:48:35:03:2d:2c:36:67:0c:
         64:aa:82:dc:48:10:83:35:bc:84:de:5a:34:0a:d5:77:be:ac:
         a6:c5:ed:0a:46:da:59:b7:e0:3a:a5:a5:e3:1d:5d:28:05:44:
         84:3b:9f:15:f1:a1:0d:40:0c:5d:18:f7:d3:98:ad:b5:77:6b:
         f6:ea:7d:ca:83:e4:b0:45:58:02:c7:97:a2:6a:51:c9:d6:a4:
         6b:91:d5:2d:64:c2:89:5b:fe:04:75:9a:de:c6:43:11:2a:5b:
         42:11:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:47 2025 by rpki-client