Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
File:                     rwvgskoRnTs-k_0M07NBWiwNAbg.mft (raw, json)
Hash identifier:          Q/XdEsdau9iRzzZvRSfpzFM9yNmYkgCfd33wvS6k0Vs=
Subject key identifier:   83:9F:94:01:35:2B:FF:5D:2F:1D:41:D2:93:5D:73:9A:16:51:44:02
Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Certificate issuer:       /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Certificate serial:       045D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
Manifest number:          0451
Signing time:             Sat 29 Mar 2025 00:28:38 +0000
Manifest this update:     Sat 29 Mar 2025 00:28:37 +0000
Manifest next update:     Sat 05 Apr 2025 00:28:37 +0000
Files and hashes:         1: rwvgskoRnTs-k_0M07NBWiwNAbg.crl (hash: VCgdsupAZDAimL4I6Hd07VXZoF8onr2OEpeHRcvNER8=)
                          2: 86B5983C582111EC8035E069C4F9AE02.roa (hash: 5qouoEpyG0nTRTbnrJ/NyoF0RuPOG8nKIaos2vt4g2E=)
                          3: 8642C6D6582111EC8035E069C4F9AE02.roa (hash: OZwIP8O6asmoqAti/IynuGQ84eOXWuEj6DzevJ73U20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
                          rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 00:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181437
        Validity
            Not Before: Mar 29 00:28:37 2025 GMT
            Not After : Apr  5 00:28:37 2025 GMT
        Subject: CN=67e73eb5-c4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:e6:21:ea:b0:8d:0c:70:bc:0b:cd:e5:02:
                    d8:99:39:57:bf:68:2c:35:da:43:b8:44:61:41:ae:
                    f1:7e:65:c6:ae:25:7d:97:85:91:c0:17:bd:2e:d8:
                    b5:55:31:a0:f6:b4:68:4f:a4:73:da:09:ab:93:1a:
                    f1:db:a1:52:69:61:7e:62:12:4a:32:8e:d7:58:a0:
                    76:07:70:1e:ed:43:e7:87:f0:56:23:49:23:f9:70:
                    ab:19:fe:61:ac:31:3a:56:a3:25:d1:20:c3:06:8d:
                    87:44:08:86:80:77:70:8a:a7:3f:3d:00:29:0b:6c:
                    5b:f4:9f:1e:53:cc:5d:05:a2:00:d5:36:d4:79:a4:
                    88:28:34:b7:ea:c4:a5:b0:8e:39:02:d4:3c:b3:0e:
                    1d:dd:f7:10:32:22:5a:4c:7e:6f:fe:b1:07:ae:32:
                    d7:a9:4a:f3:fe:9e:9f:20:e6:82:ec:16:18:a7:9f:
                    d1:81:aa:b4:08:22:d3:b0:38:55:97:c0:9c:5a:d5:
                    c7:e6:20:27:6e:1a:e6:60:4f:72:b7:46:72:7c:af:
                    5f:ce:00:8b:fb:db:f2:3a:3c:8a:0d:34:65:11:6e:
                    80:e5:cf:11:9b:bb:87:81:7e:c2:82:f8:07:db:3e:
                    e3:05:95:65:36:43:a8:a2:80:cb:b1:4c:d4:d6:2a:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9F:94:01:35:2B:FF:5D:2F:1D:41:D2:93:5D:73:9A:16:51:44:02
            X509v3 Authority Key Identifier:
                keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:5b:7f:da:06:7c:2b:c1:77:3a:8a:2f:9b:6e:c1:e9:44:
         fb:44:49:09:97:43:12:ce:97:66:16:dc:ab:b2:3a:3c:51:44:
         38:30:91:8d:ce:05:d6:45:9b:08:6f:56:c5:4f:9b:fd:15:6b:
         20:0d:9f:d3:56:da:fa:17:d9:c4:35:01:36:65:25:4c:ed:55:
         57:63:92:b1:80:75:72:ac:71:bb:50:86:06:a3:7f:b4:60:b6:
         52:99:e5:66:fc:d1:d7:50:fa:31:23:35:58:bd:d3:0c:f5:cb:
         26:3a:8c:10:ea:cb:20:a9:4c:d3:84:88:4c:01:fa:ff:5b:65:
         9a:83:06:51:9e:3a:34:24:c0:aa:35:9b:1b:f5:2e:77:65:ca:
         79:f9:10:34:34:80:ad:51:6c:de:fc:d9:08:37:0f:02:22:09:
         ec:93:83:02:d2:8a:92:da:c2:84:4e:3a:26:b3:d4:f6:8c:13:
         72:7a:f1:db:94:33:7f:3c:b2:1f:6a:86:b2:a2:93:48:92:17:
         29:90:18:f8:4c:90:47:4d:fe:b7:7a:ed:01:62:c0:0d:74:ba:
         1f:79:e7:b1:6b:73:16:8c:27:da:3c:2f:32:4a:56:19:f1:4b:
         95:d2:28:1f:32:79:b9:51:aa:5a:b4:86:c5:c9:4b:2f:44:34:
         d8:e0:49:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:01 2025 by rpki-client