Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
File:                     MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft (raw, json)
Hash identifier:          ctgKVUmEqfm2r8iLlvxPyv2VednntiW66XOogsMhQ3w=
Subject key identifier:   D9:72:C9:43:C9:2B:9F:64:1B:DE:49:96:82:AA:EA:C1:5B:43:DA:81
Authority key identifier: 31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5
Certificate issuer:       /CN=A918337F/serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
Certificate serial:       26C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
Manifest number:          26A2
Signing time:             Fri 04 Apr 2025 15:43:41 +0000
Manifest this update:     Fri 04 Apr 2025 15:43:40 +0000
Manifest next update:     Fri 11 Apr 2025 15:43:40 +0000
Files and hashes:         1: MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl (hash: E5vLk8zrkZP1zlqqgIATDm02etRRoFfU9SEUQzsnm9k=)
                          2: EC9B786E9D8811EB80D73886C4F9AE02.roa (hash: hxoilEsxdOaPHf72rZ87qnsjQ85Xv92LxhdM//owldE=)
                          3: 783D3BDABCE011EA81F10855C4F9AE02.roa (hash: +JqEbUf+pThX233s1PinTFzcLJbDJ2DJ6J3As12MjOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl
                          rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9921 (0x26c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918337F
        Validity
            Not Before: Apr  4 15:43:40 2025 GMT
            Not After : Apr 11 15:43:40 2025 GMT
        Subject: CN=67effe2c-f05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:3d:d8:4d:f0:fd:d2:0b:0a:90:8e:01:14:
                    2e:b9:4c:11:e4:8c:25:0c:a2:9e:e2:77:58:3b:3b:
                    54:c4:60:eb:3c:a8:c8:6a:00:c1:ab:c4:c6:68:c2:
                    47:4c:ad:2b:78:76:ad:0c:fb:da:8f:75:59:67:6d:
                    13:27:a2:62:a5:dd:e4:a0:3c:30:1c:65:46:1d:58:
                    8f:26:03:43:0f:6c:ba:df:04:01:54:d2:70:6e:35:
                    48:cc:7b:6d:4b:44:8e:ee:16:73:3b:eb:77:2a:f7:
                    97:c7:e8:43:f5:bd:10:21:e2:84:c4:ac:4f:8d:69:
                    1a:f8:c9:eb:a5:53:92:e1:63:ad:90:a2:68:d6:c6:
                    bb:99:16:0d:9a:85:78:19:ef:4d:5e:c1:cd:d9:50:
                    29:99:8b:4c:0c:74:eb:08:75:81:5d:ab:b7:bc:7a:
                    e3:93:7b:28:42:1e:00:b3:92:80:3d:54:14:cb:cc:
                    d4:83:7d:af:f2:ef:85:4e:8d:29:90:8b:6c:c3:13:
                    ae:cf:e1:62:3f:04:63:8e:a8:fb:e3:a8:a9:83:75:
                    cb:64:33:a9:91:9b:5d:ca:98:96:74:58:6f:7b:8b:
                    44:12:f7:71:6f:ae:7b:a8:34:ac:34:e1:21:63:e6:
                    9b:6e:72:6f:41:85:13:37:41:1f:0f:81:13:85:5c:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:C9:43:C9:2B:9F:64:1B:DE:49:96:82:AA:EA:C1:5B:43:DA:81
            X509v3 Authority Key Identifier:
                keyid:31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4f:cf:6c:37:b9:d0:42:95:ae:00:43:e5:53:84:4c:bb:4f:
         0e:0a:97:c2:d4:09:e4:8b:41:39:8d:a3:35:35:ce:84:45:9a:
         a7:18:11:7f:44:ff:1e:b0:0b:09:d6:5b:25:8d:76:74:89:e7:
         ec:cb:dd:b4:d0:fa:18:8a:e8:62:d9:82:9a:6f:5b:2b:70:32:
         24:ec:47:32:da:e6:5e:0d:94:c1:b6:a8:08:b6:9a:78:f7:49:
         3d:6e:7b:25:ba:c3:af:57:72:bf:f8:2d:18:53:3b:d3:73:ac:
         82:39:f7:d2:fa:63:63:51:3a:70:fe:1a:23:84:4e:d9:7c:74:
         d1:ad:c3:e6:bb:d6:ef:c1:a9:80:4f:4f:42:a2:59:5c:ae:87:
         03:3a:70:e2:3c:f1:e3:fe:a8:c0:4c:81:99:a6:e4:df:e1:67:
         29:1f:ed:2f:8f:15:4f:28:08:6e:d1:64:cb:5e:a9:74:05:43:
         f3:67:cd:0c:fc:c1:c2:db:10:40:82:83:26:5d:76:29:a5:84:
         9f:7c:25:9d:99:26:18:26:53:1f:51:79:6d:b8:5f:35:24:c9:
         a5:7e:a3:d3:cb:ad:88:1e:14:38:e8:a2:9d:54:66:0f:e4:df:
         54:e4:fb:7c:ac:1b:7d:c4:14:d4:a4:fa:a5:38:62:b9:5e:db:
         5d:fb:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:52 2025 by rpki-client