Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
File:                     Ht151WWBY19_MpfG0nDHN0l4nj0.mft (raw, json)
Hash identifier:          J6Y1e0+ubZTGfj0/MDslwCEeUmURY0YCHI7I/Z3IhhQ=
Subject key identifier:   C3:6A:B4:83:D1:F1:30:88:C8:B4:29:7F:BC:03:21:11:C5:AF:3B:5B
Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
Certificate issuer:       /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Certificate serial:       0566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
Manifest number:          055E
Signing time:             Fri 28 Mar 2025 23:41:41 +0000
Manifest this update:     Fri 28 Mar 2025 23:41:40 +0000
Manifest next update:     Fri 04 Apr 2025 23:41:40 +0000
Files and hashes:         1: Ht151WWBY19_MpfG0nDHN0l4nj0.crl (hash: NptwhDhF4j6sn7sLlo2E1tfcjqBsKE8KT26t2juSY3s=)
                          2: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (hash: F+k1pgKAm7HpOhKtY5/4J+QSbulAvGQUTiDf7IqkyBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E
        Validity
            Not Before: Mar 28 23:41:40 2025 GMT
            Not After : Apr  4 23:41:40 2025 GMT
        Subject: CN=67e733b5-026f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:a8:3b:9f:92:7e:dc:df:2f:eb:8c:e7:19:
                    7d:94:c8:c8:8a:24:c4:91:ec:94:09:81:62:dc:13:
                    cb:29:2a:de:35:74:79:9e:9d:71:96:73:40:a9:08:
                    c3:20:cc:10:35:8f:74:08:5d:f7:6e:fc:c0:18:63:
                    54:38:9c:69:51:4c:63:3d:0a:7c:30:26:fd:f4:fb:
                    85:16:14:72:9d:2a:4b:64:2d:e9:0a:dd:28:8e:92:
                    65:98:6e:c8:83:aa:4a:8c:b4:86:1c:23:7d:09:8f:
                    3a:9c:f5:38:54:2c:1b:e6:91:92:ce:11:29:ba:80:
                    ce:55:69:c0:98:08:84:64:8e:c2:8d:5f:3c:40:66:
                    47:4a:27:08:99:8f:32:b5:11:0b:bd:ea:09:c6:bf:
                    32:fe:b0:f3:82:2a:4d:f8:b6:1d:ed:cc:f1:66:9d:
                    74:17:ef:c0:d9:e5:54:26:29:2a:85:14:79:a0:0b:
                    56:ac:74:1e:15:e6:a4:c3:68:33:8a:29:2e:cb:37:
                    42:87:eb:30:49:c0:4c:3b:35:79:90:f2:16:4f:49:
                    0f:61:32:78:fe:02:2a:da:e5:ff:ec:20:17:42:52:
                    7e:a5:df:39:cd:89:18:ac:17:fe:67:30:88:51:5b:
                    96:f3:9d:da:57:1e:e9:5b:8e:e1:37:cc:cc:07:b6:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:B4:83:D1:F1:30:88:C8:B4:29:7F:BC:03:21:11:C5:AF:3B:5B
            X509v3 Authority Key Identifier:
                keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:57:59:a6:3f:a3:81:4f:d6:3c:2d:85:e2:42:ce:9e:d8:
         68:a4:d3:62:76:73:fd:41:a7:eb:4a:b3:3f:e0:b3:15:77:b7:
         02:a0:a5:61:2a:91:27:bc:96:05:cd:4f:89:1e:72:2b:61:c6:
         31:de:fd:d1:b8:bd:86:22:20:ce:5d:04:f5:f3:b6:25:91:b6:
         a0:21:83:3c:e7:7f:44:a7:f5:89:70:7e:88:44:57:8d:49:44:
         ec:1b:c8:94:ed:a5:d5:cd:e4:fc:07:9f:e5:9c:4d:f6:f4:52:
         42:4c:1a:f7:0b:01:4f:27:4c:c1:53:75:57:a2:d4:06:db:56:
         75:95:79:7c:97:ee:73:91:cd:1b:fd:fa:fe:3e:87:25:d2:b6:
         65:98:46:88:00:de:fc:ac:72:78:62:db:92:bf:0f:b8:b1:50:
         27:56:88:a7:5b:7c:69:bb:7b:ed:a1:ef:21:dc:49:57:74:79:
         c4:f5:d3:53:b6:e8:e4:30:de:70:f3:ae:87:19:2b:7a:17:f4:
         77:89:01:d8:c5:b1:6d:40:c8:60:e5:dc:ed:f1:74:8f:e5:f9:
         f5:c5:88:44:15:d4:cc:c8:42:bd:c0:e0:f8:5a:47:09:9b:6e:
         a8:6f:3e:a7:37:c0:17:c2:28:f4:13:e7:56:50:d3:17:58:b4:
         53:47:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:56 2025 by rpki-client