Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File:                     LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier:          D14ApT7xJODVpeJUEjvf6+CReqyPn5qxf9iCeXV5Zzg=
Subject key identifier:   5F:0C:03:94:60:09:D9:57:C1:6A:F5:87:73:1C:36:D8:DD:5F:4A:AE
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer:       /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial:       0B2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number:          0AFF
Signing time:             Sun 06 Apr 2025 19:10:01 +0000
Manifest this update:     Sun 06 Apr 2025 19:10:01 +0000
Manifest next update:     Sun 13 Apr 2025 19:10:01 +0000
Files and hashes:         1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: MbQrFP/ZszH3pAsA6+Vde+ghFpMb3c3T+ohlx9JE458=)
                          2: 155B355E414311EE8E969116C4F9AE02.roa (hash: AEcrtgaYcC8nxcIlLTbTydLAoyadUjgPoburPHCFpuI=)
                          3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: ZuckVDBkHWjtjgORAisHfpeFoPo31ZjupHmSg5374TY=)
                          4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: L1V702IcrknjYj/1v+mu1+mrKPDiKzApod7Zc+hqR3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
                          rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2859 (0xb2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918919A
        Validity
            Not Before: Apr  6 19:10:01 2025 GMT
            Not After : Apr 13 19:10:01 2025 GMT
        Subject: CN=67f2d189-eec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:37:24:24:3a:ff:cc:04:f6:42:9f:e5:b0:05:
                    30:30:46:17:04:6c:7a:f5:30:3f:3e:72:ee:6b:03:
                    83:dd:1c:7e:65:f5:8c:1c:dc:dd:3f:22:37:65:43:
                    94:2a:f7:b6:71:94:80:51:49:86:28:f2:4a:6a:63:
                    9d:9f:78:2e:d8:7a:1b:b8:c6:9f:8d:89:1e:02:b0:
                    58:12:d2:01:a5:01:98:cc:f1:34:46:fb:16:82:8b:
                    88:75:f6:f6:6d:4e:37:23:27:48:ed:7e:2e:b6:62:
                    1c:d7:08:69:6b:79:52:61:d4:e2:c4:b4:29:c7:ba:
                    2c:6a:07:52:5f:ea:4a:e6:82:8b:79:7f:19:74:f4:
                    63:94:67:3f:cd:df:34:a8:ea:fc:48:a2:87:3d:85:
                    63:69:c9:fc:f4:16:0b:b7:84:c4:d5:2a:41:b0:a0:
                    8c:80:80:30:1d:2c:55:ed:90:58:fe:ac:73:03:8e:
                    57:fc:6d:40:6b:3b:57:91:8d:5e:82:59:2d:ea:21:
                    06:e5:d5:d2:97:dd:94:f5:bd:74:04:80:d6:05:2d:
                    19:9e:10:0d:e5:53:71:d9:0f:44:70:22:da:30:e9:
                    29:cf:90:5d:81:56:44:10:15:9c:e1:94:ac:f4:7e:
                    97:88:7c:21:81:80:71:ad:82:c1:7e:22:a2:41:e0:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0C:03:94:60:09:D9:57:C1:6A:F5:87:73:1C:36:D8:DD:5F:4A:AE
            X509v3 Authority Key Identifier:
                keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d8:88:96:5c:96:6d:9f:98:f9:4a:fa:a3:b1:08:5c:64:88:
         dc:bf:50:e8:d3:91:26:cb:b0:b0:2c:d7:29:4f:d9:f4:ec:81:
         91:e0:8a:51:6f:bf:64:27:55:e8:08:b1:49:a4:8b:1c:1d:eb:
         b7:c8:d7:1e:b2:a3:65:d1:24:f0:89:1e:a1:0f:3a:31:81:69:
         a8:3b:82:3c:5e:cb:33:1f:60:7e:d6:e6:84:dc:4f:19:d0:ad:
         a0:f7:1e:6c:c8:d1:8b:88:55:ae:15:c4:ea:b3:42:80:43:ca:
         0c:8c:f2:ad:81:c1:fc:28:43:4c:da:4a:78:32:89:dd:50:5a:
         29:f7:6f:d3:97:06:cc:f8:8f:f1:1d:59:9b:dc:82:d3:30:ad:
         9f:cd:10:60:90:7b:90:4c:10:c9:ae:f1:2d:d4:47:a2:10:58:
         54:c1:b3:5b:79:71:08:b4:cb:43:60:93:a3:3a:d6:66:9a:74:
         fc:4a:2d:a0:88:00:c1:ba:20:ad:b0:eb:e4:a2:c5:8c:78:d0:
         d7:aa:28:82:c3:ff:f2:7b:a6:fc:24:fd:bc:95:44:ce:7a:3a:
         e4:3b:e2:67:ad:63:3c:9a:b7:7a:ea:86:c1:b7:cf:c1:3e:00:
         b3:fc:53:af:21:9a:56:c0:81:3a:75:8a:0d:8a:db:df:a5:3e:
         8c:54:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:56:47 2025 by rpki-client