Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
File:                     19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json)
Hash identifier:          AL5M9JbJGpx1K9ZR79IP1UHGveVzq18UhaZhT7DqoOE=
Subject key identifier:   E9:19:8C:90:70:BC:AC:12:DB:5C:F0:79:5B:08:A5:CC:79:95:90:D6
Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
Certificate issuer:       /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Certificate serial:       0497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
Manifest number:          0491
Signing time:             Sat 05 Apr 2025 00:05:23 +0000
Manifest this update:     Sat 05 Apr 2025 00:05:22 +0000
Manifest next update:     Sat 12 Apr 2025 00:05:22 +0000
Files and hashes:         1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: ZJffr85C8Iv7y0m1n2oT20DnWCn6MDjadDLQtv4aQ0I=)
                          2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: mvkJO23Rhne3EOWrAQ2tX8d2RfjeSAd4lU2tWfhmNuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl
                          rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A0B8
        Validity
            Not Before: Apr  5 00:05:22 2025 GMT
            Not After : Apr 12 00:05:22 2025 GMT
        Subject: CN=67f073c2-a858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:54:a3:0a:1c:54:b0:66:d1:51:be:0a:ae:
                    aa:61:cf:cc:70:90:1d:c0:b6:e0:d7:f3:4a:6b:fc:
                    2b:ee:f5:59:2c:56:01:36:ed:3e:80:cc:b2:a3:1e:
                    1f:17:cc:07:2d:35:d1:78:8e:43:97:ad:d9:5f:9e:
                    32:8c:d7:00:b6:ec:3a:7a:c3:0b:f0:d8:c3:2c:fa:
                    d3:09:02:d9:dc:e2:e5:c5:8f:0d:02:98:bc:b6:bc:
                    4d:f5:ba:7f:0b:59:74:a6:9a:f0:60:6e:14:4a:4d:
                    7f:45:83:97:c2:91:29:a4:b3:ec:62:11:b7:28:e0:
                    a1:8e:a7:5d:cb:1d:0d:65:e6:af:c0:0e:8e:68:73:
                    2a:c4:76:0f:3a:1c:c5:28:bd:a1:f9:c3:d8:d9:65:
                    36:ee:40:32:bd:6f:6f:d9:24:5f:c7:34:10:cf:61:
                    b7:c3:c0:32:bf:b5:02:95:81:b5:11:8e:cf:56:85:
                    89:ad:c3:3b:63:a1:ec:4b:58:1d:21:23:10:8b:d3:
                    e3:d3:fc:c5:56:9b:50:8e:fb:b8:5d:ca:5e:3c:bf:
                    25:b3:67:e9:40:73:37:f2:76:9a:bf:27:b7:20:e2:
                    4c:82:9e:2f:9f:5d:24:76:4d:7f:86:18:be:89:fc:
                    89:5f:7e:27:11:34:64:ae:1e:23:d9:63:14:32:f8:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:19:8C:90:70:BC:AC:12:DB:5C:F0:79:5B:08:A5:CC:79:95:90:D6
            X509v3 Authority Key Identifier:
                keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:23:24:b2:3c:d2:91:11:d2:fc:fd:18:87:63:d2:06:6f:f5:
         30:8c:be:16:32:20:35:97:f5:80:02:0c:9e:2b:23:2c:5b:a8:
         2c:71:7d:19:6c:a2:bb:3d:72:71:14:0b:52:2d:79:7c:03:6f:
         bd:e7:b4:2e:15:07:85:20:65:6b:a3:3d:d9:8e:3a:9d:65:d7:
         33:d7:5e:15:25:92:5d:0f:b5:79:99:55:13:8f:4e:dd:1f:33:
         ba:1b:16:5e:5c:0e:29:ca:2f:99:df:5f:df:e4:a2:8f:04:b5:
         07:3c:06:d6:7f:76:7f:44:1f:05:15:1f:64:58:05:ee:8a:5d:
         8c:25:42:56:98:ed:91:cf:ea:43:06:4b:f9:78:70:7c:19:94:
         52:5c:79:0b:af:5c:7d:e6:09:37:6d:80:a6:28:16:95:ee:cb:
         b9:59:f4:f0:81:0a:78:2b:14:90:74:84:41:83:ca:af:a5:d7:
         1c:35:5f:b6:81:df:47:c6:4c:5d:71:60:f9:83:7f:8c:87:ec:
         be:0f:44:18:e1:ff:25:ef:23:fe:9f:f2:e5:86:a5:c2:40:f1:
         ed:ce:0d:e7:42:da:a3:88:4d:cb:7a:b6:a4:5e:f1:74:47:64:
         16:a7:8b:6f:84:e9:d3:07:22:e7:b7:18:8f:51:93:aa:f9:fb:
         3a:c2:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:29:03 2025 by rpki-client