Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          GEPhqLtvwAuEVE/HzBFscmJ2tk3PhAh2OrjUubSAODQ=
Subject key identifier:   CA:78:1A:72:9E:BE:46:DF:BB:8E:FE:59:9B:74:97:A1:6E:30:C9:96
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          A6
Signing time:             Wed 09 Apr 2025 05:00:16 +0000
Manifest this update:     Wed 09 Apr 2025 05:00:16 +0000
Manifest next update:     Wed 16 Apr 2025 05:00:15 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: t+RzAV9nQlHEcJRt8JBcjHo3G1moJDSiYk8456EgzEU=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: LydTto/QF734TxXbjD+YOeOmtAZVNFAjvOAnRG1pnYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4
        Validity
            Not Before: Apr  9 05:00:16 2025 GMT
            Not After : Apr 16 05:00:15 2025 GMT
        Subject: CN=67f5fee0-ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:c6:d9:13:83:ee:e2:21:51:5d:be:17:4d:
                    a5:0f:47:e0:ac:8b:1d:83:9f:e1:62:b4:8f:02:41:
                    dc:7f:cf:6b:a7:50:f6:14:2c:cc:09:fd:fa:43:a9:
                    26:61:c4:48:6c:8b:e1:b7:f4:71:58:6f:0c:a4:93:
                    bd:60:06:ac:e7:79:f4:55:2b:d6:0a:a7:3a:ed:26:
                    d8:8c:b6:8a:a5:26:8a:b2:34:18:27:b6:bc:f8:40:
                    72:0d:79:d3:76:43:9c:c0:3e:b0:b3:a9:ca:c4:68:
                    d7:09:17:be:51:5c:84:0b:98:33:f1:6c:f8:cf:ab:
                    c4:74:8c:7b:f4:94:dc:09:ef:a0:75:36:f6:d4:b8:
                    ba:27:87:93:9b:c4:a0:22:dd:dc:c6:79:66:17:f8:
                    fb:2b:5f:31:e8:55:53:47:8a:30:c0:3d:f0:e7:2a:
                    ec:57:85:63:bf:43:31:bc:fe:c3:74:b6:41:79:64:
                    49:ec:a5:e3:39:c3:7d:31:03:d8:bc:b3:43:af:a8:
                    cb:e6:aa:54:61:cc:4c:78:1e:92:96:37:dc:2e:4f:
                    2b:ee:7b:a0:50:6e:c8:93:88:de:ff:60:4b:88:98:
                    dd:06:e7:b8:73:74:ff:05:c0:c0:5c:b0:c6:48:bf:
                    68:4f:db:7e:ff:95:db:a6:bb:20:b0:aa:e7:5d:99:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:1A:72:9E:BE:46:DF:BB:8E:FE:59:9B:74:97:A1:6E:30:C9:96
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:76:59:ad:ed:6e:f6:b6:9b:90:ab:1b:d3:a1:e4:f8:37:eb:
         e3:c8:50:e0:bf:6c:1e:2e:3c:46:fd:19:41:44:1c:b9:04:d3:
         69:7a:d8:b3:61:4a:54:72:be:c5:44:f6:34:df:33:af:38:b0:
         07:cd:ef:76:46:17:10:f7:a2:7f:88:00:e8:f9:5f:f4:39:79:
         07:05:0f:f2:5a:85:46:8e:c9:f8:cd:0b:13:0f:70:0f:84:5f:
         6c:9d:d9:30:7e:a0:5a:95:79:5f:a3:52:79:97:bb:55:0d:10:
         29:67:5a:54:46:a1:8f:61:7c:63:98:36:c8:df:a1:e6:84:ab:
         0b:f3:d7:e1:1d:3a:17:f5:81:d3:a1:85:37:c0:c5:14:33:ae:
         09:0a:b5:3a:06:2c:73:32:9d:f3:6f:e2:36:e2:b8:71:f7:ea:
         1d:1b:50:93:f7:da:d3:c8:f9:14:ff:a7:0d:bf:30:72:5e:8c:
         56:e2:b2:22:40:89:74:e8:10:f3:6e:d9:ea:6d:f9:ef:df:e6:
         12:1d:e7:f6:01:f2:e1:6b:88:9f:37:6c:16:58:b4:ca:16:21:
         09:54:ee:e3:1e:a7:83:88:91:69:de:63:28:07:68:bc:07:68:
         c3:87:d5:91:18:17:3a:f4:0a:a9:fa:83:fe:57:e2:36:f6:a7:
         fd:c7:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:15 2025 by rpki-client