Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
File:                     _pB9p6f5k3mm_UY90X0ltNUB3-g.mft (raw, json)
Hash identifier:          NwXw+v+EjmGTbs6iz3Q1rQRDsd7OSa3kMTLb3BDriys=
Subject key identifier:   98:AD:F1:27:E5:1F:F1:3E:20:96:1C:F9:8D:38:BC:E3:36:ED:FA:FF
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Certificate issuer:       /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial:       07EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
Manifest number:          1414
Signing time:             Tue 08 Apr 2025 18:19:48 +0000
Manifest this update:     Tue 08 Apr 2025 18:19:47 +0000
Manifest next update:     Tue 15 Apr 2025 18:19:47 +0000
Files and hashes:         1: _pB9p6f5k3mm_UY90X0ltNUB3-g.crl (hash: mRoZ0vtu3Tq8Xh3jGF88YLEgjW1JO8uWjusZ7ssbmV0=)
                          2: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (hash: p6juw9z05JKLoRkeL5VF2fxGnmWPMirQiqcUxx8CQHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 18:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028 (0x7ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0
        Validity
            Not Before: Apr  8 18:19:47 2025 GMT
            Not After : Apr 15 18:19:47 2025 GMT
        Subject: CN=67f568c4-36f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:f6:97:34:54:86:e9:11:b5:42:07:5c:e7:
                    1f:d4:ac:84:03:62:bb:68:a7:b3:e8:2a:7b:d0:1c:
                    ef:4a:99:ef:d0:12:b5:81:49:f2:d0:fb:63:ea:f2:
                    08:01:2c:6c:55:ae:4f:93:71:a9:e7:a4:fb:c3:79:
                    78:7b:bd:90:5d:32:ec:d6:15:bd:45:1c:0d:80:c8:
                    a4:b2:30:8e:a0:04:3f:e2:b5:f9:ec:6e:19:b7:47:
                    10:2c:8b:65:3b:64:98:bc:86:2b:9d:00:65:64:a5:
                    8e:89:6d:8e:23:8a:a6:77:9e:09:20:45:75:e4:1b:
                    73:35:93:5e:d9:c7:25:e3:6a:7a:5d:d0:ff:d0:b2:
                    cf:6d:fd:bc:d2:34:75:f0:0f:e9:51:b4:a1:6f:54:
                    20:c4:06:a5:31:5a:fb:d4:f1:29:4d:4a:57:70:c5:
                    53:a1:2a:15:6e:bc:36:46:52:fc:6a:c9:c7:3e:f2:
                    fa:59:62:5f:64:4c:2a:35:02:6e:73:24:ce:ba:80:
                    bc:ae:c9:5e:8d:9b:79:e0:c4:f1:36:af:75:f6:b5:
                    9b:d9:06:8c:4d:5c:6d:e7:ac:10:5c:09:1f:70:03:
                    e9:cd:8d:9e:91:73:57:8c:0d:91:2f:80:d9:12:70:
                    9c:78:89:99:f3:b6:14:56:70:19:74:dc:12:5f:14:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AD:F1:27:E5:1F:F1:3E:20:96:1C:F9:8D:38:BC:E3:36:ED:FA:FF
            X509v3 Authority Key Identifier:
                keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:96:ce:4a:b7:33:f8:4e:dc:8e:b7:61:5f:57:4d:c9:3e:
         a8:14:7f:b9:1d:03:76:3a:84:f6:a5:6c:1a:2f:14:03:01:0c:
         5e:0c:20:32:53:e4:10:c2:ec:b1:a3:7d:d3:a4:f3:f5:f5:34:
         a3:b7:72:81:7f:ee:20:20:0d:a0:ae:fe:f5:cf:71:ed:1c:03:
         b8:58:71:ac:ad:63:be:66:41:e0:1f:af:96:b0:83:41:b5:ff:
         65:15:92:ac:d7:dc:a3:cb:e7:5d:b6:cc:35:10:97:cd:77:19:
         a1:08:47:02:e5:e7:62:47:fa:a2:1d:97:7b:71:4b:99:d1:94:
         87:c6:70:18:cd:23:5d:7f:ab:f9:fe:28:9e:6b:17:74:cc:9b:
         45:45:a6:f0:d5:73:18:73:6e:67:3f:c6:de:0a:99:f8:18:7a:
         09:08:a8:3b:ae:d2:56:45:9e:46:81:37:00:39:9f:13:8f:34:
         15:5b:2b:93:ce:d0:4e:f2:da:75:52:26:77:61:0e:f8:a5:7a:
         ab:7a:d9:c4:1e:b1:26:a7:eb:da:37:b9:dc:b7:50:28:b9:3b:
         0a:22:d3:9d:76:93:cd:9e:a8:66:b5:02:b5:52:1d:05:a8:fc:
         4f:1b:1e:e9:6f:ad:e4:fa:2f:6a:30:51:1f:5f:fa:97:da:65:
         9a:d2:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:34 2025 by rpki-client