Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
File:                     -W0Mybs5WKCpxugXNpm4JO7o8uc.mft (raw, json)
Hash identifier:          20OZzA2LggyOW15GnM+oRZD5uIzA81Agrx4Bae/H0RE=
Subject key identifier:   BB:40:B6:B2:19:73:64:EE:3A:05:9F:99:F9:0D:BE:EF:1D:ED:7C:77
Authority key identifier: F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7
Certificate issuer:       /CN=A919278E/serialNumber=F96D0CC9BB3958A0A9C6E8173699B824EEE8F2E7
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
Manifest number:          AC
Signing time:             Sat 29 Mar 2025 05:26:24 +0000
Manifest this update:     Sat 29 Mar 2025 05:26:23 +0000
Manifest next update:     Sat 05 Apr 2025 05:26:23 +0000
Files and hashes:         1: -W0Mybs5WKCpxugXNpm4JO7o8uc.crl (hash: vcU5fdviGq5wVCjz5c959xToxliD+TezjKLjp+dOFZI=)
                          2: 0374374A032711EFB14B6574C4F9AE02.roa (hash: BtnRBnA3v32xEqmbcRSb2EVrNROX9uJIBOBEUOiyHhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl
                          rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919278E
        Validity
            Not Before: Mar 29 05:26:23 2025 GMT
            Not After : Apr  5 05:26:23 2025 GMT
        Subject: CN=67e78480-0a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:2d:a7:5b:5c:c6:63:dd:da:e1:84:c2:0a:
                    4e:8a:e4:a7:bb:0f:ce:ea:ea:10:3d:81:5d:42:70:
                    17:a0:6e:06:09:df:6e:fc:4a:0f:89:c5:be:ee:90:
                    ea:11:66:b3:31:8b:0c:a0:f0:ac:55:a2:54:99:69:
                    80:3b:3a:02:cd:9d:44:d2:5e:32:f7:ba:85:f2:e6:
                    e6:6a:60:05:56:c1:45:bf:9b:2a:04:16:b8:e3:f5:
                    96:78:54:e3:92:6e:06:4d:fe:44:bc:53:49:5d:ac:
                    07:c1:63:59:3b:bb:3c:94:7c:2f:5f:8c:13:41:c5:
                    80:e7:73:50:f9:6a:ae:1c:2c:5b:ee:52:8f:57:08:
                    ba:bb:ae:da:48:d0:09:79:b5:26:be:1a:75:a9:d9:
                    08:41:c4:ab:e9:2b:ef:10:79:3d:de:43:24:fb:90:
                    03:40:8b:6a:a9:a4:0f:1d:f0:ad:e3:c4:fa:b0:b1:
                    b6:93:d6:d4:cd:69:c0:87:b1:7f:fa:f1:3f:97:b8:
                    be:d9:5f:25:20:3c:4d:b2:d7:af:68:f8:ee:e1:13:
                    7e:55:ab:49:e2:4f:bb:ee:17:c8:39:ae:f4:13:09:
                    63:de:fd:ff:f0:65:65:0d:d1:f9:51:4c:16:5c:bb:
                    e0:68:4f:74:6c:02:76:7c:06:5f:8f:74:ca:50:e0:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:40:B6:B2:19:73:64:EE:3A:05:9F:99:F9:0D:BE:EF:1D:ED:7C:77
            X509v3 Authority Key Identifier:
                keyid:F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:20:32:11:9d:20:8f:20:a4:f8:18:d4:0c:7f:db:55:7a:a9:
         2e:22:b7:30:8e:c8:1b:07:a2:bb:46:ba:f3:c7:5c:cd:2a:33:
         0c:37:9c:bd:1a:07:60:75:7e:8f:7d:f0:fd:23:0f:4e:49:3a:
         4a:59:17:0a:98:a2:56:0e:1d:c2:19:93:a4:ac:42:f2:73:61:
         61:85:9f:f0:af:21:93:1a:72:99:f1:e3:8d:b5:06:88:c7:24:
         24:d9:5a:6b:0b:2c:75:2e:19:d2:9e:cc:6e:c7:50:7a:2b:25:
         cc:46:9e:f4:67:43:9d:56:fb:74:23:e2:38:c6:36:3c:47:3e:
         6a:cb:76:3b:67:a5:39:14:f2:4d:c6:72:92:7a:f2:bc:f9:5d:
         fd:73:b7:01:2a:dd:10:24:5d:30:55:5d:bb:f2:fe:b9:44:9b:
         e0:be:6c:53:04:f3:a6:e2:69:6e:b3:ea:1e:83:24:2a:5e:66:
         14:5f:0c:69:6d:28:92:0e:c6:17:60:ba:dd:27:71:01:ab:df:
         fa:20:e2:ee:05:df:09:78:b2:79:c2:80:a0:0c:13:d3:b4:88:
         2c:91:d4:77:f1:a8:24:2b:46:f0:6f:65:a7:c2:d4:3d:95:a7:
         7e:4e:c2:77:79:f6:03:92:96:aa:54:0c:dc:2c:25:ab:53:9a:
         05:0f:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:10 2025 by rpki-client