Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          LlVbKlnzCZD6eIpk4zh/u6kO3xhgvLsx3oPdWdfTlbQ=
Subject key identifier:   F9:A9:24:33:A2:D6:B4:F8:33:D0:D4:57:0F:FC:F5:23:E7:2B:62:E1
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          77
Signing time:             Sat 29 Mar 2025 06:06:15 +0000
Manifest this update:     Sat 29 Mar 2025 06:06:15 +0000
Manifest next update:     Sat 05 Apr 2025 06:06:15 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: bobgJpT44PdgBjjsXppZFxcRQEw8d23A4KNarQ7pr9A=)
                          2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84
        Validity
            Not Before: Mar 29 06:06:15 2025 GMT
            Not After : Apr  5 06:06:15 2025 GMT
        Subject: CN=67e78dd7-4bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:dd:4f:de:22:f3:58:7c:6c:c9:b2:5c:19:
                    14:e0:77:1b:e0:84:dd:29:48:c2:6b:d6:6a:0d:d4:
                    df:61:da:3a:32:32:23:7d:b6:02:e8:f7:13:78:3e:
                    d3:21:7b:9a:6c:8f:18:0a:93:ed:98:ee:c4:f7:c7:
                    58:0c:2b:cf:15:13:30:39:c4:bd:e6:7d:93:b7:77:
                    77:11:d8:6d:b2:35:1a:67:61:1f:90:18:8a:4a:08:
                    63:75:7e:30:d7:a1:70:e2:7a:ae:e3:a7:10:22:32:
                    f1:b1:50:7e:19:9e:37:3c:1b:78:2f:da:4b:1e:ee:
                    f1:63:ac:8f:55:3c:b7:4e:ab:68:04:22:1f:01:8c:
                    bc:a0:ac:d7:0f:0f:d2:14:aa:fa:15:6f:e3:21:8e:
                    99:6a:19:22:be:8d:a1:0b:84:0e:10:36:ea:7e:fa:
                    bc:50:34:92:4b:87:2c:c5:06:4f:1b:63:af:e0:42:
                    0f:6f:8d:32:60:fd:70:bb:0c:97:3f:1f:8e:0d:5f:
                    c1:0a:eb:7d:81:4f:49:84:6e:9a:9a:44:82:c8:b0:
                    d0:83:d1:8a:03:b1:48:11:1d:1f:c2:52:42:a1:2e:
                    48:2f:6c:b3:01:0a:a3:49:4b:70:76:c4:fe:cc:7c:
                    72:5d:f3:1b:f1:90:04:d2:f4:27:28:0a:e1:0f:8a:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A9:24:33:A2:D6:B4:F8:33:D0:D4:57:0F:FC:F5:23:E7:2B:62:E1
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:dd:0f:b7:de:e4:d7:0c:65:d9:f8:f0:5c:5c:8f:3d:bf:94:
         5f:8d:55:05:87:85:95:da:b9:1d:eb:26:9f:e2:57:3a:22:f8:
         d7:ca:50:7e:42:3f:29:77:2f:b3:c0:e6:08:7e:29:69:87:ef:
         d3:f8:ee:09:37:dc:b5:8e:ae:cd:2d:30:d6:0b:10:78:ff:cb:
         60:14:b2:2e:99:f9:b3:b8:b7:d5:89:b2:fa:88:2f:dc:f8:cf:
         10:03:00:86:c5:d2:14:c7:cf:4c:ee:5c:d6:48:29:9a:47:c1:
         16:34:ea:17:c1:46:0c:78:06:1e:4c:45:b7:26:dc:80:49:1e:
         8c:6a:7c:19:84:2c:65:e0:1b:16:b8:7f:8e:76:d3:f0:9d:af:
         4b:7d:59:3d:b7:18:ae:bf:aa:8c:68:74:cd:33:10:f8:4e:43:
         b8:1e:ef:e6:1d:67:81:90:10:be:3a:07:fb:16:32:32:d6:22:
         e5:d9:55:31:e9:1a:39:bd:43:8f:ee:6f:45:66:72:12:c4:31:
         82:50:47:97:c0:dc:b4:cd:2c:9a:32:fc:9c:69:0f:b6:4c:df:
         3c:92:c4:76:01:1c:86:dd:d0:9e:4c:02:28:22:e2:6d:ce:8a:
         d2:e3:fa:29:2c:ad:e0:bd:55:c3:28:74:73:61:24:a6:be:9c:
         7b:65:63:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:52 2025 by rpki-client