Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
File:                     Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft (raw, json)
Hash identifier:          antloMGA3ptQoNVdzl9wf9wNQ6+qAZeTQIpAnesbSuo=
Subject key identifier:   04:F1:88:28:23:60:D3:AF:82:1C:68:D5:4F:2F:8D:E1:34:F2:1F:8C
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Certificate issuer:       /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
Manifest number:          049D
Signing time:             Wed 16 Apr 2025 23:39:54 +0000
Manifest this update:     Wed 16 Apr 2025 23:39:54 +0000
Manifest next update:     Wed 23 Apr 2025 23:39:54 +0000
Files and hashes:         1: Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl (hash: 5hS3Lg6UMOangum0h8lyhzsmdw63EVlz/p5cP18ayps=)
                          2: 200E2B0059A011EC83255663C4F9AE02.roa (hash: /R9JZ26EKIRVQE7fNMtoVyMx8zlmWtOsK2Jrv8Lzto4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
                          rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 23:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919495D, serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
        Validity
            Not Before: Apr 16 23:39:54 2025 GMT
            Not After : Apr 23 23:39:54 2025 GMT
        Subject: CN=68003fca-842a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:c4:a1:49:b0:b5:28:94:db:ce:a7:34:b7:
                    8e:40:c9:61:17:4a:97:61:7b:fc:2b:21:e2:a4:6e:
                    dc:a6:15:7e:74:b2:a6:e6:1c:d4:e8:da:86:34:fa:
                    a6:45:20:f9:1f:24:4a:88:18:f4:77:c1:64:fc:2c:
                    40:06:4f:cb:b3:0b:e0:b9:9f:c4:9e:91:41:18:a2:
                    7c:bf:54:e3:bd:ba:07:25:06:8c:a5:a9:88:29:f7:
                    cd:54:5e:60:88:64:f1:1b:6d:ef:bd:44:35:4e:bd:
                    a7:00:1a:b7:2a:44:c2:7b:ad:ed:20:79:78:fb:bb:
                    5f:f3:1f:2f:48:a1:60:35:a0:f7:bb:af:d1:8f:62:
                    cd:8b:23:fb:bb:26:2b:9c:1f:2b:37:8b:f5:53:d3:
                    6c:44:ba:51:fc:56:ad:52:52:53:e7:a1:4c:06:84:
                    d8:46:f9:7f:26:14:2d:f9:94:81:15:72:5b:18:c9:
                    ac:64:fe:07:f6:d2:7b:3a:60:74:d2:c6:30:ab:81:
                    d6:87:40:e0:c2:65:13:69:ae:5a:97:12:0d:c8:ec:
                    eb:bc:b4:53:4e:02:6b:73:3d:3e:98:cc:43:ef:02:
                    b7:2a:bb:ef:65:d9:c2:26:e1:b2:2d:f8:36:7e:3c:
                    22:b9:6a:31:58:b8:2b:00:25:2f:a7:ad:5f:56:6f:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F1:88:28:23:60:D3:AF:82:1C:68:D5:4F:2F:8D:E1:34:F2:1F:8C
            X509v3 Authority Key Identifier:
                keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:a2:26:5e:f2:b4:60:e4:5f:0b:72:f5:f4:7b:89:39:2d:
         0e:12:ea:e0:38:d1:db:9e:a7:22:ba:78:5f:e5:1f:50:67:dc:
         ee:37:1b:35:7e:4d:cc:35:37:82:8e:ec:4c:ba:09:5f:10:43:
         e8:be:e7:8a:a1:8c:43:17:6d:50:2d:b0:e4:86:95:b6:44:96:
         eb:ce:85:36:3c:64:5b:6d:c2:63:17:7e:d8:dd:8f:0b:ee:59:
         51:da:e6:e1:37:c2:04:39:9e:43:81:f3:39:fa:60:15:23:25:
         03:3b:7f:8a:bc:62:81:12:75:9a:69:8c:1d:bc:3f:22:73:6f:
         9c:f6:01:7a:d9:7d:56:c9:db:f9:3e:ee:66:30:2f:b2:b2:a2:
         3b:36:c0:ef:c9:2f:57:2c:ec:dc:c3:de:60:13:24:87:d2:d8:
         59:bb:71:ff:f9:5d:76:31:c2:f4:05:08:cd:e6:e2:2f:08:9b:
         49:30:d5:ab:d0:33:3b:ba:1f:22:58:8f:3d:77:f5:71:5b:8f:
         90:5e:ed:8e:8f:6c:36:2a:b0:08:db:e1:6d:aa:ac:04:dd:99:
         80:ec:bc:ce:d7:8c:f7:a5:82:0a:ec:e7:1b:09:51:10:f1:0b:
         ca:d7:23:a4:a0:8b:d6:65:a2:98:78:d0:f8:d1:fb:78:c7:ef:
         8a:b1:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:25:58 2025 by rpki-client