Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File:                     fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier:          4odaJN6XkxJ8uOKXH4NY5Z1KkcUqdzfOkndNug6VyW4=
Subject key identifier:   B4:6E:97:C2:79:6F:FF:2D:E5:54:CA:E7:3E:5E:48:DC:15:27:A5:02
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer:       /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial:       2356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number:          2335
Signing time:             Sat 12 Apr 2025 15:47:32 +0000
Manifest this update:     Sat 12 Apr 2025 15:47:32 +0000
Manifest next update:     Sat 19 Apr 2025 15:47:32 +0000
Files and hashes:         1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: FsMu0o/QfMIuwOFTblB5ZE82/fXJR0RG4+lwdZMZW3k=)
                          2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
                          rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 15:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9046 (0x2356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
        Validity
            Not Before: Apr 12 15:47:32 2025 GMT
            Not After : Apr 19 15:47:32 2025 GMT
        Subject: CN=67fa8b14-4d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:8c:73:88:d7:a2:4f:a4:12:4a:ab:1b:a7:
                    a4:02:dc:0a:06:8e:f9:4a:90:01:71:29:0f:fa:a5:
                    66:84:b5:0d:5a:74:76:1e:04:cf:20:dd:58:d9:77:
                    54:9f:3e:9e:93:5b:3f:06:3e:43:8e:4c:46:97:99:
                    45:88:10:27:7f:65:92:3b:b6:e1:c8:d1:e4:19:05:
                    45:4e:de:ce:9f:0b:5a:b1:01:f7:ab:28:c0:30:18:
                    81:1a:4f:f4:f8:69:da:7a:36:09:94:b5:f1:0b:f6:
                    be:bd:a6:1c:f9:14:fd:68:55:ff:02:62:7b:17:d1:
                    5c:73:5a:86:65:67:68:6d:0a:e7:85:20:af:6b:85:
                    b4:2c:e3:bb:63:0e:c7:66:da:79:28:d8:38:c5:6c:
                    91:dc:b2:de:01:39:e9:9d:b6:77:2a:20:a2:93:2e:
                    25:08:5a:36:07:f9:d0:85:b6:2a:f6:f3:a3:67:48:
                    00:fe:5f:58:bb:82:72:4f:1d:d3:d3:c4:3e:37:ef:
                    4e:ec:0a:f6:c2:96:cd:31:bb:62:12:55:14:67:6d:
                    1b:5f:52:56:29:5a:00:01:8e:2d:3b:43:30:46:c0:
                    dd:bf:98:8f:3b:4f:db:26:dc:ed:6b:7a:3e:42:14:
                    66:f0:62:2a:84:53:1d:df:3d:8d:86:0c:89:86:41:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6E:97:C2:79:6F:FF:2D:E5:54:CA:E7:3E:5E:48:DC:15:27:A5:02
            X509v3 Authority Key Identifier:
                keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f3:9b:37:c7:39:25:89:4f:d9:d9:c7:c0:12:4c:ff:bc:dd:
         56:6d:ae:65:b2:6b:a4:01:51:58:e5:4d:35:57:73:7e:1f:51:
         39:c1:86:63:91:da:81:b5:da:27:87:9e:db:8c:97:30:01:69:
         03:89:50:89:10:a1:ae:70:f5:dd:86:c4:7e:46:4a:30:74:96:
         a0:50:70:7d:98:2b:6b:20:92:92:01:a6:63:1c:67:cb:81:ea:
         2e:5d:c4:65:3a:55:63:9e:1a:22:d5:be:93:93:dc:8c:8e:3a:
         b3:bd:1c:d6:55:65:ab:76:ab:c5:75:0f:e2:ee:89:8e:0f:66:
         5a:0f:a6:d7:2e:fd:c4:2b:6e:b7:08:a0:ad:6c:ae:70:a7:54:
         31:dd:1b:8b:42:34:16:39:06:a4:5b:0c:58:fc:57:08:0b:d6:
         96:bf:43:c4:7c:14:d9:75:99:c0:7b:cc:8b:3b:86:bd:71:73:
         a2:f4:04:f1:da:1a:f8:a4:64:32:d9:02:d9:01:70:16:a0:64:
         56:54:18:cf:f0:c8:38:70:0f:31:3e:00:a5:64:68:76:9a:7d:
         a6:2b:8e:3e:7f:05:c9:8b:51:32:41:a5:2a:a6:a2:61:be:18:
         ef:70:32:40:b0:ad:2b:d5:e7:2f:93:69:72:45:39:e9:5c:4f:
         ff:3f:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:21 2025 by rpki-client