Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File:                     rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier:          6on1SMLEvJJof4vu+bAonLi+IZ8iXqhHfAK4i0qfBs4=
Subject key identifier:   98:EC:9E:9F:07:E2:86:08:C0:45:BA:99:DD:0C:1F:F5:06:17:1B:D7
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer:       /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial:       0579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number:          0575
Signing time:             Wed 02 Apr 2025 23:19:03 +0000
Manifest this update:     Wed 02 Apr 2025 23:19:03 +0000
Manifest next update:     Wed 09 Apr 2025 23:19:03 +0000
Files and hashes:         1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: IDCiRt39c6mp0fjGoactFSUBlVIXpZvwYPVglYS9vWQ=)
                          2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: 8hqvaN3hvlkWTiAFriU5tZiN/3ujG/aVXQcge+TLoA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
                          rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919905B
        Validity
            Not Before: Apr  2 23:19:03 2025 GMT
            Not After : Apr  9 23:19:03 2025 GMT
        Subject: CN=67edc5e7-77ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:2a:b7:5d:db:c7:5d:72:32:92:6b:27:ac:
                    e2:a3:90:50:ec:10:ed:15:94:2d:27:7f:a7:2d:f8:
                    04:bb:06:53:90:16:ed:f8:54:68:87:92:f3:cd:bf:
                    6c:da:51:da:52:83:76:cc:aa:00:17:a8:14:9c:56:
                    73:7d:e3:d6:32:4f:17:da:9e:30:9c:f1:23:5f:63:
                    f3:5c:d8:9c:e7:2e:0c:3b:8c:53:b2:9f:07:fc:b0:
                    56:84:aa:1f:20:b1:b3:ee:05:c0:94:61:88:2a:13:
                    f0:16:50:25:65:75:d1:27:a0:72:65:68:26:e9:44:
                    21:6b:12:25:e0:99:2f:33:2b:2a:9f:62:25:72:5d:
                    34:3c:39:5d:b0:0a:92:5c:13:41:85:e8:4d:21:44:
                    dc:a9:82:9e:dc:9d:c7:ca:97:ba:df:5d:44:39:fc:
                    9b:c4:7f:52:35:12:90:53:63:b6:eb:7f:25:b3:21:
                    a3:02:8e:9d:ce:c1:77:13:1a:f3:13:49:27:3c:37:
                    f9:84:c1:14:86:5c:c0:aa:3b:63:aa:4d:b2:96:34:
                    7b:52:64:8d:c0:d8:f0:fe:f7:ce:9a:59:a9:36:15:
                    72:46:0d:7f:a8:bd:bb:f1:3f:b4:d6:01:3b:7b:35:
                    7c:69:69:f5:3d:3b:4d:65:e0:26:c6:e1:b2:42:33:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EC:9E:9F:07:E2:86:08:C0:45:BA:99:DD:0C:1F:F5:06:17:1B:D7
            X509v3 Authority Key Identifier:
                keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:25:4e:a5:38:15:5e:ee:34:8d:11:6b:be:14:19:00:03:
         3b:8b:f8:b6:72:a4:58:23:22:c0:1d:d2:d4:4e:2f:96:ba:5c:
         fd:81:ee:69:6e:e4:f4:e0:21:0b:ef:b9:38:e5:49:4d:74:a9:
         52:47:91:3b:3a:b1:0e:ae:82:0b:d8:63:54:26:48:f7:09:9d:
         e1:c8:37:00:f3:ed:6e:f1:90:8b:c8:b5:73:c5:13:ad:24:6d:
         da:79:5e:bd:e0:a6:86:2c:50:e1:9f:38:c4:d0:44:5a:68:4a:
         b3:a3:78:c6:54:2d:c0:dc:62:38:dd:88:af:7e:6e:69:9f:0a:
         2a:40:fa:57:9b:91:5a:85:f9:f8:38:47:88:b5:24:ea:5f:2a:
         7d:23:df:7d:a7:5d:70:71:cf:db:25:18:0f:a5:2d:1f:7b:77:
         ac:b2:46:85:f7:09:e2:71:dc:6b:c6:10:18:66:48:0e:87:a3:
         4f:e3:9f:43:3c:e3:bf:54:9f:08:77:30:63:b4:16:1b:3d:f8:
         e1:d8:3d:cd:b1:7e:bd:b4:36:39:51:67:09:6b:57:8f:6b:08:
         28:ad:0d:9a:68:42:fb:15:16:f3:fc:d0:9d:c8:da:23:5d:b2:
         39:10:9d:6f:b2:2f:79:1f:c6:fb:7d:40:06:15:44:04:cb:63:
         f2:cd:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:33 2025 by rpki-client