Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
File:                     eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json)
Hash identifier:          NYTdJ9vNzCNyzmN/RN7LD+OqvaqXbxe4Xpa6Mr8KYws=
Subject key identifier:   6A:E9:AA:91:C9:CE:CB:33:A9:81:32:A0:30:9C:25:FB:27:55:53:18
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Certificate issuer:       /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
Manifest number:          FA
Signing time:             Wed 09 Apr 2025 04:08:00 +0000
Manifest this update:     Wed 09 Apr 2025 04:07:59 +0000
Manifest next update:     Wed 16 Apr 2025 04:07:59 +0000
Files and hashes:         1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: wVd/RGchf/HA6Dtme9A3Jh432XLFECpJwaB9/l3sUWg=)
                          2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dKUIWl8erdDyFZKjf2ms5iCtc7nOGksh5tTJx3endFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
                          rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 04:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9C8
        Validity
            Not Before: Apr  9 04:07:59 2025 GMT
            Not After : Apr 16 04:07:59 2025 GMT
        Subject: CN=67f5f29f-7340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:0a:96:c7:c3:b4:45:d2:f7:0e:c5:ff:49:
                    19:2c:36:b2:4d:08:41:50:0d:e3:8a:be:df:a0:c0:
                    29:0e:a2:1f:10:75:95:20:f5:4c:07:fd:bc:f3:13:
                    ed:3a:a1:61:ae:b0:18:eb:ec:f9:33:dc:52:27:6a:
                    f9:86:4a:fd:83:21:31:cd:1c:e0:b7:ac:fa:67:53:
                    6e:17:be:70:6f:7a:25:f8:fc:a3:68:46:13:ab:c0:
                    05:86:ec:bb:14:6a:03:7b:24:bc:7c:b5:d9:61:be:
                    01:0e:00:55:a5:e7:8c:ec:6c:a3:ef:1b:23:5e:02:
                    bf:eb:d1:f3:ef:b8:51:d1:10:05:7f:a9:06:4f:bf:
                    36:dd:a7:9d:cf:57:98:1b:81:0a:c1:3e:5d:46:93:
                    44:f2:bb:ef:77:d2:4d:d3:40:eb:57:22:29:0a:40:
                    74:94:a7:32:97:b6:0c:3b:a6:9e:8c:68:0c:26:3b:
                    e1:0f:70:07:36:20:75:c9:47:5b:ca:e6:19:ad:86:
                    a1:41:9a:23:53:67:93:39:a6:9d:62:f8:e7:49:75:
                    5a:d3:93:97:31:07:64:97:57:e6:2b:58:3a:f9:8c:
                    15:e6:cb:86:68:82:36:0f:41:35:6d:29:6d:6a:2d:
                    66:16:fd:bc:5a:33:4f:a0:d6:5f:5f:51:8f:0d:80:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E9:AA:91:C9:CE:CB:33:A9:81:32:A0:30:9C:25:FB:27:55:53:18
            X509v3 Authority Key Identifier:
                keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d4:ce:d9:a5:63:67:e0:1d:60:fc:84:aa:22:28:c4:e4:63:
         38:45:1e:72:a4:67:f7:c7:5a:b2:88:af:19:b5:3a:80:6f:af:
         a0:10:99:3b:12:69:8d:e9:8c:a2:a3:f0:4e:51:f6:23:20:ce:
         06:e3:b5:31:3a:f5:fc:50:a4:86:f6:a1:aa:97:12:10:f4:71:
         54:53:4a:b9:8f:1f:83:2a:c5:2b:96:17:9d:fb:63:85:e5:ab:
         b5:53:84:b4:f4:eb:86:f8:d9:53:ac:d6:8c:cb:74:ed:72:46:
         d0:38:94:74:4f:6b:a1:19:6c:2c:6d:e5:17:0f:0d:30:6e:e2:
         2d:9d:72:4f:62:ef:e8:a4:b5:f4:36:9e:70:66:46:ea:b6:27:
         40:de:a4:31:cc:dc:af:ad:4b:bb:33:9f:04:3f:37:f1:87:7d:
         b5:9d:27:89:63:83:0a:75:fc:14:06:21:e2:cd:4d:d9:9d:00:
         07:47:f8:7a:55:04:c6:b6:40:0a:44:2a:2c:e3:f2:21:aa:ec:
         d7:08:95:df:16:37:bc:0e:10:4e:24:81:83:de:35:9f:81:f2:
         b4:bf:12:b0:2a:28:8c:7e:91:85:07:d6:8b:58:55:4c:3f:8e:
         6e:6e:28:1f:05:75:57:94:5d:d5:e7:23:8e:7b:97:90:73:b3:
         fd:ea:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:47:49 2025 by rpki-client