Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File:                     MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier:          3LibXQLtAizhRrb4H81VEZ38h25vWhtoueMTOX8+93w=
Subject key identifier:   F9:14:28:C4:25:74:C0:02:93:F5:B2:89:1F:2C:D8:37:C7:9E:82:FA
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer:       /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial:       03A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number:          039B
Signing time:             Thu 03 Apr 2025 00:46:29 +0000
Manifest this update:     Thu 03 Apr 2025 00:46:29 +0000
Manifest next update:     Thu 10 Apr 2025 00:46:29 +0000
Files and hashes:         1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: MW4vX0eHbvPO8bu70/cWlgX8GorGS0TcA94jJxNa/FE=)
                          2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
                          rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E2D2
        Validity
            Not Before: Apr  3 00:46:29 2025 GMT
            Not After : Apr 10 00:46:29 2025 GMT
        Subject: CN=67edda65-8c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:5f:96:cd:3b:ac:dc:3b:b4:18:64:0c:dc:
                    1e:70:a8:60:e3:c2:22:b7:35:5c:71:0b:48:b5:3e:
                    3b:a9:6b:aa:f5:8e:73:06:98:bc:64:77:20:4a:8c:
                    08:0e:28:84:da:17:88:9e:70:2b:2a:f4:3e:f9:92:
                    0a:18:fe:78:c2:ac:8f:56:27:23:c0:84:29:ff:c4:
                    3a:15:d4:1d:50:1b:60:f3:2a:ca:cf:ba:1c:7f:14:
                    33:7f:23:1b:3c:13:88:b6:ea:1d:88:5f:a5:97:ac:
                    e6:27:6a:80:14:98:8c:e8:04:e3:15:30:5d:e3:03:
                    c3:d8:72:94:47:54:1d:bb:35:d7:40:ee:53:98:38:
                    24:b7:47:f1:da:c6:13:cb:5d:7f:fd:e7:71:61:dd:
                    70:a4:c5:85:92:68:81:81:76:21:bd:7f:27:45:c8:
                    1e:df:96:59:4a:24:44:6c:c9:5c:1b:12:87:85:e2:
                    3c:a6:62:a8:e5:16:04:0b:f5:3b:3d:ba:56:1b:dc:
                    02:c1:8f:8f:17:00:fc:75:61:bb:68:ad:7f:08:9e:
                    ae:c3:07:1e:67:33:3d:de:ea:3c:5a:07:7b:0a:4d:
                    b1:0f:58:59:72:8e:cc:20:4c:35:e0:4c:ab:37:0a:
                    46:53:1b:a8:7e:65:58:a5:48:84:79:3c:05:76:f0:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:28:C4:25:74:C0:02:93:F5:B2:89:1F:2C:D8:37:C7:9E:82:FA
            X509v3 Authority Key Identifier:
                keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:c7:97:c1:20:1e:11:2e:90:b5:70:cf:c1:85:7b:60:e8:
         e9:ab:49:6f:89:4c:d0:b3:24:94:73:84:8f:da:4c:08:71:31:
         37:7d:30:db:58:35:ad:ee:25:21:45:85:17:7e:61:35:19:2a:
         93:47:48:93:f4:9f:66:38:5e:b5:71:24:7d:55:50:0c:5c:1f:
         c7:8e:12:ae:96:be:49:32:02:c7:98:52:97:e4:8a:7d:30:9c:
         10:4c:1c:17:15:e7:51:a4:d4:14:12:7f:fe:9c:99:5e:5c:c5:
         e8:01:de:70:07:6b:6e:f6:f0:dd:48:9f:8e:c5:14:fb:c0:15:
         fe:f6:ef:1e:d8:64:25:04:70:05:c5:d9:31:1f:70:b9:7b:2a:
         e4:6a:e2:9c:b7:6c:c7:b0:4a:2c:97:73:b7:6d:b4:d7:37:47:
         2a:3f:39:0a:85:ab:55:66:ec:06:bd:de:25:f0:40:06:4a:5e:
         c3:79:9e:72:a7:14:21:46:91:75:64:1a:ed:0a:00:06:e8:90:
         9e:41:c4:5c:57:5a:82:e2:ba:c9:83:22:41:0c:c3:b8:2f:ec:
         f7:a9:ed:4d:57:6b:c4:ea:c6:8a:6c:d2:8c:01:49:f9:90:03:
         c7:dc:c9:1e:96:7c:8e:45:bb:33:e2:fc:a2:d0:73:53:c7:dd:
         c5:0c:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:37 2025 by rpki-client