Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
File:                     RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json)
Hash identifier:          la1ZdC9Xam42SSvQgvs74z3/GTci2Kc4AZ/l8S4xjnw=
Subject key identifier:   47:84:93:09:B0:A1:12:5C:50:3E:34:FD:C1:CF:A2:E6:88:84:44:1C
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Certificate issuer:       /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
Manifest number:          016D
Signing time:             Thu 17 Apr 2025 02:48:27 +0000
Manifest this update:     Thu 17 Apr 2025 02:48:27 +0000
Manifest next update:     Thu 24 Apr 2025 02:48:27 +0000
Files and hashes:         1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: hdHd/7ASZdLaDbChS+dJZW/j35g4Wqi4wPH8qRVOT3E=)
                          2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: B9rH7xYB2+kr58NYbrhUnykfNCc6xLqTbSn0D9X3q9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 02:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
        Validity
            Not Before: Apr 17 02:48:27 2025 GMT
            Not After : Apr 24 02:48:27 2025 GMT
        Subject: CN=68006bfb-28ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:19:fe:1d:dd:f6:cc:90:25:97:30:43:50:9c:
                    aa:37:80:e5:3f:d0:6e:14:47:d2:1e:74:11:4a:8a:
                    71:e6:53:68:ab:f7:20:ff:3f:7c:93:0e:2b:40:d6:
                    32:a9:18:07:a0:62:81:f4:95:43:30:a5:41:d3:15:
                    f2:d5:52:f9:a1:0a:66:20:5a:42:f7:60:dc:19:e8:
                    3d:bf:e5:85:7f:93:33:0f:de:62:8b:b4:c3:ff:12:
                    20:ed:4d:bb:0c:e7:e2:82:33:7a:99:33:53:6a:b6:
                    c2:c5:fd:7d:42:60:3b:2e:03:b1:c9:2f:88:31:16:
                    1e:82:84:97:de:62:04:6a:79:a5:da:4e:2d:ab:5a:
                    07:44:5f:67:fd:97:39:f9:5b:94:f8:23:8d:7b:98:
                    45:97:58:9e:f2:27:eb:60:d3:e1:c4:75:42:cd:7a:
                    f3:c9:9f:00:34:a9:55:5c:f4:0a:c9:6f:65:04:c2:
                    ec:51:82:49:27:c2:48:7e:82:25:91:c0:f8:06:5f:
                    9d:aa:b6:e3:19:8e:9b:c7:77:e7:74:6e:7f:b9:fd:
                    00:19:8e:a9:86:75:b9:58:cb:ae:81:8b:2c:b1:af:
                    94:be:64:f6:0a:c1:a4:aa:f3:2b:b7:c5:9f:11:e9:
                    65:0b:d2:5c:49:5e:b4:1d:0c:4f:ad:97:30:0a:c4:
                    0c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:84:93:09:B0:A1:12:5C:50:3E:34:FD:C1:CF:A2:E6:88:84:44:1C
            X509v3 Authority Key Identifier:
                keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:79:68:09:36:08:20:f2:ee:3c:b9:fe:42:64:fb:06:56:20:
         f5:97:d1:d9:37:d5:6f:02:24:d2:7c:32:50:fc:67:71:5b:4d:
         95:d3:4d:7f:dc:f5:7a:11:b3:ee:1e:94:c8:9e:ff:47:72:8b:
         fc:11:96:85:29:7a:a2:01:f9:8d:4e:16:9a:ab:3c:0c:59:f5:
         80:ab:6f:8e:8d:64:52:3a:d5:9f:2d:9c:33:14:60:d5:ad:96:
         9c:3f:8c:35:dc:5e:38:22:a1:89:f5:75:e4:24:77:e7:d3:1f:
         d2:c4:4e:d4:33:b3:4b:2f:21:7a:41:8b:7d:5f:14:50:ac:d2:
         02:c5:e0:ac:bf:cf:62:a2:02:a5:60:1d:88:05:fe:56:30:96:
         19:79:95:3e:f9:89:39:ae:46:d7:77:0a:d9:6d:c4:c7:88:fa:
         a8:0c:40:be:0b:df:c0:9e:78:0e:a1:a5:6c:7d:3c:ff:46:15:
         e8:37:6c:fe:70:0f:57:6f:a7:f3:03:73:6c:24:f8:38:f6:88:
         df:fa:69:50:39:ac:d6:ad:50:4e:3d:28:40:32:77:97:ef:e8:
         3d:a3:80:4d:4d:1f:cd:ac:bc:5b:48:77:e2:38:79:3d:05:f7:
         1e:e1:c4:36:86:6e:08:2a:30:e6:93:6d:99:89:fe:50:bb:42:
         a0:da:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:09:45 2025 by rpki-client