Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          uBwdnh3e+AR9rGSSv0hMEA1Tw2z83hoXZNB9rqYVf/c=
Subject key identifier:   EB:85:50:15:92:B1:18:FF:2D:05:E7:01:3C:53:E3:71:53:6F:48:F2
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       26D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          26A8
Signing time:             Fri 04 Apr 2025 15:44:09 +0000
Manifest this update:     Fri 04 Apr 2025 15:44:08 +0000
Manifest next update:     Fri 11 Apr 2025 15:44:08 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: uYMWYGsac0eRhBOIjix523LTSyBZu+1M8v6VfuYj8yo=)
                          2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: h0WayUQjkIc+1k3KSDTUW0WJMm7/vM6nH4tLae6DlNo=)
                          3: A9756862B14111E5A3B46B15C4F9AE02.roa (hash: FuYmEvmcv/GUMD00P1zQM5lWXTNd1+nMlLmjGKSqeHM=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: rxGK9ShGMruxcWfCnGcDXjtTVQToBCiiwGyhhjyHhAQ=)
                          5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 0j4qXjmpQjaICT1LO2qciryz+Oskgntzqwfwnl8SXbw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9943 (0x26d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F
        Validity
            Not Before: Apr  4 15:44:08 2025 GMT
            Not After : Apr 11 15:44:08 2025 GMT
        Subject: CN=67effe49-312e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:f6:63:71:7e:5f:f0:89:4f:e8:8a:3c:4d:
                    7f:50:51:7a:16:1a:dc:e9:d9:69:db:d4:cc:70:96:
                    32:89:07:69:93:0e:27:21:33:e0:f2:7d:8a:db:60:
                    23:f1:cc:41:50:1c:b8:c4:67:ad:bf:47:ba:f4:57:
                    02:91:7b:f6:d1:5c:e2:b5:da:6c:9f:98:56:2c:57:
                    6d:e6:cb:9d:2b:ad:45:36:83:64:7f:6c:d0:26:09:
                    4f:ce:a4:e0:94:e1:31:7c:da:54:f1:56:22:09:38:
                    df:34:f8:5c:2a:a0:82:c9:a2:44:1f:71:24:fa:37:
                    e2:d3:fa:a1:99:a4:64:bf:95:fe:b1:16:29:65:69:
                    01:d4:17:4f:eb:18:f4:47:bb:98:19:f2:21:99:2e:
                    00:f2:42:30:5e:8f:d9:e6:2c:94:31:a0:88:48:d1:
                    0a:aa:d1:34:b8:bb:88:90:83:13:ed:80:ed:f8:aa:
                    d8:b0:c2:79:12:11:85:28:e9:47:d3:b6:6b:f7:18:
                    f4:95:b5:d8:12:f9:c9:6c:7a:12:1b:19:f6:e8:3c:
                    3c:c3:ae:80:00:ad:b0:4e:7a:77:b6:cf:95:b8:b2:
                    cf:0e:54:0c:a9:de:e8:9f:68:5b:9b:1b:01:97:8d:
                    c2:dd:84:67:2a:7b:23:ac:5c:75:dc:58:5a:a4:6d:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:85:50:15:92:B1:18:FF:2D:05:E7:01:3C:53:E3:71:53:6F:48:F2
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:98:d8:c1:ed:06:49:1c:3a:3d:e6:03:78:2d:55:25:9c:40:
         67:8f:8f:ea:54:7d:52:4f:fe:3f:9d:4a:7c:9c:a0:6c:f0:92:
         e6:34:c0:e9:37:af:4d:59:3b:6b:78:b0:f2:6b:ec:85:67:4f:
         08:4a:a9:12:e8:2b:2b:df:10:bc:a9:7c:e8:55:56:19:2b:56:
         fd:34:32:6b:02:53:56:00:da:0b:4b:a9:9b:61:d5:21:67:04:
         26:b7:84:19:1a:2f:08:ab:0c:9a:2f:37:46:c0:6a:04:05:df:
         71:47:a2:f4:ee:df:ab:25:69:0d:83:4a:1d:fc:12:04:60:be:
         b1:54:fc:a6:04:83:16:8a:99:5c:80:4c:0d:3a:0d:2e:9c:04:
         59:ac:a1:26:e5:5a:f6:1d:eb:c3:07:5c:2a:a5:c2:26:a1:17:
         01:6f:7d:b7:52:6b:d4:ec:09:6b:cd:d8:a8:95:db:21:6f:e3:
         fb:51:70:33:0b:3d:cc:95:06:ec:1a:9a:3b:9c:69:93:bd:12:
         24:55:8b:f1:6d:c5:17:c6:70:56:ac:21:4e:a0:b7:8b:63:c4:
         e7:19:cc:ca:39:e6:db:0f:44:85:bb:32:8c:95:1d:3d:a1:86:
         3b:51:6e:69:e6:dc:fe:33:1c:3c:9b:3e:52:68:ac:b8:3d:20:
         b4:0d:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:42:26 2025 by rpki-client