Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
File:                     zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json)
Hash identifier:          RfEilc6kLb6q7vkzIt47C9MKmJEXK5yFYDMOWsuyVnU=
Subject key identifier:   E8:5E:DF:BF:DD:F2:4C:50:80:EA:5A:6D:9D:D5:3A:29:CB:9A:E7:6C
Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
Certificate issuer:       /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
Manifest number:          01A4
Signing time:             Wed 09 Apr 2025 02:19:34 +0000
Manifest this update:     Wed 09 Apr 2025 02:19:33 +0000
Manifest next update:     Wed 16 Apr 2025 02:19:33 +0000
Files and hashes:         1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: zO7ezVb74IAM3FZgn+USsXAWEcwvpKUz1YJt7+G7Cu0=)
                          2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: wW1wDfapN4aqyKsyA7zutue+89v5koktR+64VobzRks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 02:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C12
        Validity
            Not Before: Apr  9 02:19:33 2025 GMT
            Not After : Apr 16 02:19:33 2025 GMT
        Subject: CN=67f5d936-ad7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:58:c7:e0:9c:a4:08:f3:f6:98:2d:da:8a:
                    aa:2a:5f:ec:d8:42:16:56:e8:68:c3:66:f6:fa:8c:
                    63:36:fc:3c:d0:ab:ed:7d:91:21:1f:bd:7e:03:c9:
                    87:60:ba:c8:5b:64:d8:81:7e:7b:82:d5:7f:7d:e7:
                    f1:cf:44:2b:af:df:35:7c:cb:5a:72:4c:94:7c:df:
                    02:4f:ec:8e:f1:75:8a:81:f2:65:30:16:e5:35:9c:
                    20:36:2e:fa:59:ea:3f:93:d5:b6:e0:a7:fa:37:7d:
                    c1:03:2c:29:4d:c1:77:ed:40:be:69:d1:c3:ce:ee:
                    2c:96:58:74:20:68:fe:a0:88:2a:b2:5c:01:42:5a:
                    42:fa:e7:b7:3d:34:62:9e:9d:4c:4a:6f:3e:e8:56:
                    4d:f0:90:47:30:6c:91:e2:73:43:ed:94:93:fc:5b:
                    a7:e9:d4:4a:d6:5b:c1:07:d1:b0:83:45:8c:7b:82:
                    e1:04:78:35:4c:8c:80:49:a6:38:07:54:1b:10:e5:
                    e3:ec:af:ca:02:5e:ef:c3:8d:ee:38:df:f1:c8:18:
                    ac:56:56:3d:5b:5e:15:cb:2c:b0:b8:4d:5e:5b:88:
                    10:af:db:33:ed:a2:bc:81:5a:45:b2:85:38:51:57:
                    9e:9b:ce:70:d2:e7:bf:73:6d:48:ad:6d:08:88:20:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:DF:BF:DD:F2:4C:50:80:EA:5A:6D:9D:D5:3A:29:CB:9A:E7:6C
            X509v3 Authority Key Identifier:
                keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:af:82:9f:1b:d7:ae:22:91:65:54:56:42:8b:99:77:5c:43:
         36:09:fc:03:a6:41:6c:f4:4e:3f:e7:00:e3:0e:ac:91:fc:6f:
         39:75:dd:b8:70:73:f1:00:d5:ef:18:64:9d:c0:e7:1e:e7:e6:
         cf:e3:65:ff:4e:f3:0d:f3:a1:84:41:c7:df:68:5f:9b:2a:57:
         7e:38:10:0c:ae:ba:38:ab:e8:2c:06:63:08:e1:0b:0e:5b:7a:
         f6:98:b3:ef:ec:1e:aa:2f:c4:73:ab:10:43:5b:50:e5:ef:be:
         eb:0e:17:3d:6a:7b:c5:40:89:26:52:9a:67:78:d6:d2:65:16:
         53:24:37:ec:6d:5d:c6:65:17:9f:5c:36:22:8f:c9:a6:ec:98:
         b8:7b:86:66:38:f4:13:15:b5:c6:ba:23:7f:5d:6d:61:91:17:
         e8:0d:05:88:9e:0b:f7:1b:02:23:47:f6:21:07:f0:f5:10:f0:
         1c:8c:55:eb:1d:3e:ea:de:35:d1:7f:9c:3b:e1:a5:86:80:3a:
         2b:77:71:26:02:54:25:3c:5b:03:9a:19:62:2a:35:b7:b9:3a:
         3b:3e:43:30:60:31:25:fe:78:10:1a:8a:4d:71:95:b9:73:1b:
         6b:b7:25:38:8b:e8:8d:bd:7f:ea:51:5f:f8:6d:7c:bf:5e:a9:
         05:76:bc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:00:20 2025 by rpki-client