Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
File:                     45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json)
Hash identifier:          SpU/cCaQLnRpfN7sA/BYOY8xMSuLzreoqxK/4RluzRA=
Subject key identifier:   A7:3A:64:3A:2E:EC:85:87:F6:0A:33:1C:EE:95:50:03:1A:FA:D9:81
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Certificate issuer:       /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
Manifest number:          01FF
Signing time:             Thu 03 Apr 2025 02:05:08 +0000
Manifest this update:     Thu 03 Apr 2025 02:05:07 +0000
Manifest next update:     Thu 10 Apr 2025 02:05:07 +0000
Files and hashes:         1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: wMjMQct2rKqc97Yk7Ultjg1IeB+AWX19fyNuWH9QpzA=)
                          2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: AAAVj2EMvSyDPVucy4o+cELW9sLjgfDByGDLTaDK5pQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C73
        Validity
            Not Before: Apr  3 02:05:07 2025 GMT
            Not After : Apr 10 02:05:07 2025 GMT
        Subject: CN=67edecd3-20f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:04:2e:09:00:a3:59:ae:bd:1e:ce:7e:aa:
                    8e:8e:6c:29:03:d2:98:8f:d5:d6:e4:26:d4:b9:0e:
                    ce:b6:d9:a7:72:67:cd:21:0f:7e:35:3f:c6:6e:58:
                    1b:0d:31:ce:51:42:6c:b3:af:c7:56:d9:56:e9:2e:
                    80:db:03:b1:fa:47:d2:1d:6d:59:0e:0d:58:35:01:
                    78:c3:05:83:35:bb:4b:3a:ee:8a:12:b1:05:b7:14:
                    c4:7c:4b:24:5b:ce:a1:62:0b:1c:5b:d4:6b:33:38:
                    5a:54:67:70:47:eb:04:fb:0e:d4:1e:be:00:f2:a7:
                    61:30:a0:f9:40:de:18:8a:30:9e:e9:6c:97:75:64:
                    4f:5f:3e:f0:e1:b5:ea:d5:6a:af:7f:59:3a:05:22:
                    ae:d2:d6:00:10:98:87:99:cc:92:12:1d:63:ee:54:
                    a0:c9:47:ef:8e:f5:50:41:87:87:cc:ed:d8:90:d7:
                    bf:e8:7c:e8:d0:36:8b:55:1e:7c:65:4b:ab:de:06:
                    d1:30:c8:b0:9f:57:43:eb:fd:4f:37:fa:7e:b4:37:
                    73:de:f6:72:d9:25:90:7b:5e:0d:bd:2e:6a:2e:ac:
                    e9:bf:20:7f:18:08:54:75:03:a0:7c:d8:a5:5f:2b:
                    e5:19:d3:f6:43:52:82:9a:cc:8c:ce:0d:1b:78:fa:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:64:3A:2E:EC:85:87:F6:0A:33:1C:EE:95:50:03:1A:FA:D9:81
            X509v3 Authority Key Identifier:
                keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:af:a1:55:16:29:4f:43:e6:d4:eb:f0:53:8f:f0:3b:26:14:
         7f:74:8e:b1:cd:79:4a:e5:a2:9f:0e:2a:5f:9d:c9:28:b5:13:
         56:6f:9a:23:f5:0a:a4:d8:e9:a2:03:aa:70:02:f1:23:42:d5:
         af:e5:e7:3c:04:3c:9d:e4:fe:0c:73:67:0e:46:19:ca:67:80:
         ce:24:a1:08:cc:c3:f6:8d:07:d3:18:f2:ca:d1:c4:73:b8:49:
         50:5d:42:ae:c9:80:1f:3a:f2:73:19:9c:68:92:8a:19:6c:da:
         20:86:d2:02:8f:48:71:60:a5:c2:fa:2d:32:23:86:e4:c1:2e:
         34:65:65:9b:76:0c:46:2f:8a:d7:1f:ed:dc:e0:08:18:82:c5:
         c8:a9:ed:e1:ee:bd:c0:43:78:84:2a:18:37:95:df:09:cc:0e:
         11:d6:18:e6:38:63:24:0c:eb:bf:85:97:2f:28:4f:63:db:d8:
         2c:60:f8:49:45:b2:ad:f3:e1:a3:f6:0d:f1:2c:cd:ee:69:4d:
         4f:3d:ba:7a:09:70:2e:8b:94:9f:10:db:b9:3f:fe:34:11:50:
         20:e6:3b:fe:6a:73:aa:1f:9f:d0:1c:3b:66:bb:27:01:ea:9e:
         ab:69:1c:a0:88:15:28:3f:5d:97:6e:b4:e5:f5:a7:23:0c:75:
         0f:b0:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:47 2025 by rpki-client