Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File:                     zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier:          8VCaGc5vQ5zSpX1gfmfGwQa2/wShB3+AmDUcoS2zIVo=
Subject key identifier:   06:C9:15:B8:5A:31:6C:C9:DC:36:BD:9F:AB:C7:0D:8A:C5:54:9E:49
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       08A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number:          08A2
Signing time:             Fri 04 Apr 2025 20:42:37 +0000
Manifest this update:     Fri 04 Apr 2025 20:42:37 +0000
Manifest next update:     Fri 11 Apr 2025 20:42:37 +0000
Files and hashes:         1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: 3FBs9kVGuS9e3Ah/gh1VU1KeasgX32e1zgyV+kLJrqY=)
                          2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 7qPOEKIxNomgCIWc/yHC1zpaUnhuR5qP+cJAyuTEkQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
                          rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F
        Validity
            Not Before: Apr  4 20:42:37 2025 GMT
            Not After : Apr 11 20:42:37 2025 GMT
        Subject: CN=67f0443d-563f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:8e:17:7f:87:f2:21:1e:1a:29:14:74:84:
                    b6:a2:c0:5d:93:4d:3f:9f:a1:fa:77:01:d6:99:0a:
                    36:ab:49:44:bf:3c:aa:8d:53:81:5b:38:74:11:1b:
                    e2:b6:f5:53:34:2d:5c:73:7c:5a:f1:23:e8:90:94:
                    45:71:35:99:ca:3e:c3:ba:81:29:e9:70:48:50:d7:
                    61:87:fd:b7:ff:93:88:c8:07:7a:96:31:8a:a7:be:
                    b4:cf:05:df:0b:37:e4:bf:6c:cc:46:ef:10:d9:b5:
                    09:dc:73:39:19:81:0b:02:97:f5:5a:4e:b2:8e:05:
                    bb:76:29:28:35:bd:80:4d:ca:e8:2f:87:f3:3f:d1:
                    8b:be:0f:0c:e4:f5:f3:e5:74:7d:f4:a9:de:27:a0:
                    04:74:2f:a7:dd:0e:82:1f:32:f0:e1:2e:dc:24:8b:
                    87:fd:b2:a0:59:2d:14:cc:d4:23:e0:c6:b3:4d:bc:
                    79:1a:83:1e:4e:43:c8:5b:37:00:33:d7:cb:f0:75:
                    1a:d7:20:5f:b6:a6:c1:fb:f0:a4:6a:00:8a:e7:a4:
                    1d:13:02:d4:38:dd:39:e5:6a:1c:55:db:0f:ab:41:
                    02:4f:fb:4d:6a:3c:e2:ff:40:4f:5c:00:d1:f7:7a:
                    2c:12:79:79:23:ca:89:a2:1e:3c:a9:90:77:14:be:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C9:15:B8:5A:31:6C:C9:DC:36:BD:9F:AB:C7:0D:8A:C5:54:9E:49
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:3d:45:9d:be:70:37:16:27:6e:3c:5e:a8:f2:3e:5f:5c:
         09:12:7b:02:02:1f:3d:be:c6:0d:48:dd:a1:6f:c7:9e:84:c2:
         ee:b7:4e:20:4c:49:37:13:8c:57:9f:a9:14:8c:4e:a4:7c:c7:
         0a:8e:c0:46:8d:00:18:ea:4e:ec:87:f5:6c:41:03:13:b4:6b:
         74:0b:77:0d:ec:92:0f:50:13:39:14:ec:09:a0:1c:8b:04:c8:
         70:f6:37:bb:98:e6:91:61:42:f8:95:55:07:81:dc:ea:6f:98:
         c3:d9:92:f1:b0:92:38:fd:08:c8:63:be:6b:d9:9b:30:38:d9:
         36:cf:bb:33:70:6d:67:65:aa:7c:58:e3:15:c6:b3:3a:34:f0:
         d2:f9:3e:26:f9:ae:e9:f3:c8:be:2d:02:41:c1:60:4a:3b:eb:
         4b:53:86:7e:d9:26:98:23:08:fb:93:cc:26:34:a3:57:b9:f9:
         95:64:8a:d6:95:94:ec:dc:3d:9c:0d:05:1a:33:b8:da:da:0c:
         a6:bc:67:ca:32:98:a4:e2:99:42:de:3c:bd:d6:4f:45:90:31:
         af:55:58:c5:07:09:63:7a:c4:53:5e:5f:9c:2b:e5:73:e7:99:
         b0:ba:52:b6:a6:36:f3:e9:6f:62:95:e9:64:6e:28:59:4d:c2:
         77:47:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:08 2025 by rpki-client