Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File:                     pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier:          zFTJpBmmspl9JqBQTivXKRd+ai0HOJ/vHTG36yEzWhk=
Subject key identifier:   8C:B4:6C:87:45:11:AB:34:11:A3:0A:4E:D7:EA:8D:FE:01:FC:EF:63
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer:       /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number:          0177
Signing time:             Thu 03 Apr 2025 03:03:58 +0000
Manifest this update:     Thu 03 Apr 2025 03:03:58 +0000
Manifest next update:     Thu 10 Apr 2025 03:03:58 +0000
Files and hashes:         1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: Ql4LPxi6ryOkl71C2riuCY/zOnbaVXCkto2houQCUz0=)
                          2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
                          rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDADE
        Validity
            Not Before: Apr  3 03:03:58 2025 GMT
            Not After : Apr 10 03:03:58 2025 GMT
        Subject: CN=67edfa9e-ed56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:c6:fb:1f:63:1c:d4:fc:45:a3:40:5a:2d:
                    41:a6:ef:27:71:42:8d:3d:53:31:75:f2:e0:6b:dd:
                    4f:a0:de:7b:89:7b:63:e5:83:1f:4b:c5:d1:4d:da:
                    ad:48:3a:23:77:ec:7a:2c:ab:fb:c4:bf:2b:dc:ae:
                    65:34:ed:fe:9b:23:57:3b:f6:bf:89:4c:5a:09:bf:
                    3a:a5:da:ce:16:c2:3b:78:a3:40:5b:9b:9d:77:54:
                    07:99:b0:9d:dd:a0:60:b5:05:7e:ce:7c:bc:b5:f1:
                    d4:f6:81:cf:bd:a4:04:f7:e4:a3:9f:fc:e1:0b:28:
                    78:27:cf:70:da:79:16:43:cf:93:c5:df:fb:1a:29:
                    8a:ed:b9:9d:58:ef:01:20:15:a7:c2:64:38:9e:d4:
                    27:b5:8b:38:1b:ec:e5:2a:c6:b2:23:09:58:c0:ec:
                    be:8e:9d:6e:86:e1:2c:1e:62:90:49:43:6d:80:84:
                    9e:97:eb:07:4f:57:52:45:ba:06:c3:dd:73:e2:65:
                    b9:cd:f6:08:e2:ba:ff:62:bd:85:5f:0a:80:2d:08:
                    24:6a:34:03:32:52:a3:ba:d9:3d:7a:92:32:cf:3c:
                    da:26:76:bc:82:a2:3d:e5:8b:94:45:ae:6c:85:50:
                    41:ca:2b:65:8f:1c:99:c7:7f:36:43:97:01:d8:e9:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B4:6C:87:45:11:AB:34:11:A3:0A:4E:D7:EA:8D:FE:01:FC:EF:63
            X509v3 Authority Key Identifier:
                keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:60:e7:c4:80:b2:fc:9a:47:3a:05:3f:bd:a1:c0:b2:23:87:
         00:72:ec:7f:ac:86:21:56:13:78:94:04:d5:db:aa:ae:01:c1:
         c1:a2:ce:74:e4:a5:17:3c:1a:dd:63:14:95:47:57:b9:bf:62:
         e6:45:64:73:7a:76:7e:d6:66:87:8c:b3:4d:3a:8a:04:03:bd:
         20:d0:c8:1b:dc:50:d6:c1:d9:25:37:5d:b2:ab:29:9b:40:76:
         d0:23:35:00:7d:45:27:25:4e:33:f8:a3:6e:91:e4:ab:9c:26:
         5f:be:1a:56:af:1c:bd:a9:10:fa:23:90:d0:b6:78:fe:10:5a:
         14:77:ff:f6:70:69:e0:24:c4:bf:2c:5d:4d:5e:f7:e0:bf:70:
         dd:f1:1b:8a:f7:22:e6:70:98:f0:0d:81:9d:88:93:53:bb:c6:
         3a:4f:9c:6c:03:22:ea:45:c2:2f:ad:12:19:93:d9:f4:e8:5e:
         3a:ee:a0:06:24:ea:e8:6a:d5:b8:25:8a:03:f1:de:52:3e:3f:
         bf:b1:96:ad:4a:f7:6d:68:cf:6b:41:d1:29:d8:16:90:3a:2d:
         fe:68:e5:44:53:60:86:5f:e7:ec:bd:6a:74:a0:fb:3d:79:03:
         ec:5d:d0:bb:53:48:25:c8:12:d4:11:23:c4:da:a3:d8:70:e1:
         d2:d8:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:37 2025 by rpki-client