Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
File:                     SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json)
Hash identifier:          qtgztGsB2OuG4HCx3sGfi9hwV8mw93CAtLXsiVyA1gc=
Subject key identifier:   F4:85:AA:EB:14:36:38:DF:18:50:33:75:FB:7C:7A:20:4B:0B:B1:4C
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0E15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
Manifest number:          0E02
Signing time:             Wed 04 Jun 2025 17:50:18 +0000
Manifest this update:     Wed 04 Jun 2025 17:50:17 +0000
Manifest next update:     Wed 11 Jun 2025 17:50:17 +0000
Files and hashes:         1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: v7dD1LYYmuzvyUbbd7q9R8+IQfWJ3rqIiGSyuYaYr6w=)
                          2: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: 2EnIkr0/gsvRkYf/SxISa/9Htz1MjVAylB0K+VzHnAg=)
                          3: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: xZ2PaQGP+pBdXoQTbN4GGQzo/uue2dUnNcJgd+re/CQ=)
                          4: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: v08vXt7jzTRjmDEH2KncOmJlrZfrtUnDKy7ksFpJeHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 17:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3605 (0xe15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Jun  4 17:50:17 2025 GMT
            Not After : Jun 11 17:50:17 2025 GMT
        Subject: CN=6840875a-e3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:da:f2:1c:0f:1e:80:d7:27:18:e7:91:45:
                    1e:29:22:3d:5b:eb:11:45:21:da:37:bf:9b:9e:74:
                    c8:46:9e:b3:9c:1b:3a:00:30:cd:0a:e8:e4:c3:9d:
                    61:8a:b0:56:67:14:85:f0:77:e2:7a:b4:e3:d6:d2:
                    3e:e2:f6:a9:4b:82:96:b9:f2:6d:67:df:61:d5:39:
                    6d:c1:79:40:5f:8e:ea:3e:67:9d:fb:3e:0c:a4:71:
                    88:a3:48:3d:c3:77:e3:24:6a:c7:73:33:e4:ef:a0:
                    d5:79:75:f8:83:83:93:f6:73:7f:6b:8c:d8:29:db:
                    02:ec:3d:6f:21:96:32:fd:4f:f8:1a:a5:44:db:6a:
                    67:b7:ad:26:e9:05:8a:9b:95:d5:51:1b:fd:09:40:
                    5e:8a:4b:17:33:03:ab:50:b7:f4:16:1e:a2:ae:62:
                    3e:49:ab:2c:3a:06:76:91:b7:2b:56:6c:86:04:5f:
                    1b:af:f1:55:03:58:4b:0d:10:b9:fb:31:d4:f1:97:
                    24:8a:51:5e:30:ad:0c:b0:25:47:20:71:d9:2b:a4:
                    41:ea:87:54:a6:f6:62:f8:b5:28:e1:c0:e7:7a:c3:
                    9d:70:aa:1a:6f:a0:18:74:19:86:9d:89:fe:e3:b0:
                    eb:d7:36:ac:de:86:15:8e:f6:46:41:2f:84:4a:26:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:85:AA:EB:14:36:38:DF:18:50:33:75:FB:7C:7A:20:4B:0B:B1:4C
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:63:12:0f:f3:0d:b7:70:77:f5:9a:bd:a3:c9:fc:f7:ed:37:
         4a:63:fa:29:dc:0c:c3:ba:d7:2a:29:c2:f9:df:a8:ef:42:f1:
         67:01:32:8f:c2:e8:b4:29:3c:3f:3a:15:40:4c:1c:72:2f:4f:
         ea:e3:8b:df:cc:04:b8:d4:d3:8a:56:ff:1a:55:8b:11:22:b2:
         d5:0b:62:5f:21:43:a9:72:78:a4:73:54:8d:5d:c7:b9:37:1e:
         a2:83:8d:62:a6:c0:25:ba:ea:fb:07:c2:05:82:20:cf:5f:63:
         ef:dd:3c:75:fe:28:42:0f:02:63:97:16:6d:95:61:75:d9:70:
         69:da:e0:53:93:d5:a4:47:38:76:78:24:4f:ba:2f:32:95:e6:
         32:99:dd:8e:eb:ca:89:45:6d:2d:f1:86:4a:17:5b:02:e1:af:
         3a:90:a8:bf:a0:d2:1e:c2:c2:26:a5:8e:ad:f2:7e:7a:05:06:
         7f:f5:c2:b1:26:e1:68:e5:6e:88:dd:43:cc:76:05:ee:08:a4:
         07:01:e2:50:22:64:9a:4b:5f:30:39:64:ef:e3:53:ea:00:18:
         ea:7f:2b:e2:03:2f:f9:51:bd:8c:49:b1:05:41:f1:6c:58:01:
         c9:b5:e3:e2:6b:1d:cb:2b:56:1b:e3:29:94:59:9c:60:8f:2a:
         7e:d3:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:40 2025 by rpki-client