Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
File:                     n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json)
Hash identifier:          6A5CLhVrT1/eonmmIdbxUuDiehvAEN4r/zuzblq2mGM=
Subject key identifier:   AD:8C:20:13:5D:67:9F:2D:84:8D:F5:D5:D4:08:58:99:4F:2D:D7:B8
Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Certificate issuer:       /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
Manifest number:          014B
Signing time:             Sat 15 Feb 2025 05:18:56 +0000
Manifest this update:     Sat 15 Feb 2025 05:18:55 +0000
Manifest next update:     Sat 22 Feb 2025 05:18:55 +0000
Files and hashes:         1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: c26/tdRfRcT90g580mh7wgOydeVRAPYee5tkdyZ+xBU=)
                          2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
                          rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B983
        Validity
            Not Before: Feb 15 05:18:55 2025 GMT
            Not After : Feb 22 05:18:55 2025 GMT
        Subject: CN=67b023c0-293e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:65:22:a5:00:68:3d:dc:c3:f0:b6:dd:3d:
                    ca:05:30:cd:b9:df:a2:11:84:9e:d3:64:7d:ae:ea:
                    e0:cf:1e:f8:26:fa:d6:23:c4:da:20:f1:46:10:93:
                    2b:8c:24:66:e4:3f:44:b9:e5:7d:75:d9:05:4d:7e:
                    71:65:2e:57:b9:80:ed:85:f1:16:6d:ed:6b:4d:49:
                    70:08:92:a8:14:21:4b:e1:32:30:b7:ce:6e:81:bc:
                    78:12:dd:41:31:5a:f9:ec:3a:27:ee:07:d1:4a:cd:
                    90:c8:4b:72:12:bf:58:98:bb:e8:76:c2:32:47:13:
                    fb:93:fc:dc:19:47:87:a1:86:e1:f0:a7:98:70:eb:
                    d2:3c:a9:17:e5:d7:93:54:85:ae:09:b1:99:64:cd:
                    d6:b0:a2:a6:26:1a:bf:68:ff:be:a1:2a:02:71:c1:
                    f4:e8:a0:ba:37:9f:3b:52:c5:95:44:af:df:0c:75:
                    04:dd:33:60:8e:64:35:8c:e4:ef:64:13:1c:f6:04:
                    c8:e2:82:60:c5:5a:e1:dc:bd:85:43:48:77:92:c4:
                    57:bb:38:08:77:1e:57:08:00:ab:c0:f3:3d:91:ba:
                    1b:d2:cb:9e:c3:0f:9b:13:14:77:28:25:6b:05:d4:
                    cd:ac:df:1b:f6:b5:8f:87:70:df:e9:e6:7d:29:45:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:20:13:5D:67:9F:2D:84:8D:F5:D5:D4:08:58:99:4F:2D:D7:B8
            X509v3 Authority Key Identifier:
                keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:aa:5b:6f:28:70:48:b6:33:96:18:b1:a5:82:3e:a4:29:99:
         ab:7c:01:a6:49:37:f4:89:47:97:95:ee:6d:5a:d5:ff:c3:e5:
         73:99:81:45:c9:e7:36:e9:39:fd:0b:32:8e:e2:ff:cd:93:4b:
         cd:38:68:f8:48:b3:91:a5:1b:bb:96:cd:df:a4:01:64:6c:f5:
         6a:f2:5c:42:31:c2:ef:08:d7:1e:7d:08:37:91:95:94:b0:97:
         af:4e:4e:00:4e:34:ce:72:37:e4:f7:37:ee:11:fd:d5:22:8a:
         24:35:c0:06:d9:e2:92:a7:25:5d:37:56:ce:5f:13:1b:db:6a:
         8b:6d:ac:12:df:c5:5e:21:a7:54:40:a5:3e:63:a7:37:f3:35:
         71:6c:0c:d4:4f:0f:0d:93:a5:d5:e4:27:32:ae:64:ec:a8:35:
         ea:9a:f7:04:c5:db:fc:f0:29:af:5e:c9:fd:1a:33:88:2f:9d:
         3b:19:7d:a1:58:e6:da:3b:d2:5c:1a:78:d9:6c:c6:49:30:42:
         1f:76:cd:69:e6:ab:84:84:64:61:7e:73:fb:d0:65:a0:c6:a1:
         5e:96:d0:c7:62:3d:f4:a0:86:6a:e2:2a:57:0f:70:40:9b:9e:
         15:80:a3:aa:6a:2a:0d:ca:40:5f:57:3a:eb:49:82:c3:1e:02:
         be:6d:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:54 2025 by rpki-client