Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File:                     f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier:          q8H/VuOaMfs8STlQ9fcH/EQsNcOYHV88yn+a4ceMKjM=
Subject key identifier:   90:DF:5E:75:7C:CE:F1:2B:21:83:FC:BA:5E:C8:CB:F2:51:9F:25:99
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer:       /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number:          058E
Signing time:             Wed 12 Mar 2025 22:53:54 +0000
Manifest this update:     Wed 12 Mar 2025 22:53:53 +0000
Manifest next update:     Wed 19 Mar 2025 22:53:53 +0000
Files and hashes:         1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: ++UDYNLuCKNDe/dLEYxTN70CtxtJ6WtFeNclcXmdrkM=)
                          2: C3623470CF4611EBBBA79165C4F9AE02.roa (hash: YFp3J2bTm7IKBT6KELum1J+LO46Vc2l/xmTiNrhkS6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 22:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738
        Validity
            Not Before: Mar 12 22:53:53 2025 GMT
            Not After : Mar 19 22:53:53 2025 GMT
        Subject: CN=67d21082-2eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:eb:e7:21:95:96:5e:50:ec:fd:bf:ae:35:
                    6e:74:38:d3:f6:4b:97:80:51:0a:15:03:df:e3:2c:
                    eb:d1:d7:f5:cb:1a:dc:90:ab:cc:ca:79:4c:29:50:
                    f5:ce:72:41:04:00:55:86:d2:8d:51:8b:dc:47:44:
                    bf:4b:f0:a5:4a:e8:6d:e6:94:f1:88:fb:ad:d1:e3:
                    8b:84:f9:c5:b9:9e:22:c3:37:20:e4:8a:5f:85:01:
                    9a:7d:d7:4a:e2:5a:ae:67:3a:cb:e4:c5:50:9e:2f:
                    d4:91:70:10:89:8b:d0:02:55:6f:7f:05:18:e1:9d:
                    e3:ab:08:84:26:59:88:ac:98:ce:b5:d6:ff:34:e8:
                    78:29:0a:5d:a6:07:62:6f:8c:39:92:73:e8:b4:db:
                    57:b3:97:e6:c7:1b:dd:43:39:07:d2:84:57:c6:ef:
                    02:67:41:b7:03:51:9d:f9:04:d2:4c:72:46:b9:83:
                    2b:e2:2e:d6:24:97:26:f9:4f:47:fe:5e:8d:95:f8:
                    23:28:5e:06:55:1a:4d:50:02:d7:c3:f3:d3:31:d9:
                    0c:e8:c2:4a:d6:a9:9c:93:46:8c:21:4f:ea:a1:c7:
                    8d:f4:bc:f3:03:e3:29:4c:f7:99:71:8f:b6:3c:53:
                    b2:6e:20:1a:dd:67:ed:dc:28:a7:d2:22:da:d6:43:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DF:5E:75:7C:CE:F1:2B:21:83:FC:BA:5E:C8:CB:F2:51:9F:25:99
            X509v3 Authority Key Identifier:
                keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:cd:e4:60:29:03:43:46:c0:1e:18:54:66:43:5a:19:44:
         06:be:f4:af:db:ea:5a:99:da:f7:d6:43:9b:cc:49:30:c4:54:
         db:eb:30:36:ee:c4:ff:be:bd:17:0a:cb:df:43:19:76:c0:67:
         b9:c6:48:7e:d6:31:97:82:cb:f4:28:c7:5b:7e:3d:60:b9:c1:
         8c:c9:78:ba:4b:a6:df:5d:2f:f2:4b:45:86:a7:c5:9b:19:2f:
         53:41:b7:5e:03:e4:8b:77:0e:41:e8:af:19:a9:61:c3:f9:bd:
         75:86:fb:9a:72:bb:67:af:1a:12:c7:02:14:49:99:2a:c1:f0:
         da:1e:b9:40:88:e8:9d:43:35:17:a2:5c:90:4a:c7:c4:35:20:
         d1:d1:80:e5:d5:b2:ca:e7:3e:65:88:94:19:f0:ef:c8:94:d2:
         16:26:15:c2:13:9a:11:48:47:12:7e:ea:08:f0:b2:70:50:f8:
         f3:4e:ea:b3:ae:04:8d:4b:02:e8:ed:ba:35:36:59:97:e0:28:
         f4:4a:04:ba:76:a4:40:59:c5:ce:46:29:0c:4d:80:cb:18:1e:
         d0:9a:3b:c8:82:63:64:a2:bd:c4:4d:a5:d0:d7:31:ea:19:8a:
         31:07:88:66:10:f0:7b:dd:7f:21:d4:40:5e:01:bb:80:d4:e8:
         74:8a:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:51 2025 by rpki-client