Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          BHyqzX7u7YYTdVsie62sfZLWBlJf5gHmBXHHMle1htE=
Subject key identifier:   D8:5D:A4:12:50:E5:13:D6:50:2D:99:64:C1:3E:92:C4:29:3B:7E:84
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          0119
Signing time:             Sat 31 May 2025 04:28:31 +0000
Manifest this update:     Sat 31 May 2025 04:28:31 +0000
Manifest next update:     Sat 07 Jun 2025 04:28:31 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: CywYQNVvj6ElFW4o/snS+j3HoiVkzQMNYoQgT/6xyjI=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: Fl6atygIAOnJfBaO72/s6xAJoCMVco87/j+JtQku3zQ=)
                          3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: Fm2GFDeckTvyapLgYWUd+q+9ZGt0Kt0IDFuGxReJTVw=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: kWW5cRDXuhjkk+iiH/wUKjwNBV8vRl665o5zsQhUdP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: May 31 04:28:31 2025 GMT
            Not After : Jun  7 04:28:31 2025 GMT
        Subject: CN=683a856f-92a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:a9:97:d9:40:95:58:7f:36:e0:29:7b:8a:
                    85:19:a2:e1:cf:69:4a:a1:27:62:f8:39:b4:20:da:
                    fe:a6:4e:85:df:79:23:c9:62:8e:44:24:a3:fe:a9:
                    f5:99:10:0e:c3:2d:da:6b:2e:96:1f:a9:ed:cc:46:
                    ff:8f:f8:02:95:13:08:9a:01:b4:1e:95:43:9c:2f:
                    72:21:9f:98:e5:14:66:5e:ae:f8:88:54:5e:42:86:
                    b8:3c:15:12:fe:da:4d:72:81:7b:33:bc:08:e8:3d:
                    68:11:64:60:f5:b1:e8:59:b4:e2:c1:89:c2:2a:99:
                    02:cc:c7:d6:31:15:0f:ce:f2:d1:e9:4d:60:05:73:
                    75:fe:39:44:74:83:dd:4f:11:0e:a3:6a:a9:c3:cd:
                    f3:73:cd:01:6a:32:d7:94:6d:02:29:17:9c:27:c1:
                    c9:8a:c9:f7:46:e7:73:37:01:8b:ab:3f:29:0d:45:
                    47:c9:df:e3:8b:60:dc:e3:14:e5:00:fe:8b:d9:d6:
                    7f:63:ef:8b:61:c9:e1:6f:12:a7:95:7a:98:f8:a6:
                    75:b8:70:31:d3:a6:50:1e:51:3c:63:fa:87:8b:46:
                    1f:48:32:f5:05:53:fc:fb:87:cc:6d:06:ef:01:6d:
                    7e:4f:82:74:b3:bd:d7:3f:5e:f0:8b:4d:f9:9d:a2:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5D:A4:12:50:E5:13:D6:50:2D:99:64:C1:3E:92:C4:29:3B:7E:84
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:7e:8b:b9:a9:5f:63:d7:ee:b2:25:5b:14:3f:d0:35:bb:2f:
         ab:e7:6b:46:42:09:da:81:a1:a3:71:e9:43:a6:e8:d9:5a:2b:
         83:1e:15:1b:37:14:27:ec:8c:44:af:4c:8f:e1:30:73:95:9a:
         09:c3:56:c4:e1:0b:58:ee:d9:89:f1:37:17:a7:e4:22:55:bc:
         80:ed:86:35:1b:2d:85:cf:ec:1f:27:ce:14:75:ae:52:72:92:
         f4:fa:ed:65:d2:bf:58:77:e0:94:35:c3:2a:5e:e3:84:ae:ea:
         2f:06:b2:82:f4:37:bc:21:15:9c:af:ee:e4:95:4a:89:c5:3d:
         a4:81:01:8e:eb:31:7e:a4:9d:be:cd:6f:2d:e6:85:b9:a0:82:
         39:49:29:b8:e6:48:b0:ca:87:14:e7:1d:3c:51:4b:25:49:41:
         1b:cb:fd:2f:c3:0a:32:a6:56:c5:4f:a2:ba:7a:98:99:0e:8a:
         66:83:bc:35:b3:5e:b0:b3:33:e6:10:76:92:9b:8e:1d:11:6a:
         1e:d2:4f:e1:7f:73:14:88:a4:c9:a1:71:6f:ba:91:d6:6b:fb:
         e6:d6:1c:ad:c8:50:91:a9:86:1f:dd:a4:d2:bd:77:c7:77:62:
         ee:5b:ee:70:56:89:12:05:a8:c9:1c:18:f2:df:89:df:f7:7e:
         3b:a6:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:20:40 2025 by rpki-client