Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File:                     nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier:          S9QSe4I93RDwynlEx5DMz4dGCb64C538kauIC9sG9c0=
Subject key identifier:   E7:7C:75:88:3C:2D:CB:F0:53:F4:5D:35:82:4C:4D:53:F9:09:66:16
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer:       /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number:          071E
Signing time:             Wed 12 Mar 2025 21:28:33 +0000
Manifest this update:     Wed 12 Mar 2025 21:28:33 +0000
Manifest next update:     Wed 19 Mar 2025 21:28:33 +0000
Files and hashes:         1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: okaIqHSsmVijpu4ujgxpRt1z8BhcBpEd/zbE5bAS500=)
                          2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: jIN2PY6GWYE7IvHCsXUW4P6OWa+fFCSoJx89CCKLLFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
                          rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 21:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130683
        Validity
            Not Before: Mar 12 21:28:33 2025 GMT
            Not After : Mar 19 21:28:33 2025 GMT
        Subject: CN=67d1fc81-a330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:1f:0e:df:6a:4f:dc:15:99:35:74:10:2b:
                    96:e4:2f:65:59:f4:da:bf:d8:ce:7f:7b:ef:bb:01:
                    31:bc:7d:05:a7:b9:73:c4:5e:25:7a:51:37:06:2b:
                    90:fb:43:f8:47:9a:28:2b:35:82:bc:41:df:c8:5d:
                    91:a0:94:7d:35:0a:7e:3f:6d:f9:95:f0:d5:3c:7b:
                    5b:4c:55:9e:37:be:27:ce:f4:95:ac:15:ef:71:e9:
                    da:7c:e5:76:a5:8e:b2:e4:9f:45:92:b6:f4:35:06:
                    2c:da:69:4b:58:47:82:76:21:d6:8e:48:67:0f:f9:
                    3b:38:32:22:93:f1:b3:32:4c:c8:fc:a0:41:34:2b:
                    0f:33:72:81:4b:19:ae:a4:44:17:f1:a2:57:48:ce:
                    73:c4:3a:5b:2d:dd:b6:2c:5c:92:09:bc:b7:c8:36:
                    6c:97:19:cb:ad:99:de:6b:ca:e2:12:19:f5:f2:8f:
                    a4:5d:02:93:b0:31:bc:d8:1b:57:7b:1f:f0:59:f1:
                    0f:2f:0e:1b:b0:3e:82:7e:fd:1d:cd:09:03:3a:91:
                    3e:38:73:59:40:38:94:d4:30:59:cb:92:6a:39:df:
                    f3:57:06:0b:aa:3d:73:f1:b1:88:d9:9d:b5:61:7a:
                    f5:27:aa:f4:50:ae:2b:1a:79:80:a6:02:42:f6:1e:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7C:75:88:3C:2D:CB:F0:53:F4:5D:35:82:4C:4D:53:F9:09:66:16
            X509v3 Authority Key Identifier:
                keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:e4:af:95:be:9d:79:2a:8c:fe:d6:44:49:20:51:69:ec:
         4b:92:22:b6:98:23:9a:bc:be:59:d0:33:fd:49:13:02:62:a8:
         d9:1c:55:e3:22:06:20:0c:93:c8:e2:05:2d:c7:ba:cd:5f:d9:
         42:aa:d6:94:70:3c:71:d4:93:ee:42:3e:b4:18:ed:c3:5a:06:
         00:f8:fe:9d:8d:13:26:ad:42:a3:b8:c5:3e:64:e2:12:a2:1f:
         ee:9e:56:02:49:07:42:25:e8:34:5b:18:4a:0c:6c:bb:6c:6c:
         3f:4a:d7:4e:b2:e1:f2:d7:d2:c1:02:dc:1e:97:29:bd:6f:20:
         9f:5f:03:4a:66:07:37:44:e3:ca:23:7d:26:27:6e:22:9f:be:
         62:4e:c0:73:dd:58:40:90:6a:22:14:49:d8:78:c7:9b:61:10:
         9b:ae:f3:cf:5e:1e:68:e4:f6:68:85:fd:ae:79:ab:3b:0b:4c:
         ff:d5:55:9c:b9:95:de:37:6a:f9:06:51:75:6c:9b:43:ff:3f:
         63:96:b0:62:9d:d8:cf:70:26:64:a9:e0:c9:37:76:90:70:66:
         0d:96:da:63:67:1e:8e:0b:fc:91:28:a6:7c:20:83:08:67:88:
         df:a6:b3:c8:c5:63:67:5a:a8:8a:2c:4e:bd:81:fc:b1:a9:3f:
         c0:33:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:56 2025 by rpki-client