Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File:                     Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier:          RF8SIKRDWzxFRbBCjrxAOp/YA7AZU95+HvOvVhIMvN8=
Subject key identifier:   59:1A:49:B8:76:E1:08:4A:08:04:7E:FB:24:C2:3D:B8:69:6E:D6:A8
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0C2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number:          0C26
Signing time:             Fri 30 May 2025 18:43:45 +0000
Manifest this update:     Fri 30 May 2025 18:43:45 +0000
Manifest next update:     Fri 06 Jun 2025 18:43:45 +0000
Files and hashes:         1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: +hQOw4G8vsSbiRjwB/gD+gtubkKHsRjSEQN8+cjkv7s=)
                          2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: /6LQIDdmV3dE7MeUvHilah4V60fZn+m3/u3zkX+mGFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3115 (0xc2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: May 30 18:43:45 2025 GMT
            Not After : Jun  6 18:43:45 2025 GMT
        Subject: CN=6839fc61-f3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:c9:96:da:5d:ab:a3:51:7c:78:48:af:a5:
                    f8:e9:c6:8b:55:42:b7:17:f1:5f:87:34:12:b8:2a:
                    1c:50:42:92:12:59:00:6a:a7:d5:04:91:a1:7d:36:
                    89:db:e6:52:40:be:90:f1:ea:98:b8:22:b8:01:3e:
                    fe:b6:95:a5:9e:dd:10:a0:22:db:3a:07:17:42:52:
                    de:f5:78:c0:64:85:af:55:50:17:be:31:68:2f:ca:
                    d5:29:4b:4d:9f:7f:db:26:c7:5a:48:0b:ba:89:8b:
                    ee:cb:ed:82:99:0c:42:28:bc:51:b6:b0:78:5f:17:
                    65:be:a3:3b:37:12:8d:fb:9a:30:5f:f7:8c:7d:e6:
                    13:be:ec:6d:ab:f9:94:4e:77:4f:74:c5:44:5a:d8:
                    3a:8b:7d:06:be:24:95:b6:4b:ef:6f:29:d6:51:cc:
                    e5:24:6a:9c:64:f0:bc:1b:31:de:3a:2d:0f:1e:c8:
                    b8:45:7b:91:fc:e3:87:2b:ed:05:df:97:39:9a:f0:
                    d1:0a:16:d9:3b:85:70:b3:fd:e4:39:26:3f:a1:d1:
                    2b:5a:6e:bf:50:0b:33:48:04:4b:d2:14:60:bf:61:
                    9d:5c:01:07:f1:2a:43:04:3b:20:4e:cc:cb:9d:1b:
                    2b:f1:60:4b:e3:cb:23:a2:dc:b2:0a:57:d7:7c:a7:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:49:B8:76:E1:08:4A:08:04:7E:FB:24:C2:3D:B8:69:6E:D6:A8
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:fc:75:dc:b2:d0:64:70:b4:22:55:86:33:2f:56:5f:b8:
         30:36:ba:59:d3:a1:d7:e3:6c:5e:a9:2a:c2:52:a0:71:18:44:
         ac:05:be:8b:cd:11:31:db:4b:e1:11:22:18:2b:82:bd:6d:f3:
         4c:33:91:b4:77:5c:36:18:b7:05:03:ea:8f:69:e4:59:f5:b5:
         55:05:cf:5a:0f:52:e1:a8:9b:06:a1:03:98:1d:c4:ec:55:a6:
         ae:c9:f1:c6:dd:c7:0a:17:a2:64:9d:ab:30:76:8f:79:8c:bb:
         d2:23:77:e7:2e:c0:b9:7d:22:c9:31:d5:db:bf:62:03:33:3a:
         7d:64:2c:d3:d6:3a:e6:0d:95:41:b9:10:ed:d1:72:4f:de:d8:
         98:3f:6d:83:72:a8:c2:64:58:16:33:aa:b3:ed:e2:40:e8:a7:
         3b:3e:eb:14:41:be:c4:ca:1f:81:d9:bd:27:af:1c:af:10:f5:
         bd:ec:19:8d:bc:48:c0:e5:b2:02:03:ec:87:60:b4:f9:4b:d4:
         bb:2e:af:0b:33:f5:c2:da:20:68:8f:c4:fa:cf:77:2c:f9:32:
         d4:bf:86:a2:1d:d1:42:a9:e9:b6:9b:ea:7b:91:27:be:2b:bf:
         7f:dd:4f:84:32:be:33:4f:a3:86:92:87:16:3f:22:74:47:1a:
         8c:ed:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:07:36 2025 by rpki-client