Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft
File:                     dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft (raw, json)
Hash identifier:          y4LbYxf9WeduJQM8fVVBgeufv5kXOGzswodsfosYKYE=
Subject key identifier:   D1:3A:51:27:B0:6D:76:46:28:BE:2F:28:50:64:50:98:3F:DA:A2:46
Authority key identifier: 76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D
Certificate issuer:       /CN=A9147526/serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft
Manifest number:          0406
Signing time:             Sat 31 May 2025 00:39:08 +0000
Manifest this update:     Sat 31 May 2025 00:39:08 +0000
Manifest next update:     Sat 07 Jun 2025 00:39:07 +0000
Files and hashes:         1: dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl (hash: 4aUM/bS+xBGg8vEDdiy5JoLeqgQ5QtNQl3cMwS1sqRg=)
                          2: 2F376110652C11EFAEB1C656C4F9AE02.roa (hash: TDsvXPVTUh2c2MCiO7qt4FlDRRZ1fxaO2mLnsBigZ0k=)
                          3: 81A1363E652B11EF8DDDB555C4F9AE02.roa (hash: PLhk6N75GMzt0LCkeHhTZXOpHSNV9ZRgMrQ7j9F01Js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl
                          rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147526, serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D
        Validity
            Not Before: May 31 00:39:08 2025 GMT
            Not After : Jun  7 00:39:07 2025 GMT
        Subject: CN=683a4fac-a359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:dd:4a:66:e8:7b:91:d8:65:6c:48:99:e5:
                    7b:f7:81:66:97:f7:40:42:25:eb:08:1f:c7:12:2b:
                    a1:d9:51:c9:eb:d1:7c:d3:b6:56:a3:8f:65:c4:0f:
                    64:39:6b:ec:8f:a8:fb:26:bf:f9:51:39:2a:3a:ec:
                    f8:83:63:fe:b8:7e:6f:a6:26:2b:7d:e7:36:c0:15:
                    af:2a:53:89:a9:e5:12:30:9c:fa:92:80:c4:48:e6:
                    46:58:54:77:a1:bc:f5:ce:97:0e:ce:79:ae:96:79:
                    47:61:1d:2b:eb:a7:19:13:d5:13:b4:8f:4b:d4:a2:
                    f6:02:4d:d4:ac:c4:60:27:f9:48:37:b3:05:56:31:
                    00:ad:61:2e:29:b4:e5:15:e0:a9:35:db:9f:95:37:
                    78:18:10:9b:d3:57:f9:50:fe:3c:36:24:5b:0a:6f:
                    c9:f9:24:7c:34:23:c4:e3:da:c4:fe:ae:92:ff:35:
                    bb:f6:ba:63:ea:91:b5:6a:a2:ef:a8:f3:36:e5:ff:
                    22:a7:6a:d2:98:1c:b9:35:10:ef:52:01:ae:5b:6d:
                    64:2e:ba:02:e1:d3:87:04:36:82:fc:35:1b:0d:a5:
                    a9:fe:5e:2a:0d:09:e7:36:06:22:df:43:67:1b:32:
                    a1:c5:5c:5b:c5:89:92:35:8f:6c:e2:cc:c3:22:2c:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3A:51:27:B0:6D:76:46:28:BE:2F:28:50:64:50:98:3F:DA:A2:46
            X509v3 Authority Key Identifier:
                keyid:76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:4f:44:71:9b:f2:7b:4b:c4:ac:ef:e2:93:0a:7f:25:da:
         3f:a3:e9:39:7e:29:72:6f:9a:f3:a3:e4:13:e8:17:28:9b:8d:
         71:87:62:f5:a6:39:ad:04:de:e1:b9:dd:13:45:91:61:bc:83:
         a0:1b:b4:fa:58:ad:e4:0c:c2:fc:1d:3e:2c:f5:8c:fc:1f:14:
         49:61:96:85:e6:8b:b8:c5:0a:09:91:90:2c:4d:14:02:f5:64:
         0b:a2:71:51:9b:95:dc:ee:65:e2:c4:b9:74:57:7a:b7:ea:b7:
         08:08:d0:fc:b4:fe:01:aa:a7:0e:24:86:c8:f7:b6:5a:a6:df:
         f1:72:f9:5a:2b:5d:50:d5:8a:d5:53:ab:e4:f1:3d:43:a2:1c:
         b6:79:ef:17:d1:c5:5b:f3:6b:5d:47:9f:57:e6:84:bd:74:f8:
         cf:c3:9f:16:d7:15:43:5d:e1:93:a6:b9:4c:9d:76:fe:46:94:
         b1:54:69:90:69:81:36:27:bb:00:cb:a0:d6:80:b2:a2:91:18:
         cc:79:1a:79:33:b6:05:a3:07:45:f9:32:24:c2:67:7b:7a:4a:
         53:f0:33:95:e1:bc:3a:0c:f1:b9:0e:2b:c0:c7:09:c2:ef:71:
         8b:fb:6b:42:6a:c9:78:d0:4f:0e:3d:7d:63:07:c9:48:32:48:
         ec:47:ea:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:32:49 2025 by rpki-client