Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
File:                     -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json)
Hash identifier:          pnQ0yAtC1db3DHKdXdTCTEyBEA02ujZMZt0UVBlt06A=
Subject key identifier:   18:29:68:E2:B5:25:59:4C:88:2B:6C:BE:BD:80:69:49:7A:85:37:3D
Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB
Certificate issuer:       /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
Certificate serial:       0B4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
Manifest number:          0B45
Signing time:             Fri 30 May 2025 19:20:28 +0000
Manifest this update:     Fri 30 May 2025 19:20:28 +0000
Manifest next update:     Fri 06 Jun 2025 19:20:28 +0000
Files and hashes:         1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: 7B6nvC6m6KG6gpmm/oAXA7Ct8TRnuLWA9DePbS5sWac=)
                          2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 88DAO3QlO8H0+j4IQqrGiQaCtaGiXiNDQrSD6ob+BaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2893 (0xb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
        Validity
            Not Before: May 30 19:20:28 2025 GMT
            Not After : Jun  6 19:20:28 2025 GMT
        Subject: CN=683a04fc-7ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:53:1a:21:bc:5c:7e:63:2d:09:78:1a:bb:
                    ff:52:ec:99:10:a1:25:c7:f8:e4:5a:a6:0a:c9:42:
                    87:83:a8:f0:01:e9:3c:60:d2:8f:cf:8c:4a:fb:fb:
                    5f:4f:31:db:d5:58:d0:69:01:f5:15:5d:44:f6:47:
                    e4:aa:08:65:9c:0d:4b:58:4f:03:2d:40:55:4e:81:
                    be:27:3e:fa:10:35:21:81:66:73:8d:c5:c8:a9:64:
                    ba:74:19:2c:d2:72:f1:ef:1c:36:d0:8a:48:0c:ab:
                    a4:7c:e7:4c:ee:d6:4b:60:09:12:6e:fa:9c:70:aa:
                    c2:55:24:46:14:18:ad:3b:41:25:23:b6:92:98:82:
                    29:41:a7:0d:88:3b:87:ee:70:2a:0c:4e:32:0c:0a:
                    f2:c8:52:9b:d6:3e:e5:3a:4d:21:4e:2d:a8:a6:23:
                    bc:da:62:41:93:e1:b1:47:d5:80:a2:ae:b6:67:56:
                    cb:e9:66:f1:de:23:75:51:cd:8b:bb:c4:a1:65:53:
                    af:57:e7:2f:8c:53:d5:c5:49:04:26:22:40:f1:e0:
                    72:68:7d:46:d3:99:05:8b:8a:ce:be:d5:4d:de:20:
                    6c:32:36:11:77:a2:6a:86:0c:e0:92:44:8b:10:cd:
                    e1:e5:6b:5a:40:e2:d2:7d:16:3f:62:42:1c:c1:65:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:68:E2:B5:25:59:4C:88:2B:6C:BE:BD:80:69:49:7A:85:37:3D
            X509v3 Authority Key Identifier:
                keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:1e:e8:ca:19:8b:40:50:ca:f8:c8:d2:5f:6a:a9:d5:82:
         85:c7:d0:97:39:8a:2a:70:93:20:15:26:4c:30:89:73:c3:a0:
         fa:e6:9a:3a:25:26:3a:15:47:a8:31:cb:96:8d:5f:2b:2a:59:
         95:a2:af:d5:86:26:59:2b:12:a2:5c:63:7e:0a:8d:40:a8:ca:
         40:0d:72:a1:09:a7:75:9b:86:73:52:08:c7:7a:80:0d:c3:e9:
         0f:b3:c4:71:65:5a:e6:72:59:cd:5e:bc:8a:86:16:55:30:62:
         79:48:6c:f8:b1:f3:11:0f:e3:09:ef:5f:61:9e:e3:78:db:aa:
         be:66:68:55:a6:a4:a1:92:12:ba:ce:e7:f5:dd:81:99:65:7f:
         b7:26:cb:13:23:f3:a9:77:35:c7:e4:d2:14:d8:ca:16:2a:58:
         7c:2c:53:1f:19:9e:8e:88:10:2b:cb:ff:53:96:52:17:f5:0f:
         78:31:e5:77:24:ab:aa:27:f3:eb:6c:b6:30:a7:00:a3:d2:c7:
         0e:69:32:b4:ba:84:85:5e:0e:81:b3:32:0f:2f:eb:6e:86:d8:
         51:a8:79:c3:56:19:5d:fc:ae:17:38:87:88:5d:66:9e:be:a5:
         1a:de:8c:08:ff:37:fc:98:19:b0:a8:4e:05:c7:dd:ed:4c:3a:
         4a:ae:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 14:36:45 2025 by rpki-client