Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
File:                     _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json)
Hash identifier:          nJY0c7mbkBRjblGedywX593SJMkcCDgd2uGh5P6LnK0=
Subject key identifier:   2D:00:EA:8D:5E:B2:BB:32:3E:5A:EE:70:BD:11:C0:DC:75:68:8F:9B
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Certificate issuer:       /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
Manifest number:          017E
Signing time:             Wed 09 Apr 2025 03:19:24 +0000
Manifest this update:     Wed 09 Apr 2025 03:19:24 +0000
Manifest next update:     Wed 16 Apr 2025 03:19:24 +0000
Files and hashes:         1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: LMeUPv5Qv5Ci/fNFGMSRpJBL+6Kjs+6b+J+LSTxn2JQ=)
                          2: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: JOQ3FTCOYnFyVjIC1sbOokkZryNT0nxy6ytkaThHIoc=)
                          3: C724415E35F911EE9F140449C4F9AE02.roa (hash: Pc8IQ1ldo5iSgY4Srlo9JYYY24JrbIJTNy/Hk8PPyVE=)
                          4: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: U9cevaQb64/vV8AH9HQirRbkVBcH0enCs25PMnDjBWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
                          rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 03:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D53
        Validity
            Not Before: Apr  9 03:19:24 2025 GMT
            Not After : Apr 16 03:19:24 2025 GMT
        Subject: CN=67f5e73c-d8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:8d:56:e7:62:3d:ba:d1:b2:b1:e6:eb:8e:
                    b4:bd:d1:4a:13:38:37:b1:60:fd:2c:af:9f:96:4b:
                    af:77:43:e5:d1:d7:5d:49:2b:4e:8f:12:5d:c1:04:
                    95:bf:e1:56:5d:fa:5e:59:27:32:7a:71:e0:75:3f:
                    45:71:55:75:91:9b:f9:10:7c:f8:00:b1:5e:df:f7:
                    02:20:51:e0:02:e8:e9:0c:ca:ac:3b:74:72:52:5e:
                    91:74:6b:c1:fa:39:d3:19:70:17:54:bb:a3:8d:a9:
                    d3:79:cf:33:21:4f:ad:90:d0:64:99:86:c1:af:53:
                    53:27:21:65:07:dc:86:a1:cb:e7:ae:9c:ef:20:15:
                    bd:9c:e0:4d:5e:9b:09:8e:56:04:8c:b8:80:32:d1:
                    e0:47:6e:e3:40:6e:a5:a9:57:9e:cb:11:c4:ee:b1:
                    1c:6e:9c:98:2e:e3:20:f8:f1:7b:14:c2:8d:fe:93:
                    65:c1:d7:9a:38:62:c0:92:85:56:a4:68:22:6d:b5:
                    aa:a3:e4:b5:2d:4b:44:37:15:12:d8:2a:d8:3b:24:
                    96:78:8a:76:81:24:02:54:25:3d:c9:aa:2b:f7:4b:
                    b2:b7:65:69:3f:f0:67:1e:d1:15:23:a5:4a:bf:75:
                    aa:3d:1e:34:7a:c3:3d:af:e3:52:58:2c:44:6c:a4:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:EA:8D:5E:B2:BB:32:3E:5A:EE:70:BD:11:C0:DC:75:68:8F:9B
            X509v3 Authority Key Identifier:
                keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:a0:15:dc:c4:9e:13:e4:cf:78:79:6f:e8:12:6f:b3:fc:
         41:09:8b:6f:74:27:fa:ab:8d:fa:0e:d2:10:b0:f1:f2:d1:ad:
         26:0e:c9:a3:ef:ee:4d:fb:5c:b1:f0:b5:8e:8b:ca:e3:97:a9:
         e3:3c:37:52:2f:90:63:64:21:42:0a:57:7a:9b:a8:fc:fc:d4:
         2f:99:77:af:f3:aa:33:d1:c6:df:7f:84:a3:6d:20:97:0c:83:
         78:a5:14:41:9d:fa:68:d5:3f:ea:55:5e:44:b0:7c:79:b0:ab:
         42:30:47:ce:64:02:c6:ed:3d:41:b9:47:3a:cc:65:f6:1d:cf:
         01:3f:5b:dd:2d:ef:9f:48:c0:f7:c9:cc:04:13:b6:75:10:a5:
         1f:63:04:f5:98:4f:cc:6a:c7:b9:12:05:e8:5d:04:57:01:2d:
         60:30:1a:5b:eb:c2:c8:76:b3:f6:81:2a:48:62:9f:f6:b5:d3:
         30:30:3a:9e:1f:88:62:fb:e1:c9:3d:5a:be:45:42:3b:ab:d3:
         a6:9d:3a:e1:74:29:49:87:f3:60:ec:8e:5f:df:a2:1b:a1:02:
         26:82:a3:3a:d5:83:c6:37:29:d9:cd:5a:5f:2f:db:aa:79:75:
         74:fc:ba:e4:10:85:01:f6:71:d4:48:54:16:b7:ca:87:89:8a:
         c2:1f:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:48:03 2025 by rpki-client