Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
File:                     dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json)
Hash identifier:          QLroGstr2ppnPc/0bNfB2hxqya58n+IF1xCUaShotwI=
Subject key identifier:   D6:46:07:62:B5:72:F9:3D:97:7F:0E:53:0E:0C:1E:DB:6F:AD:55:D1
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Certificate issuer:       /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
Manifest number:          0121
Signing time:             Sat 31 May 2025 04:20:36 +0000
Manifest this update:     Sat 31 May 2025 04:20:36 +0000
Manifest next update:     Sat 07 Jun 2025 04:20:36 +0000
Files and hashes:         1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: wYPn1FHIzW4KgFUjjtFow7m/dtpE1AHDP1ZZe+QXOO4=)
                          2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: V4QPgu3zjTh1ZjDu4R2dcCzkveFmbrdSQ5O0sl9cGCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
                          rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
        Validity
            Not Before: May 31 04:20:36 2025 GMT
            Not After : Jun  7 04:20:36 2025 GMT
        Subject: CN=683a8394-c3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:82:20:f6:9a:6c:21:a4:7d:e1:5e:ed:ab:
                    b5:9f:8c:f2:86:12:7f:30:cf:35:21:4c:f8:a2:4d:
                    9f:14:a9:e9:e5:8d:bd:6b:b8:96:a8:6d:7a:24:79:
                    ad:4d:60:3d:a6:9b:c9:cb:62:d3:e6:2e:59:60:0e:
                    f8:98:dc:6e:0f:f1:a5:6e:0a:7a:11:1d:21:20:05:
                    be:78:a9:1b:bf:85:df:69:9d:2e:a1:3b:ce:10:4f:
                    d5:db:41:10:ea:86:cc:05:76:34:43:62:2e:19:76:
                    fb:6b:9b:fc:ed:1d:ed:66:9f:8d:44:c7:ac:8e:df:
                    b8:e5:f2:f5:4b:51:87:40:9c:75:61:07:28:3e:af:
                    aa:77:10:85:02:58:8a:84:b1:d2:12:31:e8:18:60:
                    3a:6b:1c:1c:99:99:4b:6c:49:0f:96:03:e9:5b:58:
                    97:35:19:92:95:96:90:94:e9:95:60:5f:f0:ff:10:
                    e7:37:ed:73:32:79:c7:7c:ae:37:80:7e:17:ac:fe:
                    98:a1:8d:c2:f0:16:3b:7f:c0:69:c1:b9:18:68:79:
                    8f:31:46:01:66:a3:4b:a7:46:97:90:36:15:53:ce:
                    35:a0:6f:22:23:c4:c4:24:3e:60:a0:c8:0e:74:9c:
                    90:f1:6b:b3:91:42:04:f0:cc:fc:56:ba:00:a3:49:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:46:07:62:B5:72:F9:3D:97:7F:0E:53:0E:0C:1E:DB:6F:AD:55:D1
            X509v3 Authority Key Identifier:
                keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:ed:cf:e2:9f:f9:a7:44:8b:72:4b:67:94:43:b5:d2:86:
         e6:d1:4c:c9:84:ee:ee:00:a1:61:59:dc:22:91:d8:2a:e9:57:
         ab:33:32:32:ed:5e:cb:fd:d6:9f:5d:9f:fa:bd:ac:21:8b:9c:
         10:4b:4b:d1:dd:1b:dc:85:c4:b9:5c:3c:11:16:cd:57:1e:26:
         9c:6d:c4:b5:ce:20:c9:70:f1:4c:6b:8c:c0:49:64:b5:4e:89:
         b1:2a:a8:f4:d7:69:1c:4a:22:5e:f6:53:be:b4:c3:10:81:ce:
         46:9b:10:02:86:0a:42:33:83:14:2d:7f:96:c3:b1:3b:cb:7f:
         03:d7:94:ca:36:62:0c:a0:69:53:f1:f4:10:47:c2:4a:d3:f0:
         99:0f:59:f1:6a:68:1b:3e:e5:02:54:22:19:d8:94:2a:ad:03:
         8a:c9:d0:ce:86:00:6c:29:b5:d2:7b:e7:7e:3f:c2:07:d9:2a:
         64:9a:e9:15:27:8f:71:77:2e:a3:98:50:d7:4b:b2:36:72:ac:
         f3:37:63:9c:56:46:7c:c0:55:9b:49:3a:7f:e8:ff:ca:52:be:
         c3:50:fd:95:61:3a:b7:b4:15:f0:d5:be:14:4b:a4:54:07:40:
         e3:b5:8d:25:06:b5:f5:59:28:89:7a:87:d5:4d:6e:ca:49:3a:
         c6:36:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:12:59 2025 by rpki-client