Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          lLOGJ+DjQkcCBZMMTTEa43BZPhTVk4zln9EeGtHxk4k=
Subject key identifier:   29:11:EC:B3:5E:CC:25:DB:62:6F:01:B0:90:34:7A:AB:59:48:98:F0
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       34DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          34AD
Signing time:             Sat 31 May 2025 14:24:55 +0000
Manifest this update:     Sat 31 May 2025 14:24:54 +0000
Manifest next update:     Sat 07 Jun 2025 14:24:54 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: bPV+98qjkWvzqIHpc/CjNemLrtoK2UvM3h94dUKPglI=)
                          2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: 3Bh09Zn6mFO5Oea9UBod6MtwVZcXpjm+mtSvhM63HUc=)
                          3: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: MBOQQXrS4Z//4O5DV7gxUdMmCgnG/RaWUrumSPw5Cnk=)
                          4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: +z4up47sitnxc0BGzrLhea39B00Ir9hVkkzOMtz9tBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13534 (0x34de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: May 31 14:24:54 2025 GMT
            Not After : Jun  7 14:24:54 2025 GMT
        Subject: CN=683b1137-c8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ad:8b:3a:28:bf:8f:1d:26:d5:53:78:c3:0e:
                    86:dd:24:63:2b:41:74:de:3c:76:92:a2:5b:2e:aa:
                    91:cb:f3:ea:3e:8c:22:80:4a:95:0b:e8:16:20:d2:
                    2d:29:ed:c8:8f:53:de:bd:54:67:92:75:60:95:b9:
                    7b:c2:0e:57:2c:f2:1a:25:6f:0e:04:15:bf:66:cb:
                    1f:81:18:d1:14:0f:61:ca:e3:67:5e:d2:e1:c7:23:
                    56:f1:b0:cc:a8:db:b2:28:4c:3f:95:19:db:4a:35:
                    ef:d5:2b:66:c5:05:16:06:ab:c7:22:72:f7:97:9b:
                    07:7f:42:ad:7c:fc:59:2b:a2:63:08:7f:b3:36:4e:
                    2d:f4:3f:88:c9:06:3c:ee:1a:b1:96:c8:92:af:e4:
                    d8:d6:f7:22:d1:6a:27:cf:eb:2f:b1:05:64:46:81:
                    73:94:a4:6a:f2:d8:40:8a:77:d7:ea:59:fa:00:2d:
                    09:67:f8:4f:cc:c3:ac:29:29:c0:f0:98:12:6a:9b:
                    78:28:c3:46:a4:15:be:4a:79:fe:1c:c5:c8:ca:a0:
                    ac:30:5b:07:a2:1b:3d:16:26:bc:ab:23:7a:2e:0e:
                    d9:5e:63:e5:ea:24:49:c5:50:ef:9d:a4:4d:c0:aa:
                    83:28:09:95:16:95:35:b2:30:cd:d6:75:36:0a:eb:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:11:EC:B3:5E:CC:25:DB:62:6F:01:B0:90:34:7A:AB:59:48:98:F0
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ad:86:67:dd:98:76:a2:a8:41:e2:f5:c2:3d:61:04:2d:f6:
         e3:19:96:ea:ae:b6:f4:b6:c6:fc:e8:53:4b:88:52:c5:4e:c0:
         68:c9:85:1f:05:de:1d:47:39:5e:0a:0f:95:86:0b:00:8b:00:
         f1:5b:a9:6a:82:0b:cd:b5:72:89:f6:3b:f1:e6:c3:b7:48:3f:
         6a:41:09:63:ff:d3:17:4c:90:c7:15:a0:00:bc:51:71:f8:97:
         ed:0e:27:54:bf:bb:8d:33:30:d5:aa:1d:14:95:2e:13:5c:85:
         fb:e0:56:5d:1e:5b:e7:75:4c:46:dd:76:d9:d4:54:c1:99:52:
         e3:27:3d:a7:4c:99:2d:81:fb:4a:32:72:1a:68:5e:1b:c8:2b:
         53:e5:2b:74:3e:f9:31:fc:35:b6:03:f6:84:15:24:ea:2b:58:
         9e:47:29:68:71:61:d0:ca:af:51:02:52:e7:1b:12:d2:82:3f:
         35:3f:b2:dc:c2:d0:5d:1c:bd:cd:e3:93:cd:14:29:5b:97:11:
         4b:78:93:96:6f:29:61:28:c5:fd:0e:5e:8a:a0:55:06:bc:fa:
         11:ae:19:eb:2d:67:03:e6:04:c3:8e:cc:5e:01:0a:2d:75:40:
         6d:96:56:ec:18:43:92:0a:f8:70:7f:b9:0e:e3:a7:f9:83:93:
         c3:84:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:20:33 2025 by rpki-client