Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
File:                     pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json)
Hash identifier:          g1wdP78SZ1EkmljqJpAs/WWgHtimjH4u5Ibtun9Z1+Q=
Subject key identifier:   CB:1A:47:45:1D:11:C3:09:0D:28:29:8E:54:6B:8C:39:1E:06:7F:FA
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Certificate issuer:       /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial:       047E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
Manifest number:          0476
Signing time:             Sat 31 May 2025 00:17:55 +0000
Manifest this update:     Sat 31 May 2025 00:17:54 +0000
Manifest next update:     Sat 07 Jun 2025 00:17:54 +0000
Files and hashes:         1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: 7eZwXPh3Ujh1hzYKK8iFTd14FRfsNrkPRU4j2UxOCtc=)
                          2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
                          rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B
        Validity
            Not Before: May 31 00:17:54 2025 GMT
            Not After : Jun  7 00:17:54 2025 GMT
        Subject: CN=683a4ab2-a900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:59:a3:8d:d3:1b:44:44:8d:22:8b:42:e2:
                    a4:b8:1e:9a:7a:5d:73:c2:24:67:1e:6b:7d:7c:58:
                    53:49:a2:71:1b:1b:61:0a:d7:92:8d:88:e4:c8:42:
                    bf:4b:ba:e7:05:a4:4b:85:08:d1:2c:53:d4:4b:92:
                    1a:7f:5b:33:e8:51:fb:35:13:0a:20:1d:1d:22:f0:
                    b5:ce:28:bc:fc:cf:66:8e:c0:c7:cc:ff:6e:79:c8:
                    2d:f5:83:a8:25:fe:3f:f4:b1:b3:e4:b9:50:9b:d9:
                    ab:ab:34:de:2f:c0:2f:51:4c:3b:30:2e:7e:f2:3d:
                    ce:43:5e:dc:1f:2d:08:f2:af:bc:d1:b4:21:fd:3d:
                    5c:26:4b:80:ea:a3:55:ba:26:35:0a:93:8e:4a:0c:
                    53:12:24:75:71:f7:87:f3:96:b3:db:65:0a:4d:c8:
                    4e:94:0f:19:bc:de:23:cc:9f:51:44:63:d5:6c:1b:
                    63:ce:a5:f2:c4:94:d2:90:e9:31:e3:8c:89:a5:93:
                    81:03:e6:c8:0b:98:fd:a9:ca:7b:80:28:fe:a1:d8:
                    4b:c8:c7:ec:38:77:b2:37:5a:f5:cd:b2:7f:ae:21:
                    73:13:4d:f3:28:79:b1:79:f5:80:32:96:74:04:0e:
                    c8:e5:78:f8:54:22:86:c5:1f:31:47:16:b0:ee:36:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1A:47:45:1D:11:C3:09:0D:28:29:8E:54:6B:8C:39:1E:06:7F:FA
            X509v3 Authority Key Identifier:
                keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:04:33:00:c1:14:0b:ac:fc:ad:db:c3:21:e5:e3:11:26:eb:
         5f:9a:bc:05:72:f3:bb:b2:aa:02:76:b0:c4:ec:72:0a:4a:29:
         19:7e:bf:1d:8a:ed:9e:58:67:49:92:f8:22:fa:54:67:23:40:
         77:04:ed:06:ae:c4:5e:0a:c3:f9:1f:06:aa:a3:f6:59:3d:b9:
         99:40:9e:43:c8:e0:26:76:01:a6:c6:6f:b8:a7:a4:76:cd:cc:
         e2:3c:71:b0:57:da:f9:46:4a:25:35:a9:ca:23:4c:47:ed:9f:
         4c:b6:3a:cf:ae:2a:e8:34:5a:ff:aa:28:4f:74:03:b0:3b:db:
         91:b8:af:17:97:27:6e:d9:71:cc:bf:b8:8c:ef:ee:2c:0c:79:
         11:95:01:88:0a:d1:b2:8e:c4:3e:56:5f:c7:f1:6c:85:d0:b5:
         57:ad:fb:40:3d:08:b6:c3:f4:f9:3d:c2:a1:50:ad:02:84:60:
         0b:43:4b:e5:c7:d6:c5:fb:e9:a3:73:50:c4:05:ba:43:11:c6:
         29:51:56:19:a6:d7:fc:ae:7e:da:88:03:13:ac:93:63:52:e4:
         2d:af:3a:90:75:8c:b2:8d:39:19:e7:8d:12:41:a3:42:24:cc:
         f0:0e:0f:26:e3:4b:f8:74:9e:6d:45:60:06:a0:07:85:0f:00:
         91:52:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:50:37 2025 by rpki-client