Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
File:                     t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json)
Hash identifier:          SzQqcEwr07fRQyj77gqLmREUf9i+JRFd0+R40bEVCHQ=
Subject key identifier:   6B:8D:4E:50:6F:FC:FE:EC:88:92:94:5F:63:87:D4:C9:BF:E4:48:D2
Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44
Certificate issuer:       /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
Manifest number:          E2
Signing time:             Sat 29 Mar 2025 04:50:44 +0000
Manifest this update:     Sat 29 Mar 2025 04:50:44 +0000
Manifest next update:     Sat 05 Apr 2025 04:50:44 +0000
Files and hashes:         1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: 0adHpvWxO13272yYTyNAlqqh1alb4+9wHlQYn7RFFYU=)
                          2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 04:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918897A
        Validity
            Not Before: Mar 29 04:50:44 2025 GMT
            Not After : Apr  5 04:50:44 2025 GMT
        Subject: CN=67e77c24-e54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:66:56:8d:ab:ec:b4:08:7c:22:2b:6b:36:
                    57:14:f2:92:b1:77:af:60:d9:b0:68:56:b5:d1:ef:
                    14:70:7f:49:a7:41:5c:99:33:3a:c3:41:db:86:df:
                    48:24:32:f8:36:8d:06:54:e0:7a:f8:7d:85:7e:c1:
                    e1:7d:06:5d:94:91:6d:8a:f9:30:f7:e0:f6:7d:91:
                    09:d9:aa:61:e6:4d:06:26:3e:35:31:eb:4d:b0:74:
                    d5:7a:90:60:58:d2:da:7d:19:e8:36:82:9d:85:3c:
                    df:9f:9f:42:9b:52:dc:67:1d:c6:b5:e8:b4:82:43:
                    2c:e1:ba:5a:81:bf:48:ea:49:84:ab:e1:c3:eb:22:
                    a6:3b:f0:8e:73:b3:e9:14:54:97:e5:af:79:2b:66:
                    77:8c:0a:95:67:96:bc:88:fc:95:cc:b2:17:43:b8:
                    95:92:60:a8:c3:fe:b7:8c:65:eb:46:4e:e4:66:c5:
                    ec:3a:76:2c:3d:49:93:5e:58:08:27:dd:0e:0d:09:
                    df:fc:ed:8a:02:54:2f:d9:4b:dc:ce:21:e0:9c:0d:
                    90:d3:e0:98:ce:3f:dd:1f:85:cd:ba:bd:52:c2:0d:
                    ca:d1:a0:56:27:dc:ef:db:04:21:8b:c6:96:b0:af:
                    d8:77:65:d6:71:75:96:e4:81:0b:c4:0a:fb:e8:2b:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8D:4E:50:6F:FC:FE:EC:88:92:94:5F:63:87:D4:C9:BF:E4:48:D2
            X509v3 Authority Key Identifier:
                keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:fc:8c:8c:30:b3:67:ab:12:ab:85:0b:aa:ab:90:22:8f:
         00:ed:19:70:ea:c4:6f:90:c8:bf:70:4d:a5:6e:a0:ff:46:39:
         10:d8:a1:54:d8:43:3f:86:d2:6a:d9:bf:9c:30:9e:a2:ed:dc:
         ef:1b:cd:3f:eb:ff:8b:12:47:8c:29:2d:24:28:8c:a2:84:a5:
         07:e2:f9:a3:21:b2:c0:bf:1d:e8:24:52:0f:d9:2f:cc:96:56:
         62:a2:90:5f:58:5f:0c:bd:ec:7f:6b:51:1c:0c:13:21:7e:a2:
         e8:c2:7d:d1:d9:6f:d5:cd:1b:03:5d:a2:5e:16:3e:c0:89:3f:
         37:3b:f1:6d:06:49:1b:0e:48:28:8e:b9:6f:2e:0c:13:88:74:
         b5:18:8a:02:7b:22:46:c3:c8:64:97:bb:af:2d:50:c5:94:7d:
         55:e1:b1:b2:d5:83:ce:eb:be:80:01:43:9e:d1:d6:da:42:ab:
         a3:e1:06:5a:85:fb:a4:00:c0:a7:6a:8e:b0:9d:60:3b:f2:15:
         bf:ef:de:45:d8:e4:e4:86:ec:91:17:3e:03:12:3e:38:b3:d0:
         aa:bb:d6:4f:fb:ba:08:97:1f:56:d3:d3:66:d4:1b:60:35:24:
         34:a7:d0:8c:8e:81:f9:49:35:64:d3:45:03:a8:bf:d6:25:a0:
         71:07:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:34:22 2025 by rpki-client