Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
File:                     4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json)
Hash identifier:          m38YJGoPVCLr9d+ntZBYPdn76lzLq8DR/IWLVgqtoQM=
Subject key identifier:   ED:05:94:7C:8E:5E:F1:D0:5F:21:33:B5:0C:BC:29:BB:E9:FF:5D:CF
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Certificate issuer:       /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
Manifest number:          57
Signing time:             Sat 15 Feb 2025 08:25:35 +0000
Manifest this update:     Sat 15 Feb 2025 08:25:34 +0000
Manifest next update:     Sat 22 Feb 2025 08:25:34 +0000
Files and hashes:         1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: 9RCtBViLoxK1HwYJMBxwHIDOyR/D9E+F39OuTUoRA7o=)
                          2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695
        Validity
            Not Before: Feb 15 08:25:34 2025 GMT
            Not After : Feb 22 08:25:34 2025 GMT
        Subject: CN=67b04f7f-2b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:d1:d1:84:05:fb:6d:b7:71:a9:64:fd:c6:
                    9b:11:63:af:48:1f:fd:85:56:3b:79:38:10:af:fb:
                    cd:e7:fc:c9:42:c5:f5:89:ba:96:51:94:42:78:86:
                    05:40:65:0b:e2:6d:0a:aa:b0:25:97:5a:39:14:0a:
                    28:4b:da:d7:1d:b2:26:75:ff:3b:46:a6:86:6c:06:
                    08:fa:0c:37:1f:10:30:f0:a7:a5:97:4f:50:a9:ba:
                    8f:78:4e:ae:ef:ed:ec:44:57:26:dc:c3:bb:66:4e:
                    7c:64:49:30:0c:cd:0d:50:c9:09:41:3d:a3:73:6d:
                    e5:b3:26:49:d0:4f:63:77:ac:b8:94:0f:9e:9e:c7:
                    97:af:d9:a2:4d:12:7f:74:22:bd:ab:34:2b:47:28:
                    36:ee:df:a3:98:cd:2e:de:fa:0f:58:e7:0e:30:5d:
                    c5:7b:e0:3d:f1:34:5d:ea:32:1a:58:a8:aa:1b:42:
                    aa:30:dd:25:73:e7:fb:85:a9:db:69:83:39:90:b2:
                    82:b7:37:37:bf:23:5b:07:43:ee:d4:74:9e:a5:c7:
                    f4:9f:98:2e:53:d1:ed:0d:7a:90:0b:93:a8:6b:ad:
                    27:f3:16:08:b2:bd:4a:1f:83:85:cb:fa:41:49:63:
                    f6:f3:a7:46:8a:88:59:e7:e4:f0:25:ff:96:8d:ab:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:94:7C:8E:5E:F1:D0:5F:21:33:B5:0C:BC:29:BB:E9:FF:5D:CF
            X509v3 Authority Key Identifier:
                keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:10:0b:1c:77:90:d2:a3:62:2f:3d:9e:c5:4e:a9:cf:7e:b7:
         b1:3d:8a:ea:39:d4:37:ef:c9:88:51:17:d9:0d:b2:fd:dd:17:
         e6:76:07:1e:57:e3:da:d0:8b:6a:2c:34:06:70:d6:52:4a:78:
         fd:d4:a8:d3:ec:e1:da:40:7c:b1:33:96:71:f2:0f:1f:81:c6:
         ba:de:a4:8a:d0:20:26:88:53:34:66:18:0d:fe:39:31:a7:13:
         50:50:9c:a3:5d:2e:af:8e:45:a8:da:14:9e:80:f0:e1:48:83:
         f9:87:8c:5c:6c:33:9e:0c:27:8b:89:0d:e1:32:5a:89:72:a6:
         64:82:ab:c7:30:97:9f:bd:ed:3c:f2:92:93:4b:34:e4:5b:9b:
         78:4e:8b:16:ec:58:37:c7:a5:65:fd:bd:30:8f:2e:0b:1b:76:
         ea:48:b9:bc:03:14:76:da:1b:0c:39:ff:4c:f7:9b:8a:26:e0:
         52:4b:bb:12:dc:4c:bf:73:0b:b5:ec:1b:ad:fa:3e:7d:53:c7:
         73:4c:37:15:6a:e9:81:a2:78:ec:9f:1c:57:ee:e8:dc:18:56:
         bc:24:c6:17:a0:47:ed:8c:cc:6c:87:c2:8d:cd:19:6e:ca:e3:
         e0:c1:2c:ed:fe:aa:13:71:25:0b:d5:f8:62:44:9c:8a:9c:bd:
         ed:37:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:14 2025 by rpki-client