Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          OuseLu0yTiKHtbErymrT6E5DMtHe/BDXsjEw/dD9Qyo=
Subject key identifier:   EF:88:CC:20:87:4B:25:C9:47:9D:A2:60:23:61:91:B4:E2:3F:6B:9B
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          013A
Signing time:             Sat 15 Feb 2025 05:45:09 +0000
Manifest this update:     Sat 15 Feb 2025 05:45:09 +0000
Manifest next update:     Sat 22 Feb 2025 05:45:09 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: GvjRGwliz7y6AGI+eA1tqYbE6PxOxM79XWJ+uHyt/rc=)
                          2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: eMfy7OINYllKPw/hYmLN+RLPDufOse3B1bVnfxelXA4=)
                          3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: uXWLPj49wt34ZFOdgRvzFts1coN6e2ycjWdiQjNmKsk=)
                          4: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 3fkGbyflBIYBaEGX9UwZRIaOP3YpNHP6p1lJeAeN+Pc=)
                          5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: 2T6E2IzaBIpKo85tSWVvYebgls3pQQ9SNaIoG7eWLz4=)
                          6: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: RRetVybUwFxGaSKknNCaa7/I6tqAGe/pCAUndWUR9fw=)
                          7: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: ekGkDDIKWLiqVV7h6ESwSg8vnFxwfp+WHxsTHsOalhs=)
                          8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: AW+Nxj8w4krax5vO+aa2r3fRVGb6J4InT/gDIakIwPQ=)
                          9: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: xzZgqMDA4sRVnfCdaLDA6dVoRCpm16rxzJc3wo1vyY4=)
                          10: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: DKGzaOaDogHp8zZnJNJ8Xu7A6tqaHSnOfSE1S0tRHtw=)
                          11: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: 2dWDYylTvBf7qUkUKq2WQpJFP4UJD1LaLQZoGDi+eMQ=)
                          12: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jf5vNKMEs/HYJC+ZfLIR6MHcZqRlwRNx9C1pqFQO2oU=)
                          13: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: 2F6msvEoxhf3yMkdkG6hwiZZB9ls61DIlAbmxkj7kXQ=)
                          14: 544F13A6B78111EF84611770C4F9AE02.roa (hash: b+cobkm/t+8VplbAM/uAvE/ze4s0B8PJ3bqKjF7kQOA=)
                          15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: qF8dwyJS0OcLRM+lRZeGO8KZj/gqh2DhUGlNyStGdKM=)
                          16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: lahqqWdJv5iCoCPv96NgkWAwgDwpfB7aX0xa2UIAojg=)
                          17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: sGNeudGsjKQYxdr3S2rAF3HoccrfyBnH+QSvEfzchv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C
        Validity
            Not Before: Feb 15 05:45:09 2025 GMT
            Not After : Feb 22 05:45:09 2025 GMT
        Subject: CN=67b029e5-631e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:08:a2:a5:d9:dd:3c:da:ea:6b:b0:d1:71:
                    47:e6:90:d6:83:f2:a7:57:f6:fd:3a:00:19:e4:cb:
                    3b:4a:3c:ac:31:be:79:e8:56:43:96:47:ed:9d:59:
                    15:c9:91:24:ef:87:a6:41:58:46:58:39:d8:63:73:
                    14:a4:35:3f:75:86:86:3c:f6:9c:a5:3a:14:eb:cf:
                    1b:d2:6c:39:e7:18:0e:20:61:fd:70:c1:5e:41:97:
                    53:10:dd:c4:cd:d4:5f:51:24:98:69:cb:36:e4:a7:
                    40:f6:15:59:8c:15:02:e8:4a:81:c5:32:02:8c:39:
                    13:e0:0d:7e:06:68:11:ed:1b:b8:b5:a6:6d:a7:56:
                    59:55:2f:fc:7a:d5:d7:ee:42:e3:cc:44:81:b2:c6:
                    07:4c:35:1b:c3:80:b6:c8:12:43:e1:93:6a:46:52:
                    3e:11:0e:bc:15:2e:38:7e:2a:37:dd:aa:0e:6d:bb:
                    12:cd:17:34:62:ae:fa:d4:bf:aa:2f:c6:16:8e:46:
                    c0:63:11:fc:3d:fb:24:ba:6d:68:11:4c:7c:f1:1e:
                    8f:38:aa:64:77:3a:43:34:6a:10:68:6b:f7:02:6e:
                    60:3a:84:76:bd:2e:b0:12:02:aa:a6:d0:a9:72:45:
                    71:2c:80:22:a1:af:14:c4:05:6a:b7:85:a4:42:44:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:CC:20:87:4B:25:C9:47:9D:A2:60:23:61:91:B4:E2:3F:6B:9B
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:f2:69:bf:71:c0:f2:43:3f:10:e8:19:1a:37:92:98:c1:
         f9:9a:41:88:41:d8:8a:96:61:c7:a5:32:2c:a3:82:ff:b5:cf:
         44:9f:0d:0c:7c:87:e5:72:25:46:98:08:a2:50:91:f4:8b:23:
         38:d3:75:76:38:67:0d:7a:af:fc:b7:28:78:70:47:f5:1c:c1:
         5f:72:0d:b7:57:1d:0d:9d:6e:15:21:4e:0f:d6:35:79:52:cc:
         ef:c9:71:f1:09:ab:2a:22:11:ef:81:39:de:2f:08:7f:90:32:
         47:28:a8:4a:ed:56:f4:6a:d8:7a:f9:28:de:2c:e8:4e:c1:ec:
         cc:3f:94:49:c5:63:a2:ef:76:62:02:c8:dc:79:44:ac:18:9d:
         ec:5f:12:61:c0:d1:a9:cb:9c:ae:f3:a0:70:12:f6:7f:06:e7:
         e7:12:20:95:ca:4c:61:b5:a6:f7:82:25:ec:c5:f7:84:d2:b2:
         6e:6b:8a:33:a0:89:4d:69:ce:09:fa:e7:e3:c0:4f:77:8f:0f:
         b6:db:78:ab:5f:c7:84:05:c8:59:ef:7f:9d:a4:a1:c7:d2:6c:
         c3:6e:82:d5:55:8e:09:5e:a8:a7:56:a8:4e:04:0f:4b:99:d2:
         88:99:e6:9a:41:4f:2d:77:ad:3e:9b:14:c0:70:3e:5b:bb:8a:
         a1:98:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:41 2025 by rpki-client