Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File:                     pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier:          lvXnKBrL4tQBNg4amOxQ5OUCEa7geWaAV3y7umXrmck=
Subject key identifier:   DC:C7:1C:35:39:4A:7D:B9:64:41:A0:C7:E0:CF:78:FC:23:B1:69:65
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer:       /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number:          76
Signing time:             Sat 15 Feb 2025 07:58:21 +0000
Manifest this update:     Sat 15 Feb 2025 07:58:20 +0000
Manifest next update:     Sat 22 Feb 2025 07:58:20 +0000
Files and hashes:         1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: Nh17+IQklwXdBZGaP6+ZZnHbV8l8eGnk5wAn3uweI/s=)
                          2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: UvG+rrdQc4qonfWzAVMV6XBgR9R1iSghae9lnt9yKqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11
        Validity
            Not Before: Feb 15 07:58:20 2025 GMT
            Not After : Feb 22 07:58:20 2025 GMT
        Subject: CN=67b0491c-3629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:67:d1:f2:84:6b:03:aa:9d:55:16:f6:12:
                    91:88:b2:b7:a7:90:53:4d:ae:fb:60:21:b2:d4:52:
                    72:17:92:1b:20:d3:10:5d:a7:5f:51:f6:be:7d:fb:
                    7a:b9:4b:ee:d6:98:ca:2e:42:6c:91:ce:94:75:16:
                    6e:87:58:26:3f:8f:c6:f9:7e:2f:c6:7b:5f:60:6a:
                    2c:3f:70:42:6e:f3:30:f3:08:5f:d7:66:c0:ae:e1:
                    ac:bd:97:71:a0:a0:83:92:31:3a:ad:d5:19:9d:37:
                    e7:4e:46:04:87:bd:16:84:4b:f9:8c:20:2f:e9:1d:
                    c7:db:ba:eb:1f:9c:9d:0a:1c:ac:35:eb:a9:3a:75:
                    56:48:73:8a:33:3a:19:9b:08:c3:0d:5f:18:05:83:
                    5c:ce:a0:da:11:f3:6f:bf:ae:91:8a:70:79:9b:8f:
                    bd:02:b9:ea:60:ab:9e:10:e1:5f:f1:32:f9:6e:1c:
                    45:c3:0e:5a:58:41:b4:eb:c5:85:79:06:d4:02:ef:
                    d1:a5:8f:04:c2:da:e5:27:23:aa:8e:23:8b:1d:5c:
                    fd:68:20:f6:b7:ef:b1:97:2a:3c:8d:eb:1a:dd:92:
                    f9:30:2c:32:c1:37:b9:e3:23:af:06:b9:61:85:49:
                    81:bb:bf:84:d6:44:ae:d0:13:e4:7d:33:dd:d0:e2:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:1C:35:39:4A:7D:B9:64:41:A0:C7:E0:CF:78:FC:23:B1:69:65
            X509v3 Authority Key Identifier:
                keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:22:25:12:ed:12:35:eb:93:f2:60:fd:09:95:87:36:6a:
         28:5d:eb:b9:d7:30:a9:19:fb:42:96:9f:b7:17:8b:59:28:3a:
         f5:79:5f:48:fc:57:71:e5:c8:fb:e0:9c:7f:31:de:fb:78:25:
         ab:17:65:76:a9:04:45:11:9f:cc:1a:ea:a3:d5:93:f5:e7:ad:
         e5:d6:30:cc:f2:18:10:76:25:52:72:8a:fa:93:61:f3:91:a1:
         d0:fe:3b:c4:e8:64:7a:92:84:c6:ad:45:1b:88:77:b9:fb:90:
         2f:9d:d7:9b:55:5b:b2:8b:de:c9:b3:ac:b1:30:05:6b:4c:40:
         f5:00:fe:20:7f:0e:03:e2:ab:39:40:0c:df:12:15:02:9c:54:
         2d:84:46:20:a8:27:a5:50:68:b6:24:65:80:e1:f1:45:e8:97:
         1f:45:35:eb:9d:aa:71:4a:88:34:dc:74:6c:38:59:dd:8e:48:
         a0:51:d8:a1:ae:98:ff:20:ea:6b:5e:ba:cd:2c:58:84:b8:18:
         0f:c8:26:c7:9c:78:e3:e2:83:07:ec:45:95:14:e7:49:a7:76:
         b1:d2:d8:bd:a9:4c:5f:17:91:f7:95:e6:2c:5c:77:24:5b:d5:
         02:ac:98:9b:19:32:c6:8a:76:02:d3:62:65:e7:5c:07:27:10:
         b0:90:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:14 2025 by rpki-client