Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          FaqMjX/qRlFRXujasWC/7zBJtYssAOPvjGcrmQDe/Yk=
Subject key identifier:   A0:74:D0:93:39:E2:56:45:2E:9E:5F:96:7B:3D:6A:47:95:B9:0C:CB
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       0661
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          0652
Signing time:             Fri 04 Apr 2025 22:36:12 +0000
Manifest this update:     Fri 04 Apr 2025 22:36:12 +0000
Manifest next update:     Fri 11 Apr 2025 22:36:12 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: wEs70wJrecPO1VdnvjXK9Bi0jbkH8SkaTS9xv94fMug=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: wvKmIi2++zbJbE9MCN6birY4f8q7zR7YkJ8AOwoHL0c=)
                          3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: enNVOzFUB83x7iJjfLJWQJYDSM1EIlchFYs8Y1Lu3uk=)
                          4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: GKP5taJaLT0/BVslpBvisPkis2pdFhShqf+TdK4IIA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4
        Validity
            Not Before: Apr  4 22:36:12 2025 GMT
            Not After : Apr 11 22:36:12 2025 GMT
        Subject: CN=67f05edc-d222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:12:96:f6:8b:25:48:16:51:56:78:ad:33:
                    c9:71:81:76:1c:b8:74:44:86:33:f4:49:4b:63:ae:
                    f2:49:3d:31:e4:c4:eb:7a:74:c3:9b:2f:04:a2:02:
                    dc:c0:4c:bb:3c:b1:c9:4c:96:55:e2:95:99:3c:79:
                    2f:76:3b:a5:dc:c9:bc:5c:f9:d8:fa:34:c2:97:fd:
                    9a:90:e8:79:aa:cb:2d:41:8e:5f:7c:ac:4d:03:1d:
                    5b:55:4c:0f:b6:41:72:e5:1b:4e:7d:eb:b2:f8:7e:
                    23:1a:ca:f6:3e:6b:42:b9:5e:f3:a3:90:71:5a:6d:
                    93:12:36:26:8f:10:fc:50:99:1b:ed:2e:b4:de:b2:
                    53:10:42:20:a6:2b:ae:c3:7d:e9:e0:14:db:a1:73:
                    98:1a:ef:1d:13:be:92:27:e5:0b:d4:e2:24:bc:b5:
                    a2:42:cb:37:1b:2f:d8:3b:11:5c:f7:6e:35:f8:fd:
                    6e:8e:5c:4d:5b:c1:bc:49:5b:2a:e8:db:09:43:46:
                    91:50:de:f6:78:24:a0:ff:f9:39:5a:ad:43:12:06:
                    73:d3:c0:60:91:f0:24:af:e0:06:4a:04:a6:fc:9a:
                    e8:24:a3:cc:b7:e9:72:54:2b:70:b5:4e:ad:c1:d7:
                    24:2c:f4:95:23:bf:39:cd:c9:78:d5:5c:de:35:11:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:D0:93:39:E2:56:45:2E:9E:5F:96:7B:3D:6A:47:95:B9:0C:CB
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:97:de:c7:78:0c:f1:c5:31:6c:65:11:bf:8f:d0:eb:30:28:
         d1:83:53:27:60:e1:29:2f:a1:c3:8e:17:42:f4:60:01:c3:e4:
         3b:07:f5:90:16:80:1f:46:d5:61:a0:56:b9:79:7a:98:d2:3c:
         73:54:11:13:6f:fa:f0:ea:98:55:de:0d:08:c8:48:4d:1c:72:
         4d:e9:85:07:8f:b4:84:68:34:d0:71:0f:bb:3c:ab:b7:59:b9:
         8b:b6:03:d2:72:9e:3f:e8:23:f3:ec:6c:bf:30:ae:90:1e:2c:
         44:5d:29:f1:b9:5d:33:78:5d:ac:7a:e1:d3:4b:3f:9f:d9:1a:
         f8:61:5c:1d:c9:1a:2d:fa:3a:0a:d5:6f:a1:7e:27:70:09:46:
         d1:10:75:aa:dc:49:78:79:7f:e7:a2:18:33:9f:75:5b:7f:a0:
         f6:4f:b2:9c:ee:cd:8b:b9:50:05:f7:7b:2f:d2:0f:f7:83:a5:
         04:07:72:76:59:e1:35:da:91:f2:ce:db:49:c3:71:e6:52:45:
         11:9a:f1:62:b3:e1:70:1e:86:be:3a:66:56:75:e9:c4:36:b3:
         fb:9d:f5:70:67:47:57:26:d1:80:d8:d6:e1:2f:74:b5:cd:50:
         aa:de:af:b9:b2:ff:e9:27:64:17:05:5a:7b:fc:a6:5a:43:83:
         6a:8a:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:34 2025 by rpki-client