Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File:                     mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier:          L9aE/lWBskKaUTwy/bwMvT+9mN6FWs53ppVA+t52JVA=
Subject key identifier:   1A:8A:12:BA:38:D3:AB:CC:D9:50:45:CF:DA:2E:A2:54:E2:49:2D:3D
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       0FBD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number:          0C09
Signing time:             Wed 12 Mar 2025 20:27:09 +0000
Manifest this update:     Wed 12 Mar 2025 20:27:09 +0000
Manifest next update:     Wed 19 Mar 2025 20:27:09 +0000
Files and hashes:         1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: PwiszEOvc8JtCMzbycPiOdr0UmFMfew9GP4Dv6j6Ls0=)
                          2: B85E994CFE5411EFB0605334C4F9AE02.roa (hash: izLf6ogzM9OIUzUuWynTjLpb2gWdyJYX7n7zESR/lRQ=)
                          3: 86CE69ECF8C411EFA06CFB39C4F9AE02.roa (hash: /1K1aICzEFadr+brYKHCxG6285hW8Cjc3j2DnRUVwP4=)
                          4: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4GAkxc1wnMMcIWRORtwNgAVULVWlMkQgSrzLVx7bAs=)
                          5: EE9ACA30FE4011EFB3C87416C4F9AE02.roa (hash: kByynmdC17TVU0YIFjiBOfnmZC+piAX0qD9IVzYo/Is=)
                          6: BE7E4E9891F911EF86353E28C4F9AE02.roa (hash: cdF0IEAin6BEbgZDiectcRjj/Qj2LqehP647MMLBn4Y=)
                          7: 40F0E4DC75AB11EFB897AF69C4F9AE02.roa (hash: 66mcnb1x9N203HeKzYtZYqy46nvM7OGyg282gr346uI=)
                          8: 5D11DCCEFA6D11EF9EF35D24C4F9AE02.roa (hash: dTUkVepAkLONgxbmu27A1mZpxAOtOhfemTXLT7DoRDQ=)
                          9: 8BB4AC56FE5411EFA460EB33C4F9AE02.roa (hash: SDrVx9mhFNB2tccheLH9z3RcBNAC/DhQwbCvupPVz54=)
                          10: DD79FFEEF33411EF850AD53AC4F9AE02.roa (hash: f2/gu2LlUkaXF0d4zgRr/z1sGGtFedi/6Y1PjUwb3kE=)
                          11: 27888CE6FB6D11EF8B0AC378C4F9AE02.roa (hash: SwoWdydjTyjB87GcmJesuDZnK7lMqvQOllCR5999h28=)
                          12: FA9BC95A548711EF89E24A18C4F9AE02.roa (hash: TzqKssNJoGfL9wI2PFMHpXN5yW7cil9sz1WNr4GCrKI=)
                          13: E044F8EA6A7D11EFA472EC50C4F9AE02.roa (hash: o1wNjuG4TpbV9OvZFMpjNOBDtLxry7fuLmL+RNYnRgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4029 (0xfbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134
        Validity
            Not Before: Mar 12 20:27:09 2025 GMT
            Not After : Mar 19 20:27:09 2025 GMT
        Subject: CN=67d1ee1d-cf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:01:d2:50:dc:5c:fd:18:00:5e:55:7f:f2:
                    43:10:06:32:3d:50:2f:4e:92:af:11:22:41:33:19:
                    04:90:6a:d2:48:32:0c:0f:4c:4a:de:fd:7e:88:02:
                    a4:a3:1b:73:2a:f6:93:3c:29:cf:82:41:25:ed:4e:
                    96:05:76:86:78:df:24:60:39:9e:42:d5:1c:13:dd:
                    b1:b9:d8:d5:2f:ff:c2:94:e1:99:4c:99:01:d3:3b:
                    c8:c5:bb:78:17:30:64:70:28:e7:d4:02:7a:67:59:
                    6d:41:6d:fd:01:94:89:04:6d:06:91:83:ec:6f:20:
                    40:a4:12:3b:68:0e:55:68:12:59:0f:6e:ba:e7:00:
                    e4:14:83:f2:3c:b3:d0:ae:18:38:df:87:7d:da:ff:
                    89:28:ef:e1:7c:77:2c:ea:c5:1a:c3:1f:db:49:7a:
                    ba:4d:af:4b:c0:b7:ef:c7:24:36:57:4b:0d:a6:3f:
                    c2:f5:11:01:48:27:1f:b2:c4:fe:7b:25:09:0b:21:
                    86:ac:00:b8:17:06:72:25:e2:05:0a:7e:34:24:41:
                    1f:2a:b2:ac:57:f2:9e:a9:a6:b2:48:fc:fe:d7:7d:
                    48:24:b3:ca:3e:81:ab:a4:9c:5c:af:ed:7a:a0:fd:
                    a1:b8:11:12:45:e6:be:30:3e:d2:63:4c:94:95:9c:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8A:12:BA:38:D3:AB:CC:D9:50:45:CF:DA:2E:A2:54:E2:49:2D:3D
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:22:57:ae:53:7f:e9:41:58:c2:55:fd:86:75:f4:fa:38:
         25:e6:3c:04:60:8a:91:53:a6:77:92:ea:94:92:4a:0e:a2:c9:
         1d:c5:b7:41:cd:ec:8e:b4:79:cb:63:c4:b5:69:ce:09:dd:b4:
         ac:22:5b:8e:c1:90:8f:fd:b6:2e:68:fe:01:bf:be:85:2b:45:
         14:ae:d9:40:2d:df:ff:e3:d2:1f:34:a4:9c:02:26:55:05:ea:
         4b:00:88:41:c4:05:1c:e6:8b:40:e6:74:7b:b9:e9:8c:18:ce:
         cb:e0:a7:45:a7:72:5a:c7:c9:6b:27:05:23:0f:2e:ae:59:54:
         2b:d6:8a:8b:b1:1a:4c:c7:13:a7:7f:ac:e8:a2:6b:34:e2:82:
         ba:71:a4:3f:29:17:45:90:f2:5f:c1:85:58:05:72:da:a3:2c:
         2a:70:09:d8:39:30:6c:49:0d:c4:8a:9a:c6:44:0a:70:4a:80:
         1c:90:24:ec:44:a6:74:87:a0:fc:33:0c:a9:c7:1f:94:94:13:
         27:30:ad:e7:a7:86:22:36:c1:0b:3a:c3:bf:38:8c:03:fc:c0:
         76:43:ef:3e:2b:c0:87:17:4a:0d:67:70:d3:88:3f:b6:6f:bb:
         47:42:48:00:bd:45:ed:e2:77:b7:25:8e:9f:d2:46:c2:1f:8a:
         9e:87:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:03 2025 by rpki-client