Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
File:                     eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json)
Hash identifier:          qAwkaTXBViz0RV7y3g43CxAfYASHtQbh2PH3HgyniG8=
Subject key identifier:   B0:6F:C1:05:0C:63:92:CD:04:FE:5F:7B:14:30:14:AC:A0:0E:E3:32
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Certificate issuer:       /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
Manifest number:          0155
Signing time:             Fri 25 Apr 2025 03:17:57 +0000
Manifest this update:     Fri 25 Apr 2025 03:17:56 +0000
Manifest next update:     Fri 02 May 2025 03:17:56 +0000
Files and hashes:         1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: P+oWuAEKcGqtiUPLAoC+sHusBgWROYaGtITcM9mVxRQ=)
                          2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: nZO3fD/UXNr3uqqv02fIgSVaBw0L8cPP2uBqZUuZXQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
                          rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
        Validity
            Not Before: Apr 25 03:17:56 2025 GMT
            Not After : May  2 03:17:56 2025 GMT
        Subject: CN=680afee4-d39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2e:7d:fa:20:c2:fe:8f:4e:5b:ba:2d:cd:53:
                    ac:7f:63:ec:68:93:e2:d6:2e:f0:04:3e:16:63:e1:
                    d4:c1:eb:85:99:43:44:fa:3a:9e:77:be:14:55:a3:
                    b9:4f:be:13:d9:9b:54:ee:f1:ca:7d:69:01:3b:42:
                    00:9a:c4:11:ce:d3:f2:99:14:ff:f9:ef:d8:09:93:
                    f9:bd:11:f6:26:bb:b9:ec:60:a5:cc:25:51:28:0a:
                    54:2a:f9:95:ff:6e:b5:4a:98:51:ee:b6:d7:bd:1e:
                    f0:98:a4:df:0f:2e:3c:f3:3a:8c:fb:bd:3a:dd:20:
                    c5:70:3a:0f:63:ce:bc:57:11:2a:7e:36:ca:ca:38:
                    24:61:54:bc:7b:a4:ee:3d:03:39:1c:95:e2:9e:85:
                    1a:cd:6d:f5:0e:f6:cc:11:03:e7:f8:64:25:37:c3:
                    82:a6:74:22:62:02:77:56:78:b3:73:55:8b:39:85:
                    3c:7a:5b:78:b5:f2:7e:b4:da:7d:db:bf:7b:ba:98:
                    3a:fa:7c:71:38:b4:38:ce:9e:6b:83:be:52:53:87:
                    4f:f9:c8:cf:9f:5d:14:16:2d:21:87:38:d5:ab:01:
                    a2:74:33:b2:d7:13:e0:2e:83:3c:3c:d8:c1:21:9c:
                    21:31:0d:53:c3:f7:3c:c6:16:20:6a:53:ab:15:88:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6F:C1:05:0C:63:92:CD:04:FE:5F:7B:14:30:14:AC:A0:0E:E3:32
            X509v3 Authority Key Identifier:
                keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:88:84:80:ce:a1:69:68:01:17:96:3e:9f:df:8c:36:c7:cb:
         11:e1:d4:68:df:f2:39:b5:f7:45:51:89:44:7f:29:81:b3:44:
         ae:81:6f:11:14:e8:17:25:42:40:aa:54:3e:91:b2:63:c4:94:
         b7:4f:a4:f2:d3:be:8e:09:fb:92:1f:f8:90:db:bf:ee:23:8d:
         03:d1:24:5c:ea:05:d6:90:86:0c:c3:6e:e9:a7:39:5b:91:ec:
         20:e7:43:f0:8f:13:8a:69:95:f7:4b:94:e7:82:47:65:dc:7c:
         8e:b2:18:52:7e:c1:78:98:4a:a9:90:b1:a5:4d:25:69:38:3b:
         9e:c9:47:e9:9c:54:b7:0a:01:39:cf:05:69:c3:96:01:a5:8e:
         b9:27:31:96:fa:29:7b:87:61:9c:e3:40:c8:92:1b:60:88:87:
         8f:d7:f2:ee:84:fb:6c:1c:df:76:71:b6:40:ac:15:90:4b:c2:
         63:40:ab:62:74:fb:d8:44:f2:77:7f:61:42:f6:c9:13:55:2b:
         06:b2:a2:00:76:91:29:97:2a:94:fc:d9:13:c4:ce:a6:5c:f7:
         cd:2d:fb:47:67:8f:86:04:70:7e:c4:12:86:e7:30:93:45:9b:
         32:2f:64:d0:4f:00:96:62:3a:d8:aa:ac:35:1d:eb:45:f6:ff:
         29:1b:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:18 2025 by rpki-client