Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File:                     h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier:          ue5xEn162xcyJHxr0kXZnQ4L3UHHLlfeMn8dGq9LxDQ=
Subject key identifier:   12:3C:1B:86:DA:3A:FD:CD:FC:5E:51:B0:70:80:28:61:CB:8F:51:A5
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number:          01CF
Signing time:             Fri 25 Apr 2025 02:12:18 +0000
Manifest this update:     Fri 25 Apr 2025 02:12:17 +0000
Manifest next update:     Fri 02 May 2025 02:12:17 +0000
Files and hashes:         1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: PLNukt3zPsfg2xuyKH7w45bNcTHgdaXvkGhk2LqFvuo=)
                          2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=)
                          3: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=)
                          4: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=)
                          5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=)
                          6: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (hash: cfEKqO3Kkr1IOuK1m9tr5GbLcR8ThlytGN+8R5F5cKc=)
                          7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Apr 25 02:12:17 2025 GMT
            Not After : May  2 02:12:17 2025 GMT
        Subject: CN=680aef81-4c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:fc:8f:b5:fc:ea:98:bb:49:5e:2f:10:87:
                    95:f6:df:3d:cb:c2:18:57:52:5b:a0:d4:d7:4c:b5:
                    83:3c:ea:55:e7:82:c4:11:5e:12:b5:e5:fc:c5:ff:
                    62:4a:1e:06:ed:d1:60:87:6d:9a:99:c6:9f:53:4b:
                    94:d3:3b:44:01:74:d7:06:61:fb:0d:d6:b6:81:e3:
                    47:45:04:86:29:29:09:66:2b:6e:45:14:c4:b9:57:
                    1e:25:b4:9a:18:d7:52:9c:48:31:0f:c2:49:6d:4d:
                    53:e8:1c:70:33:e7:81:51:c4:9f:37:bc:ce:19:ca:
                    13:54:60:ee:75:20:55:60:13:2f:b2:cd:6e:db:b1:
                    17:b0:3f:fc:a2:a0:45:80:cc:ed:07:4b:62:9d:fc:
                    84:b7:c0:06:70:3c:fa:c1:ec:b1:4c:f0:10:f0:07:
                    44:d4:42:bf:3b:73:76:9d:f5:14:11:06:40:5c:37:
                    32:5b:c8:c2:0c:d1:3d:25:34:ba:c4:2a:5c:b7:c6:
                    16:5b:52:32:1e:a3:54:99:ca:11:72:54:db:48:96:
                    43:c1:ee:e8:24:09:94:44:06:2a:0f:a9:f3:ee:d0:
                    81:c7:9c:d6:ef:a8:e7:81:55:48:f5:c1:da:07:d6:
                    1e:d2:0a:05:87:e9:a7:05:67:db:36:ba:1f:1d:af:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:1B:86:DA:3A:FD:CD:FC:5E:51:B0:70:80:28:61:CB:8F:51:A5
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:83:57:92:5d:c0:63:79:95:fd:11:8a:0c:f6:c8:b4:dc:
         ea:1c:a9:1f:91:9e:7f:ee:af:c1:b4:8d:4f:5f:58:5a:e3:29:
         36:ac:bb:65:10:05:5d:30:6b:b7:41:d7:b4:6d:d1:0e:91:24:
         9a:e5:ba:47:1a:20:73:96:30:57:bf:55:e4:a1:0d:e2:76:46:
         c9:19:c7:93:d0:71:bb:dc:39:b9:6a:c9:81:93:17:82:ba:25:
         63:7a:e7:19:fb:d9:5c:47:14:81:a2:20:98:1c:69:a7:13:2a:
         d7:cb:79:f9:2e:14:66:59:d9:82:38:1e:16:fb:a4:f2:97:f7:
         11:fc:62:d1:e5:dd:5a:0d:04:93:00:c8:c7:a5:35:e4:71:4c:
         d3:08:cc:5b:0a:d1:c6:84:95:c8:ae:be:63:a2:16:b0:bc:5b:
         2c:51:d7:f8:9d:ec:e9:2e:d4:d2:80:01:0f:33:ed:4b:32:c5:
         98:82:0b:74:a5:b1:33:87:66:c4:7d:88:01:6f:ea:09:0d:a5:
         c0:85:34:d4:18:fb:60:19:ec:37:a0:02:d1:80:45:5a:02:fe:
         cc:59:f6:dd:20:c4:b5:01:6c:93:11:6b:5c:ab:84:8b:26:76:
         eb:2e:37:aa:d8:db:d9:52:16:e4:92:c8:a3:12:50:4a:c2:98:
         08:52:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:28 2025 by rpki-client