Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
File:                     rN673IrqemETaTGDOGOx454Bfic.mft (raw, json)
Hash identifier:          8LRWyo6VeuAliO+XZdyIkG0wemiYY/vqow93vFYeL50=
Subject key identifier:   E2:5A:CA:D1:27:C1:BC:9C:8F:9F:0B:AF:13:5E:82:34:1C:38:8A:6F
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Certificate issuer:       /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial:       0AF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
Manifest number:          0AEC
Signing time:             Mon 28 Apr 2025 19:47:06 +0000
Manifest this update:     Mon 28 Apr 2025 19:47:06 +0000
Manifest next update:     Mon 05 May 2025 19:47:06 +0000
Files and hashes:         1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: b2+Yu0lFULjK2Gp1vCgk4/eJJNS96DKwZPxTtJzC8p8=)
                          2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
                          rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2809 (0xaf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
        Validity
            Not Before: Apr 28 19:47:06 2025 GMT
            Not After : May  5 19:47:06 2025 GMT
        Subject: CN=680fdb3a-182c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:09:34:20:45:f6:04:ba:56:88:9c:1d:59:
                    62:02:5d:d5:41:20:a2:59:8e:db:8e:87:7b:5e:7f:
                    85:20:d5:82:0b:db:94:dc:ed:c7:fb:08:6a:0f:92:
                    58:76:8e:96:4e:7a:c4:30:ba:cc:33:75:8e:f2:39:
                    a0:b4:38:f8:78:f1:bc:a0:80:2f:01:a9:2d:ae:32:
                    6d:f9:22:fa:43:ba:1d:00:02:e0:97:51:9a:1f:01:
                    f0:70:bb:d5:d7:d3:9b:08:65:81:7e:84:12:7c:f6:
                    1d:86:dd:66:49:fb:e0:8f:d1:ce:12:4c:12:f5:c1:
                    2b:77:c4:74:8b:d0:9b:e6:42:ab:6e:9b:44:b2:aa:
                    3a:f3:54:34:82:f6:bf:18:6f:b4:2d:21:da:a0:77:
                    56:eb:01:4a:3c:75:e4:20:62:45:ba:62:a7:2a:38:
                    74:ea:e7:42:42:6d:f2:75:93:ed:00:27:ea:8d:1c:
                    4f:f5:86:fe:eb:d0:44:27:cf:fa:d3:a1:76:f1:bc:
                    d2:a4:87:c4:e8:bb:9a:13:99:fe:b6:30:be:c2:44:
                    ee:a6:07:51:94:37:40:40:f4:59:99:e7:cf:bf:4a:
                    7c:08:7f:ca:60:dc:d8:9e:fe:22:67:b6:61:b2:02:
                    70:35:c0:75:f5:9d:f6:30:5b:13:3d:2e:b4:a1:31:
                    9f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5A:CA:D1:27:C1:BC:9C:8F:9F:0B:AF:13:5E:82:34:1C:38:8A:6F
            X509v3 Authority Key Identifier:
                keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:b1:40:7f:2f:cf:09:f7:b9:96:46:8f:be:91:a5:05:77:7b:
         19:5e:4e:f7:cb:b1:df:36:b0:cc:ee:1b:21:51:f1:2d:97:43:
         3b:2b:6d:ae:c4:b8:6c:b5:4a:4f:da:af:a4:e8:6f:84:ae:9d:
         96:66:dd:e7:af:ab:de:e9:fa:02:4b:8a:59:e0:7e:37:30:3c:
         ba:b8:53:db:b4:4b:ae:97:de:d0:dd:bc:95:dd:f4:4b:90:c6:
         0d:bc:3d:c8:f9:4e:6c:f9:58:02:cc:4f:bd:ee:3a:b5:92:a1:
         11:fe:e0:3d:26:e6:e2:fd:d1:dc:74:dd:1f:0f:7e:41:b5:ff:
         fe:45:5a:76:b4:07:ec:c3:cf:4c:4a:d8:39:5c:48:1f:af:18:
         8e:b8:52:58:85:02:a7:d2:43:eb:a8:e0:ba:f5:dd:10:b8:91:
         bd:1f:75:18:c8:26:6b:42:de:9d:e6:0f:23:b8:ec:54:53:5e:
         e7:5d:fa:2c:82:31:f2:33:96:72:d6:b3:32:34:55:0b:0a:b9:
         df:c6:9a:b4:53:60:89:a2:ff:ed:57:a0:e9:4f:1b:fe:c0:58:
         be:d9:84:c8:98:7d:65:b4:eb:b3:13:ca:c6:e5:56:83:18:cf:
         90:f2:41:e4:b4:df:cd:85:c9:bf:3e:e5:86:c5:bf:00:ba:eb:
         c4:90:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:51:51 2025 by rpki-client