Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
File:                     dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json)
Hash identifier:          DDSsOKVp/gIMt8+Ov+P1hMkScyu0QJJlHQxiDMX4YFM=
Subject key identifier:   3E:CB:E4:38:E2:86:09:AF:D9:B7:55:8B:9F:11:C2:F5:0B:31:CD:F4
Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
Certificate issuer:       /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Certificate serial:       0639
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
Manifest number:          0633
Signing time:             Thu 24 Apr 2025 22:25:54 +0000
Manifest this update:     Thu 24 Apr 2025 22:25:54 +0000
Manifest next update:     Thu 01 May 2025 22:25:54 +0000
Files and hashes:         1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: Fdj5quGKze0gRSGB8S3foIVihSGpul3BAvnuFrAj08A=)
                          2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
                          rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
        Validity
            Not Before: Apr 24 22:25:54 2025 GMT
            Not After : May  1 22:25:54 2025 GMT
        Subject: CN=680aba72-2a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:60:7a:35:de:2f:32:b7:e3:05:c1:c2:57:
                    e3:4c:8b:66:e5:37:ff:36:b1:47:47:53:97:82:db:
                    b3:d7:32:c5:b2:09:a2:50:44:01:08:3b:7b:ab:ea:
                    94:5f:97:6c:b1:eb:a4:43:c4:f4:8d:77:01:24:3e:
                    89:cc:38:23:20:af:2c:6c:ed:1f:21:49:c4:75:05:
                    b6:22:a0:24:9f:4f:c3:a0:2a:ab:22:df:d3:51:43:
                    bb:95:d3:12:ea:e4:ff:aa:5d:f9:e8:cb:02:a0:45:
                    42:0f:bd:99:03:a1:07:81:8c:5b:c6:19:d5:14:e3:
                    ac:ad:63:36:68:7d:65:d7:55:9e:1a:83:5d:8e:27:
                    61:2d:93:7f:53:ad:25:dc:53:c6:98:55:74:39:1e:
                    96:68:de:ab:4f:73:14:b7:6d:58:7b:97:17:c9:05:
                    70:c9:75:aa:a2:cc:a3:af:32:17:df:61:2d:0a:b3:
                    88:9e:62:22:03:a5:a3:e5:a8:9d:e8:a8:56:61:a0:
                    c7:b3:58:11:47:0a:ca:b4:1b:af:54:b1:4e:c1:8b:
                    af:7a:4b:b6:14:ce:23:98:10:f0:6e:02:af:02:e7:
                    58:5d:d7:0f:ca:d7:c1:56:7f:a1:68:eb:ae:52:3c:
                    ec:cd:7a:4d:ca:e0:56:6f:53:73:85:cd:42:7a:cc:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:E4:38:E2:86:09:AF:D9:B7:55:8B:9F:11:C2:F5:0B:31:CD:F4
            X509v3 Authority Key Identifier:
                keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:bb:95:7e:9b:c0:51:b0:a7:0d:63:51:c1:2c:f9:8d:d3:4f:
         3a:f8:1e:75:02:02:bc:fc:df:e2:02:f0:26:2f:58:f8:64:8d:
         12:0b:72:49:c4:9e:1b:3b:f6:16:2a:fd:c5:d7:87:cc:58:67:
         7e:01:0a:9e:30:54:c0:44:3c:3f:56:28:b1:25:6c:a9:7f:c6:
         fa:07:b4:bf:2c:08:fc:4c:89:af:7f:40:f0:25:bd:59:0a:7f:
         05:b6:a8:3c:9d:16:ac:1e:42:39:08:34:0f:a2:4a:4f:78:08:
         39:27:2f:4f:28:3d:80:01:61:ce:a6:48:8b:50:d0:07:64:00:
         e9:16:01:de:4e:57:9e:17:5c:b7:fe:0e:d5:f2:af:97:d8:12:
         29:99:8e:91:9c:1b:58:0c:73:00:3e:4a:18:b6:c0:00:bc:4a:
         c3:00:f0:1b:a3:2f:29:1b:2e:a9:b4:db:c6:d0:44:25:44:d6:
         8c:c7:2e:01:66:41:57:dc:59:cc:d8:57:18:90:5a:cc:aa:f5:
         14:cd:9f:0f:61:54:0f:89:97:f1:20:59:88:ed:88:de:f5:00:
         e2:75:d2:18:eb:0b:a1:40:73:28:7e:69:ac:95:66:4e:18:0a:
         16:7f:fd:3d:ff:dc:1d:ee:ae:84:8b:a5:ed:9a:64:fb:7f:b9:
         05:e1:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:11 2025 by rpki-client