Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
File:                     eZj15wgWto199ez2dy57XKI634M.mft (raw, json)
Hash identifier:          L3IoyStBkvi0PoqWjbDg1rwc3DPJEZS2qhUDMgYX1B4=
Subject key identifier:   56:E4:76:74:22:99:DA:FB:7B:6E:07:A8:36:EB:01:C8:D9:9F:BF:C6
Authority key identifier: 79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83
Certificate issuer:       /CN=A9127C10/serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
Manifest number:          010D
Signing time:             Fri 25 Apr 2025 04:02:17 +0000
Manifest this update:     Fri 25 Apr 2025 04:02:17 +0000
Manifest next update:     Fri 02 May 2025 04:02:17 +0000
Files and hashes:         1: eZj15wgWto199ez2dy57XKI634M.crl (hash: KJ1qGjh/4zmbg4qygtfe7TPR5iHmrua3qWGEmaxR2Wk=)
                          2: 5D1B0906890E11EE90BBB457C4F9AE02.roa (hash: Z8tuadkcRnENS7+vdGGnSHNt+AWHMU724rfNqNBJtFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl
                          rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C10, serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
        Validity
            Not Before: Apr 25 04:02:17 2025 GMT
            Not After : May  2 04:02:17 2025 GMT
        Subject: CN=680b0949-ec89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:3a:91:6a:31:c5:2e:3e:8e:54:57:49:b4:
                    57:d0:4f:0f:66:1c:b5:fc:f6:88:cb:d5:06:51:4f:
                    6a:53:04:22:92:17:05:18:f0:b4:54:4b:68:dd:51:
                    d4:c3:7c:35:c7:62:6c:57:20:7f:d4:c1:2d:0d:4f:
                    e7:72:d0:d6:9f:fc:37:4e:32:6f:7f:0e:33:87:3c:
                    8b:9b:0f:48:f7:3d:33:ef:88:42:86:d8:66:0b:82:
                    21:18:6f:6d:2b:c6:ee:f3:31:fc:08:9b:50:4e:9f:
                    72:95:81:1d:22:b6:1b:86:eb:8c:af:bd:37:68:8e:
                    5a:3f:69:e7:f5:30:35:eb:ff:72:f5:40:da:fe:84:
                    9f:5d:d1:f4:ac:16:27:5d:6e:b5:c7:81:b1:9a:77:
                    03:f1:68:f7:82:04:25:ef:16:02:dc:fe:09:78:c4:
                    8e:c1:52:a2:a3:c7:65:64:22:3d:f0:09:8a:85:49:
                    4c:94:f7:5c:99:0c:03:40:bb:75:cb:9e:7f:93:1f:
                    c4:67:73:6e:bd:b3:2a:be:fa:fd:ab:f9:13:6c:d2:
                    d9:89:cf:11:31:ec:6e:05:67:83:07:b1:0f:10:fc:
                    59:09:58:62:47:c6:e6:c9:d1:d3:8c:b0:fc:b4:12:
                    24:01:95:bd:58:92:68:f0:0f:3b:29:36:f4:e6:53:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:76:74:22:99:DA:FB:7B:6E:07:A8:36:EB:01:C8:D9:9F:BF:C6
            X509v3 Authority Key Identifier:
                keyid:79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:3d:41:a2:97:bd:95:37:83:3a:d4:21:6b:cd:92:a5:d0:
         ca:e2:40:54:b8:71:d3:db:10:ef:50:ea:4e:8b:47:7a:1d:58:
         e3:8c:c0:d7:e5:87:69:1b:fc:56:31:c4:37:7d:9e:a2:7e:59:
         2d:37:e4:1f:4c:5f:20:7c:69:29:0a:fc:e9:df:15:e7:ea:1b:
         76:14:29:62:2c:e7:28:1a:b6:b1:07:32:d1:a0:f0:81:6b:18:
         4a:c9:81:6e:da:dc:b1:fc:e6:50:d2:32:73:de:31:e8:84:76:
         b9:8a:43:97:34:55:ca:ea:46:13:55:71:09:3f:06:63:1b:c1:
         b0:6a:ee:be:e2:7b:d2:3c:3d:45:b2:f8:29:84:18:fa:a9:3c:
         4e:d8:bc:44:bc:e6:45:4c:c5:99:e0:f5:85:6a:33:9d:01:b4:
         a5:c0:5c:6e:5a:00:0a:ae:52:7a:c2:d9:9c:2e:fd:78:c9:0f:
         2d:8c:56:ec:d3:ff:23:94:68:a3:96:7a:86:d7:88:7c:62:5d:
         22:1f:9f:2b:d0:ae:1a:bf:ac:12:4a:3d:98:22:f3:10:c1:dc:
         97:da:83:63:69:48:48:a9:29:fc:ae:52:94:3a:c2:9b:cf:99:
         28:91:2c:75:06:9e:e3:aa:53:b5:83:6e:1b:32:66:b8:9e:e3:
         07:9d:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:34:20 2025 by rpki-client