Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File:                     a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier:          ypVYreAwKoNDNPmSj+/zT0PuqPzw07hmxEN5umofUgw=
Subject key identifier:   24:05:E2:BE:56:9F:18:52:CE:45:64:EA:23:B1:E8:19:65:02:E6:35
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer:       /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number:          0168
Signing time:             Thu 01 May 2025 02:54:06 +0000
Manifest this update:     Thu 01 May 2025 02:54:05 +0000
Manifest next update:     Thu 08 May 2025 02:54:05 +0000
Files and hashes:         1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: JNAFOSMz68qXN6f6Lu0cmWSlFaaXNt4jEAI/zwAGqTs=)
                          2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: 5chjhG+4S2xwB6V67WC6HZP171qygBdUyTwykp33M5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
                          rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 May 2025 02:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
        Validity
            Not Before: May  1 02:54:05 2025 GMT
            Not After : May  8 02:54:05 2025 GMT
        Subject: CN=6812e24e-0ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:ea:8b:05:6f:17:34:80:72:01:3b:e4:ad:
                    7d:b4:f6:fd:e7:b7:a8:52:02:fd:8d:29:5f:a5:95:
                    bf:18:6d:9e:5e:e0:2c:bc:03:a9:74:d6:93:87:15:
                    4e:3e:64:d7:0c:41:0b:7d:d1:47:e6:7e:3f:b2:25:
                    80:07:99:5a:ef:85:50:8c:2f:3a:42:c4:64:6c:9d:
                    2d:65:2c:bf:d4:aa:0a:31:5b:f1:71:f5:c2:a8:ac:
                    ff:21:8c:08:dc:63:95:4c:8d:b2:57:6e:a6:d1:1e:
                    b3:fe:ea:a9:c8:05:80:a2:9e:7c:ca:04:4c:e7:aa:
                    6b:ce:32:40:77:07:a2:2d:fd:e0:71:e0:7d:6d:f5:
                    dc:ac:e2:06:d0:58:8f:b4:32:bb:a1:64:81:62:bc:
                    58:f3:a4:83:3d:dc:71:7d:2c:c2:52:59:f2:93:bf:
                    b0:42:93:50:17:d0:24:21:e6:67:a9:e0:ff:13:89:
                    57:8e:4a:b7:3c:8c:17:b3:0a:cf:ea:ce:d1:bf:ba:
                    f7:25:95:6b:b5:eb:dc:fc:b4:08:92:e9:34:53:53:
                    86:d5:9b:e8:d0:57:f1:83:99:06:c0:c2:60:25:d8:
                    65:69:21:e3:ee:2c:d0:32:66:ac:47:f2:62:b0:29:
                    16:99:e6:6d:2e:0d:3f:6d:f6:97:ff:2a:22:29:4d:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:05:E2:BE:56:9F:18:52:CE:45:64:EA:23:B1:E8:19:65:02:E6:35
            X509v3 Authority Key Identifier:
                keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:6d:b1:cc:b8:c1:8b:13:f1:fd:ff:46:5a:07:a4:90:ed:
         c5:10:4e:19:d6:56:17:b1:97:0a:57:42:0c:da:93:92:51:00:
         c5:e0:be:d4:8c:4d:98:e6:5a:06:82:a7:30:06:4d:20:f2:1e:
         0e:88:a5:d2:6d:59:49:fa:4e:07:b2:7b:2c:85:d9:84:49:3b:
         d6:1d:cf:31:ef:f9:69:27:1b:83:52:a3:a8:96:bc:15:ab:16:
         57:cc:1e:a6:13:f8:a1:ea:c6:40:60:91:f2:17:d5:95:e1:4a:
         00:75:63:1b:d8:50:a9:77:ea:93:f4:47:47:c8:03:37:d6:36:
         3a:5b:66:c6:d6:20:bc:64:32:8b:10:40:94:16:7b:aa:91:bf:
         54:4f:0a:ed:77:e9:e5:52:5d:a9:4f:08:7b:c3:62:00:bd:f0:
         4d:1f:75:37:a4:ea:7b:7b:a1:14:77:2e:43:51:48:75:ed:c9:
         6e:b2:b5:63:02:bb:66:ad:05:c6:b8:6d:67:50:ca:99:9e:9f:
         73:13:c5:5e:8c:d3:6c:21:16:de:25:ba:23:31:10:09:7d:ee:
         40:a6:5d:c5:4f:ad:43:15:fe:e0:c0:37:68:c1:2b:d6:fc:66:
         cc:44:32:7b:f5:13:0c:a3:16:be:c0:e8:7b:df:8d:8c:45:ba:
         bb:00:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:58:40 2025 by rpki-client