Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File:                     1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier:          /Qb4QNSn4TpLZxsUOPzBdxx1gOSt3pSBmb9uFQ7BosQ=
Subject key identifier:   BB:B3:85:D2:84:C0:5F:99:2B:04:80:DD:80:A8:59:28:B7:DE:4A:B8
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number:          F7
Signing time:             Fri 25 Apr 2025 04:24:28 +0000
Manifest this update:     Fri 25 Apr 2025 04:24:27 +0000
Manifest next update:     Fri 02 May 2025 04:24:27 +0000
Files and hashes:         1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: UH9RF/KVCkm4keJhlD7AY0LCaUA78W2RFszUd4cu56Y=)
                          2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: kortXzDV3z8yqdb7hUTvSq2L5JWGq27VKKVJ2FtpSxc=)
                          3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: rRm+rUr3qcN16z/Oqf9uTNEkdYMxgFxb6sxz/dypYvc=)
                          4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: 5gm1wj46SXJPZC1pKKhppvpQZgvvcitCu8i+WN1ATKA=)
                          5: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: O9tYO6kupKQU9ptuAQl06h/ZNlTFKl9W/lRHr1Y6j4E=)
                          6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: vihfleeETh6RhPkPr9fPr5Gym7kQ9gHXsPSD/cQHxVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Apr 25 04:24:27 2025 GMT
            Not After : May  2 04:24:27 2025 GMT
        Subject: CN=680b0e7c-3c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:ef:c7:d0:32:83:8c:3a:03:90:72:9b:2e:
                    04:e1:70:d8:a5:23:09:ab:10:e6:45:40:8e:91:92:
                    58:12:24:78:40:ac:df:b0:a5:de:c4:6d:19:b2:9c:
                    e7:5d:80:16:2a:d4:24:ec:42:a3:2f:b8:cd:d9:77:
                    e3:dd:6a:43:cb:c3:34:6b:b4:86:6f:95:bc:cd:5b:
                    8f:62:87:6a:06:3d:42:bb:cc:06:ef:32:95:ae:af:
                    29:38:4b:9f:c7:62:7f:b4:1b:db:a6:52:b0:ce:14:
                    38:28:db:92:cc:34:97:79:2e:33:8b:9c:09:ce:77:
                    f2:89:36:7f:c6:57:1c:7f:05:c9:c4:5f:a4:7b:22:
                    e2:be:ea:68:2d:29:ef:92:c2:46:92:c0:d0:ec:73:
                    18:3d:ed:e2:f0:fa:64:35:49:85:40:ef:33:79:2c:
                    36:b5:9e:1a:1f:a7:7c:99:36:5c:89:c5:6c:79:12:
                    0e:8b:79:6e:45:60:8f:45:7c:60:60:1e:77:6f:76:
                    91:c2:de:2d:a2:6c:4b:8d:16:91:f9:20:9b:42:0b:
                    8d:df:f0:93:29:63:52:f4:83:e3:fd:34:49:c0:4c:
                    52:7e:2c:5e:a3:52:5d:3b:2f:3d:20:a9:87:5e:2d:
                    bf:22:2b:65:6b:48:dd:29:f9:9a:7a:69:2b:f7:83:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B3:85:D2:84:C0:5F:99:2B:04:80:DD:80:A8:59:28:B7:DE:4A:B8
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:97:e4:f7:b6:71:0d:77:60:98:e1:1a:ad:ad:76:f7:55:
         46:35:b8:a1:5c:38:b2:59:c7:26:cd:a5:1f:bd:58:aa:d8:d1:
         a8:f3:5a:98:c5:ab:50:02:2b:b7:e8:9a:46:3e:fc:aa:33:82:
         f5:54:12:8c:09:bc:a5:2e:3e:e2:47:10:09:5b:66:d3:24:73:
         2c:ed:f2:16:b4:e0:13:2c:83:66:67:a6:b9:57:a5:06:2b:c0:
         c9:84:2c:2e:fd:96:ef:7a:e0:b5:21:33:36:17:b6:fb:e8:f3:
         8f:60:bd:c9:89:30:53:40:e5:b7:0c:b6:81:1b:34:ca:7c:d2:
         50:f9:de:d1:5c:ee:04:f9:5e:f0:bb:b4:a1:d6:10:0d:b0:a6:
         12:42:e9:62:51:39:09:b4:08:f5:45:dd:38:33:d7:f8:8d:f5:
         7a:ce:cf:cb:6c:7f:6a:96:3b:55:a3:88:d0:f2:7c:29:c2:8e:
         ef:ca:94:01:80:af:08:fb:d8:ba:d3:fb:38:4b:22:24:ff:b0:
         e1:99:4d:01:de:bf:21:4d:bf:b7:70:fc:fa:8b:a9:a4:0e:e0:
         2f:ac:bd:f6:a3:d9:d1:de:9c:7f:90:fd:f1:72:a5:56:d9:7c:
         07:7c:e8:f4:67:21:57:ff:b4:60:34:b7:ad:51:ad:75:db:17:
         19:81:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:09:02 2025 by rpki-client