Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
File:                     v_236_RdfGG_nSOQip84wzKYWXA.mft (raw, json)
Hash identifier:          xyW6xzKtQrdiVDP4577RCTFW0dqVzK8JJwUgGhPtyGA=
Subject key identifier:   D2:10:4B:45:F6:94:39:CF:AE:42:6A:C1:6D:92:61:42:6C:5B:38:EB
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Certificate issuer:       /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial:       18F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
Manifest number:          18E3
Signing time:             Thu 24 Apr 2025 16:28:19 +0000
Manifest this update:     Thu 24 Apr 2025 16:28:18 +0000
Manifest next update:     Thu 01 May 2025 16:28:18 +0000
Files and hashes:         1: v_236_RdfGG_nSOQip84wzKYWXA.crl (hash: 7sy3TgwekxslaIPy3hTYzGtl0u8UZMkHUh+LuE+qoC0=)
                          2: 8732232CCBA011E887F87451C4F9AE02.roa (hash: d4g6nOFA6rT76ss8TIfPVoSl8yk4nYFL3JBknIEAxA8=)
                          3: 62B6389287C211EE949BAE7BC4F9AE02.roa (hash: olDXMZkGA0r/qNiSe03tThyIk85/feQoUgNKftYserc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
                          rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6393 (0x18f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
        Validity
            Not Before: Apr 24 16:28:18 2025 GMT
            Not After : May  1 16:28:18 2025 GMT
        Subject: CN=680a66a2-1ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:ea:1f:78:fc:ad:ea:45:e0:11:2b:39:8f:
                    46:e5:4b:a8:b8:76:05:a8:de:bb:1d:5f:af:ad:70:
                    16:f3:bb:77:46:a8:da:85:c1:3a:f3:65:ac:51:84:
                    cc:42:2a:ec:c9:1c:52:e6:39:62:09:92:02:30:a9:
                    8d:d9:81:28:de:dc:8f:73:0c:28:6d:19:37:27:c9:
                    c3:81:01:d6:93:08:19:49:fa:ee:22:c1:e9:11:fa:
                    07:a3:93:2d:6a:79:62:72:bf:e0:5a:c8:68:34:ee:
                    46:a8:29:f0:95:d2:10:3c:4f:15:99:81:de:f9:a5:
                    96:90:e7:ea:8d:69:aa:8a:e2:3e:72:7b:d1:76:d0:
                    4f:d7:c6:a6:6a:d9:0c:44:f0:63:0e:b7:e2:56:22:
                    3b:34:13:8a:b6:b9:b1:23:71:a4:67:38:47:7a:83:
                    19:6c:6b:4d:e4:d8:5f:f9:59:c9:80:dc:37:cd:0e:
                    b9:b8:33:ba:4b:16:2c:f9:62:32:f4:5a:14:53:64:
                    6b:70:40:e1:a3:ce:40:33:8d:a7:1e:19:bd:c8:fa:
                    74:40:29:33:e4:65:3c:68:a1:55:9f:ab:81:7f:3e:
                    3a:d0:56:ca:e2:b8:ab:70:14:47:05:36:f3:85:11:
                    f2:ce:46:14:69:e7:5a:2d:17:89:7d:08:1d:36:46:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:10:4B:45:F6:94:39:CF:AE:42:6A:C1:6D:92:61:42:6C:5B:38:EB
            X509v3 Authority Key Identifier:
                keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4a:2d:66:df:19:65:f8:c0:72:53:39:c4:c5:57:b3:1e:35:
         65:6f:94:91:a2:38:05:f9:b8:5c:af:4f:bf:21:20:34:0d:79:
         2c:87:f0:84:ef:79:a1:e4:32:ab:cb:6c:85:3a:14:14:71:54:
         a3:96:fc:bc:57:46:0e:3a:fe:ad:98:dd:44:2c:0c:90:77:d8:
         16:fb:cd:c3:2a:48:42:9a:b3:3e:61:81:cf:ad:d8:fe:63:5a:
         33:76:ec:ea:6f:85:52:1f:1b:82:d1:3d:9b:1f:2d:64:9d:c5:
         66:aa:a0:da:94:e3:f9:90:4b:b7:55:a1:86:1d:17:76:9f:56:
         35:c4:44:7c:d3:0b:73:da:74:ee:ae:d7:b3:dc:e4:c6:c4:49:
         be:7f:84:cb:d2:78:54:08:a0:e9:30:b7:58:8a:e1:22:90:5d:
         c8:20:eb:e1:a6:a6:c4:c9:c9:7f:35:52:8a:47:8a:28:b5:f2:
         2a:fd:81:71:15:ce:05:08:65:03:73:b6:c2:e0:8f:45:3b:ac:
         df:84:d1:c7:95:66:d9:f7:4b:66:1a:82:c5:6b:5e:68:25:c9:
         b6:f4:2d:8f:5b:58:12:17:19:0e:2b:e1:c6:e1:92:c3:fd:94:
         f0:fd:e9:3c:29:e5:2a:8c:d8:cd:40:3a:d6:e9:67:95:f8:8d:
         fb:4d:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:46 2025 by rpki-client