Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
File:                     0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft (raw, json)
Hash identifier:          3cX5bR91wgIBhEkujfB/+MgjcExwg9THh3/dlRoEEkY=
Subject key identifier:   B4:BE:B8:B8:3A:9D:A0:4F:2C:7F:81:F4:CC:FD:6F:2C:88:AC:D6:22
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Certificate issuer:       /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
Manifest number:          06B4
Signing time:             Thu 24 Apr 2025 21:56:21 +0000
Manifest this update:     Thu 24 Apr 2025 21:56:20 +0000
Manifest next update:     Thu 01 May 2025 21:56:20 +0000
Files and hashes:         1: 0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl (hash: +o07k53MLNjunwlaA0xg0GEjbwcu5P/j3xMoVJNFd84=)
                          2: 9622AF205A5811EBA7FCC36AC4F9AE02.roa (hash: 8i4ad6LrRcxPKcbznzNvi2BM6i3jnmiOquYCkcN8Y1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
                          rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913397F, serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
        Validity
            Not Before: Apr 24 21:56:20 2025 GMT
            Not After : May  1 21:56:20 2025 GMT
        Subject: CN=680ab384-9771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:04:3c:ea:9d:1a:46:d5:3d:9c:76:ce:41:
                    39:be:ef:87:20:87:67:51:26:16:f8:c1:30:61:4f:
                    b5:7e:e9:93:9e:da:71:2f:2f:48:30:ff:10:97:44:
                    8c:4d:2e:af:45:1b:d3:3a:9f:83:6c:e0:8d:e5:83:
                    dd:c4:45:1d:f9:be:bc:0d:6d:97:58:5c:2e:17:ba:
                    2a:bf:ac:34:43:cf:b2:91:cf:e2:f6:7a:65:07:69:
                    e3:f3:6a:7b:fd:35:3e:23:b8:73:62:f2:2e:9d:d1:
                    18:15:a3:c0:c8:79:e8:1d:ef:6b:91:e1:3f:9e:d1:
                    c5:56:19:76:06:fc:9d:69:6a:c2:18:7e:2e:bf:b8:
                    e3:57:33:59:a1:3e:41:a2:8a:f2:24:fa:06:85:3f:
                    43:b2:37:16:29:07:1f:65:dc:fe:cd:5c:71:73:7d:
                    4f:72:29:19:3e:a6:8a:00:4a:fb:d0:e1:73:c0:7a:
                    e4:bf:1d:d7:2b:a8:d7:3d:34:8c:bc:2b:9f:ff:7d:
                    8b:a7:a3:dc:67:62:7a:b2:29:09:9e:b6:17:ef:f1:
                    d7:e7:21:9c:01:67:f9:38:04:75:c1:2c:4a:c5:22:
                    a0:db:e6:53:33:8b:b7:b8:a9:8a:39:88:bc:5c:1e:
                    1b:9b:44:67:9f:6e:f0:9e:d1:e3:4a:17:0c:dd:91:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:B8:B8:3A:9D:A0:4F:2C:7F:81:F4:CC:FD:6F:2C:88:AC:D6:22
            X509v3 Authority Key Identifier:
                keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:66:e3:ab:6b:22:94:bc:2e:d1:ec:96:03:9a:23:76:87:
         d6:0e:f4:9f:9c:bc:18:34:ec:90:66:31:30:69:a0:2f:26:91:
         6d:49:7c:d7:45:ce:27:26:98:71:cb:1a:6e:fe:d4:8b:e2:f1:
         01:a2:c8:42:d8:33:0c:c1:52:88:48:32:ec:24:d0:c7:81:30:
         9c:61:3c:41:04:a8:b0:01:d1:7a:fb:23:82:61:d8:5e:33:c4:
         91:3d:7d:46:0d:76:25:78:59:aa:50:d0:3d:2e:94:3b:18:f9:
         bf:09:78:6e:f2:33:ad:f5:35:cf:cd:30:82:f5:e5:a5:4c:c3:
         db:22:44:1e:2c:da:1a:30:ec:b9:22:98:9d:36:74:72:8a:40:
         22:a7:65:6b:5e:43:65:9d:14:3e:c8:8f:5c:1d:46:6e:17:67:
         64:c6:9d:0f:3b:b6:b9:54:ca:db:1c:2a:1c:08:50:de:8b:17:
         41:78:6d:39:d8:74:77:6a:82:6c:ec:3a:61:84:f3:f9:51:2a:
         c0:14:db:56:87:5c:14:09:c4:cc:83:c1:42:f4:7c:25:76:d1:
         6b:21:6f:17:7a:33:4e:bc:78:93:39:b4:f7:ac:26:e1:34:f2:
         81:87:fa:38:1c:9b:c9:21:99:e3:c8:84:90:1b:37:18:24:07:
         37:26:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:35 2025 by rpki-client