Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
File:                     _7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft (raw, json)
Hash identifier:          w2T0YzRDXB7KoAO7wnX3F5ynfnmoIAnIgfaoqOB46J0=
Subject key identifier:   F1:FD:E7:D6:AF:32:15:87:5B:EF:14:4F:B1:85:38:6E:31:AB:98:5B
Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64
Certificate issuer:       /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
Manifest number:          061E
Signing time:             Fri 02 May 2025 22:54:55 +0000
Manifest this update:     Fri 02 May 2025 22:54:54 +0000
Manifest next update:     Fri 09 May 2025 22:54:54 +0000
Files and hashes:         1: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl (hash: jFm86yocZ50B+0/gV1F3O+CagleKQF5DyhxD+rANi5Q=)
                          2: CE7287309A9811EBAC99AD22C4F9AE02.roa (hash: VNVV+MtZbRQoHTpqnT0qQ5QpoY/GhvN/UD4lPsIWN/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 22:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
        Validity
            Not Before: May  2 22:54:54 2025 GMT
            Not After : May  9 22:54:54 2025 GMT
        Subject: CN=68154d3f-42cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:05:21:e9:fa:81:dc:be:01:98:98:c8:c4:
                    9e:98:2c:5e:aa:eb:1c:58:b0:c0:15:90:ad:98:f9:
                    74:48:7a:cb:3d:06:50:50:09:aa:41:3b:97:6a:38:
                    9e:52:e0:b5:c5:9d:02:a3:16:bc:51:d0:46:77:45:
                    c6:b1:fa:1f:47:15:a9:47:20:b1:b7:5c:db:cc:da:
                    1b:56:f7:4b:ba:11:2a:df:87:cd:06:b8:d5:80:8b:
                    1c:f6:cc:69:12:fe:60:a8:1f:9b:6e:51:cd:c7:fc:
                    70:94:e0:16:f4:4e:fb:2e:2c:68:bf:e8:91:33:da:
                    c2:b1:3f:05:07:53:be:a9:8a:fa:16:d6:f9:1b:00:
                    a5:47:16:83:f8:6e:76:fa:4c:37:3d:68:f0:00:31:
                    86:63:15:ba:3e:2c:97:8e:e1:c2:0a:b9:c3:73:e1:
                    8c:b9:bd:de:75:4e:e7:66:5a:76:ca:51:34:8c:f3:
                    2e:22:dd:9d:a3:7f:b8:54:c4:b5:9b:2f:06:53:60:
                    35:3d:73:f4:d4:d4:80:c1:1c:2d:df:32:ce:8f:35:
                    6d:6b:01:2d:d8:ac:f0:cc:9a:a1:9a:e9:5f:d5:63:
                    dc:33:5a:8d:0b:43:9d:9a:b3:51:4b:76:6f:92:1c:
                    22:2e:23:e7:68:d0:f7:02:10:40:ae:bd:5a:42:f5:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:E7:D6:AF:32:15:87:5B:EF:14:4F:B1:85:38:6E:31:AB:98:5B
            X509v3 Authority Key Identifier:
                keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:30:b8:62:df:ce:94:1a:d9:62:b0:02:97:fb:94:84:6b:28:
         cd:f0:cc:3d:63:58:33:a4:20:59:c1:7e:16:7f:54:2e:4e:ee:
         fb:ec:d5:cd:8f:4f:8b:bd:32:89:1d:59:3b:50:53:63:c8:ba:
         20:ec:9b:8b:21:3e:27:b5:16:fd:e8:97:b2:36:be:ba:66:79:
         b4:16:b1:13:ba:eb:62:4f:4e:ee:94:de:d6:ec:bc:9c:3a:34:
         59:d5:75:75:31:a3:30:6b:9d:e2:c6:e0:ff:90:b1:b3:31:02:
         50:5a:54:7e:1e:76:0e:46:2c:db:50:f5:bb:2d:6e:48:a9:3a:
         e6:b4:ec:d5:9f:22:c6:a6:f9:c3:48:c8:ee:0d:3d:ec:e4:18:
         ff:54:1c:e0:73:73:97:0f:fe:0f:44:c5:e8:1e:b6:2b:f6:a2:
         9e:2e:25:0d:03:36:3c:61:b9:06:5f:54:43:3c:7a:6a:62:f6:
         3b:f5:c5:7b:5e:1d:08:8a:63:9c:e7:df:aa:5a:8f:36:c0:24:
         69:f1:8a:c3:41:c8:9b:31:22:bf:93:47:81:de:57:48:ff:3d:
         b8:75:0f:f3:f4:c5:8b:53:ae:3d:ee:57:d9:91:6b:05:f8:69:
         11:32:58:35:68:3e:f5:f5:ad:c3:fd:99:4f:4e:35:47:c9:04:
         8d:86:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:22:06 2025 by rpki-client