Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
File:                     ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json)
Hash identifier:          /bbG/CPKESNlK/UOJTSB/qa+EcFK5qpxSEXUpIzaoB0=
Subject key identifier:   54:97:62:50:A6:81:08:1B:00:E8:F9:C9:41:2F:56:EF:AC:CD:69:A0
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       03DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
Manifest number:          03D2
Signing time:             Fri 25 Apr 2025 00:22:50 +0000
Manifest this update:     Fri 25 Apr 2025 00:22:50 +0000
Manifest next update:     Fri 02 May 2025 00:22:50 +0000
Files and hashes:         1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: 1AnCrjE+qYPaAF3CX5qx+J6NBRjY7hGTCcDceAacgr0=)
                          2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Apr 25 00:22:50 2025 GMT
            Not After : May  2 00:22:50 2025 GMT
        Subject: CN=680ad5da-d9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:d4:a7:7c:82:25:3f:f1:03:a4:4e:e1:c2:
                    0d:2e:b2:4a:ad:db:0e:2d:af:96:2b:61:c7:38:36:
                    60:a4:b2:c2:44:44:cf:f2:ea:2d:af:cb:65:0c:76:
                    b0:3f:29:a9:ba:2a:8f:e6:ba:cf:5a:82:86:de:e8:
                    3f:51:4e:70:2e:5f:c0:ee:cb:d4:17:dd:25:32:2f:
                    a1:67:c2:16:52:6c:c0:cc:2b:96:60:ee:2a:90:cc:
                    bb:d9:1b:69:6c:2c:28:01:aa:c9:7b:95:06:ce:af:
                    c7:b2:4a:27:ae:70:63:64:71:c0:ca:80:db:23:4d:
                    2f:1f:2f:8c:5c:19:1e:c1:e7:fa:ad:1f:7d:61:fb:
                    59:43:1b:8a:f8:85:07:91:f4:d0:8b:01:e9:70:6f:
                    11:d6:4d:94:7f:6f:d2:4b:17:95:03:70:7b:a9:96:
                    b7:55:3b:f2:a5:83:10:29:94:7f:d2:d7:ca:82:58:
                    c1:ea:df:6a:62:fc:f7:1c:7d:3d:48:6e:70:ac:d6:
                    f0:af:e8:af:1e:2f:5a:98:60:56:f2:a2:82:bd:f5:
                    f8:6b:55:0a:c6:07:a8:0e:1f:98:e0:c9:4f:ad:a8:
                    6d:42:a8:48:91:83:8d:7e:4b:fb:0f:97:28:36:6b:
                    9f:82:7f:98:b8:1c:a3:67:5f:bc:52:bf:aa:fb:ad:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:97:62:50:A6:81:08:1B:00:E8:F9:C9:41:2F:56:EF:AC:CD:69:A0
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7c:4e:b7:b3:da:07:72:e2:26:09:fe:06:91:72:99:c6:9e:
         18:4d:a4:cb:ae:4b:d8:1a:a6:fe:3f:d4:0b:2a:13:fa:56:dc:
         24:5f:3b:08:f6:34:6f:1e:17:36:9b:04:a6:13:1c:a9:2c:f5:
         c2:45:18:88:6e:df:57:7e:b7:d9:e6:dc:68:af:9f:10:89:26:
         1e:58:08:e5:5e:49:a3:7e:30:5f:aa:3c:77:ab:e4:03:fe:e4:
         8e:43:fa:22:b0:eb:2f:05:33:52:7c:3d:a8:b3:c0:dc:a5:45:
         04:63:d5:b2:c7:c0:9d:00:5b:32:48:af:c3:21:bb:5e:6f:af:
         6e:84:9b:aa:08:82:5b:08:70:34:ba:c5:46:fa:ba:de:9f:f6:
         26:04:80:08:5f:45:4a:94:3d:0a:cd:6a:f5:5f:01:64:d6:5e:
         49:fd:52:bc:12:f4:cd:85:ff:2c:d6:50:f6:c3:2e:a1:6e:4f:
         ac:ec:73:29:74:b1:8b:15:1b:19:97:63:23:f2:1f:0f:f4:78:
         e9:fb:45:5c:ba:c9:a1:44:3c:b8:6a:de:14:cc:4c:e2:c6:22:
         b4:00:0e:9f:bc:37:63:19:80:10:9d:79:e7:8b:66:38:a5:ed:
         00:6c:ed:72:c9:7a:1f:b6:7a:9f:77:54:c8:c1:f3:a0:d2:b6:
         c0:15:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:01:31 2025 by rpki-client