Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
File:                     dK62Py8dqVfWWCCWT_ed8PWTgAw.mft (raw, json)
Hash identifier:          bUxFI2MLCe+P0LbWGILh6GAsfq4UzWJT2DXAIH45zfA=
Subject key identifier:   BB:CD:A6:41:C9:D3:AD:87:15:A6:4F:1E:D4:7C:4D:75:04:3E:47:1D
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
Manifest number:          0227
Signing time:             Fri 25 Apr 2025 01:49:15 +0000
Manifest this update:     Fri 25 Apr 2025 01:49:14 +0000
Manifest next update:     Fri 02 May 2025 01:49:14 +0000
Files and hashes:         1: dK62Py8dqVfWWCCWT_ed8PWTgAw.crl (hash: EGXLFz7qdf+PiwA7YRYJwLzsVkzAA+PO0e14pb8dQDI=)
                          2: 73FB6A56C81111EF84B47370C4F9AE02.roa (hash: rLG/37V+Ay9Dg6BnPVD6CJi+pJih1xEKl0lgY1diAvI=)
                          3: 4A82F578377111EDA5C68B0DC4F9AE02.roa (hash: crvAWfSU4cUDblQBIJE2EpNRvqCqivyWgcP1Unt1EK0=)
                          4: 49CA1D50377111EDA5C68B0DC4F9AE02.roa (hash: FxlXMb1VDjKPp2gvaZUru1qfhHQyZGjKWzaIqCuCA0o=)
                          5: 1E5E9AEAC81211EFB612B471C4F9AE02.roa (hash: ta3kqZ6slZkLymJ1Y+FGbOuuzC0KBODU2j3d2RnD6NM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Apr 25 01:49:14 2025 GMT
            Not After : May  2 01:49:14 2025 GMT
        Subject: CN=680aea1b-0cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:45:4c:20:c8:39:f2:38:e3:aa:1d:b6:fa:
                    fa:c0:89:9c:77:33:0d:fc:35:42:51:4c:42:85:1b:
                    fd:d4:e6:db:5a:91:6f:cf:e4:fd:43:bc:9e:9c:6d:
                    65:10:23:ed:fe:83:25:5e:77:07:0e:fe:d5:26:1c:
                    cb:7e:98:57:13:4c:9a:be:17:6b:09:44:03:8a:b0:
                    40:a2:b4:2d:47:e0:e6:ad:72:78:49:8b:cf:4b:50:
                    45:eb:d1:1e:b1:f5:35:6e:29:80:5b:a0:b0:5f:07:
                    72:bc:f9:d6:06:47:9d:00:fa:c9:cf:8b:9c:96:75:
                    ad:3e:da:2a:06:04:c6:ab:08:ee:b7:39:25:7e:d9:
                    80:49:c8:7c:9a:4b:d1:74:21:b0:44:dd:06:3e:0c:
                    c5:34:d3:5f:b4:f7:a3:36:31:4b:3e:f8:05:6a:8e:
                    93:55:ca:c7:31:19:18:eb:7f:0b:05:ab:5d:ef:97:
                    14:aa:40:a3:99:48:0b:e6:1c:74:d8:8a:49:e9:e3:
                    84:27:82:f4:eb:05:7b:41:93:fb:84:22:dd:4d:b5:
                    08:5f:6f:d1:00:7c:db:98:4d:02:f1:6a:31:79:58:
                    b1:42:2b:fc:9d:79:a3:5a:8b:88:05:60:2e:07:93:
                    c9:e0:5a:cf:df:56:e5:d9:20:e6:0f:40:d6:d8:89:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:A6:41:C9:D3:AD:87:15:A6:4F:1E:D4:7C:4D:75:04:3E:47:1D
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b1:64:b3:1f:2b:f0:e2:b8:6a:0d:41:20:b5:85:68:6e:27:
         e0:3c:5c:8e:40:e8:01:36:31:26:a4:83:6e:e0:73:04:be:4e:
         81:ba:ab:b2:48:8f:88:2a:ce:db:50:39:f9:17:81:7d:e0:00:
         6b:f2:8f:f3:b4:ad:50:77:05:a4:c8:01:4e:dd:c1:dd:1d:3c:
         86:c6:c8:8d:b6:7b:f8:73:29:bf:0b:be:e2:d9:9a:2c:ab:15:
         2f:92:13:d3:e3:be:ee:89:44:dc:fe:d0:84:66:1e:74:5d:58:
         dd:5a:74:52:a9:64:ab:60:70:48:c4:98:95:0a:84:c7:86:19:
         3b:93:84:e8:ba:59:24:a8:e0:25:ed:90:a0:e4:04:13:3e:d4:
         ba:b0:46:e2:d2:01:08:1a:db:ee:6d:e5:ec:9e:75:28:6b:97:
         17:55:1d:8f:20:2c:24:ab:1d:a3:5b:2e:04:9f:98:57:fa:f3:
         a0:e6:b6:71:69:45:bf:8e:7a:a1:09:e5:b0:82:6e:6c:ec:41:
         73:4b:14:e3:43:fe:b4:8d:05:8f:1b:21:05:e8:57:92:2d:2e:
         a5:0f:24:76:67:aa:70:a7:a2:7f:b3:ae:56:e3:6c:39:bc:72:
         55:6a:b3:40:bc:89:86:ca:7a:03:9d:f1:8f:b8:1d:bd:f6:8c:
         5a:7e:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:50 2025 by rpki-client