Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File:                     KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier:          9CkSRi0Cq4NWk0CRGEZ597TH8fyjTug9Acm4cqSk5S0=
Subject key identifier:   70:73:12:0B:94:F6:3A:A9:98:CB:DB:24:83:6E:78:BF:52:53:9B:58
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer:       /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial:       02CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number:          02BE
Signing time:             Fri 25 Apr 2025 01:11:15 +0000
Manifest this update:     Fri 25 Apr 2025 01:11:14 +0000
Manifest next update:     Fri 02 May 2025 01:11:14 +0000
Files and hashes:         1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: yB4soMPmskIqiQT9aYewt8o4IFlU1FOBSFNCTRs4mG8=)
                          2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI=)
                          3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: HZusuoH1up8FDoOQyhT/1qoC+ff/aBBAonRcZ28YjMI=)
                          4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Eku/YHWxKxpsRX6ogTNh3LDNRp5rXVLPBXYqCNfR56g=)
                          5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 3ncZT46pze+jMf4M4LYzFO82k2evN1uShAP1OkhdIKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
                          rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
        Validity
            Not Before: Apr 25 01:11:14 2025 GMT
            Not After : May  2 01:11:14 2025 GMT
        Subject: CN=680ae132-3df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:05:33:c6:c2:df:75:df:d0:56:a6:fd:bb:
                    98:64:1d:5d:63:e8:c1:1b:c5:28:ef:d2:a4:5b:b4:
                    7c:31:23:6d:f8:fa:7e:07:62:a6:28:ad:5c:51:7c:
                    bd:6c:50:7c:05:a3:99:4e:f2:10:1f:25:95:ba:31:
                    ae:2c:19:87:c1:69:8f:3c:c6:b2:92:7e:fc:24:c9:
                    c2:49:db:39:f5:aa:de:4b:6c:7b:47:db:89:af:db:
                    b1:2a:84:1c:89:a2:31:0e:78:56:ff:50:e4:68:34:
                    e9:86:83:6f:65:60:cb:6b:df:5c:2e:68:d1:f0:bb:
                    27:5b:88:3b:4f:da:cf:29:d8:12:9e:e6:77:60:c1:
                    c8:4d:4e:4a:16:52:23:0b:3b:d1:da:2e:30:f2:4f:
                    e1:f6:17:67:77:3c:1b:bd:22:b6:32:d1:c6:9e:88:
                    99:5d:23:f3:20:d3:78:23:2a:67:8f:48:cf:18:25:
                    a2:ae:a7:2e:b2:78:c8:be:24:a2:dc:97:53:82:39:
                    fe:b3:64:bc:54:b4:94:13:a1:56:4f:fd:1e:1d:e9:
                    87:a0:cb:5a:29:5b:48:cb:0a:f8:89:b5:a8:79:4f:
                    f5:ce:19:c9:c5:75:fa:53:a7:ff:1f:9d:66:d9:42:
                    d9:ae:1d:c7:c3:3c:a9:4f:12:7c:ff:e6:35:6c:f6:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:73:12:0B:94:F6:3A:A9:98:CB:DB:24:83:6E:78:BF:52:53:9B:58
            X509v3 Authority Key Identifier:
                keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:6c:c7:29:4f:41:a2:41:d2:80:21:4e:20:d1:e1:39:df:
         93:b9:b3:91:f9:76:a1:71:5d:ac:1b:f4:5e:44:2e:45:f3:68:
         aa:48:78:09:64:20:e2:60:34:52:46:23:d4:83:51:7b:d5:de:
         bd:51:50:2d:fa:25:df:7d:5f:ce:b0:38:ad:a0:46:0c:ab:f1:
         cb:04:6b:ea:f8:93:d9:72:6c:d7:f8:f8:8c:05:48:c0:85:4a:
         84:73:ce:b4:ab:1c:0d:88:a4:25:9a:a8:af:2c:e6:9f:95:24:
         2d:ca:2c:83:f1:35:e5:56:c1:fa:36:26:17:a8:1e:64:4b:9a:
         e2:e0:f3:45:f0:31:ef:b7:55:da:e5:5a:38:d8:02:b2:40:4f:
         ff:9c:ee:77:50:ad:42:d4:12:49:3e:06:b5:dd:66:7d:f4:9f:
         c4:73:d8:60:d6:dc:43:cd:6b:c1:01:ac:a1:3c:c5:1a:8f:4f:
         df:fd:58:da:e7:b4:ab:48:f5:3e:4d:56:e8:61:c7:1e:79:1b:
         e0:a6:76:4b:2f:58:20:b6:1d:e6:3c:b4:8e:5f:8d:bc:9d:52:
         ed:85:a1:84:b0:68:e7:90:76:f5:5d:af:61:41:ce:a5:65:75:
         0a:24:9f:36:d2:1a:af:c8:fe:20:7c:75:04:95:96:c1:a3:56:
         c3:bf:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:21:57 2025 by rpki-client