Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
File:                     erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json)
Hash identifier:          yj7jjClc0OsVO/upYhJ8acCLdOn5JEL4uZHZPBdsW48=
Subject key identifier:   6F:B1:F3:90:0D:2C:29:E9:43:78:C1:95:5C:1A:E9:70:D8:D5:7A:23
Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
Certificate issuer:       /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
Manifest number:          19
Signing time:             Fri 25 Apr 2025 06:59:08 +0000
Manifest this update:     Fri 25 Apr 2025 06:59:07 +0000
Manifest next update:     Fri 02 May 2025 06:59:07 +0000
Files and hashes:         1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: SpijqfqU/eezpJL56vUbH24Z27riUVSu/8H3H3/lego=)
                          2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: eiqihH3alG4cpxSKP/Yj1LxkWhK+ibmojtLolUx4Bhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
                          rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
        Validity
            Not Before: Apr 25 06:59:07 2025 GMT
            Not After : May  2 06:59:07 2025 GMT
        Subject: CN=680b32bc-0afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:1f:b5:d9:ab:c8:12:4e:63:89:9a:0b:23:
                    82:c1:ce:27:64:b7:42:0a:9f:e2:e7:18:7b:97:3d:
                    01:9d:97:5f:40:60:ff:57:96:d9:d8:79:3a:fe:72:
                    14:1c:26:06:f4:91:90:35:5e:fb:e6:4f:8e:c7:e0:
                    27:42:e6:ab:b8:3e:75:d1:e0:64:f6:45:f6:34:85:
                    cf:a6:ad:2d:b0:18:ac:f3:19:7e:5f:49:2b:16:09:
                    b3:50:e9:67:d5:4c:33:ba:c9:10:2e:0e:95:5d:72:
                    04:47:bd:b3:f0:b3:7f:5a:57:2e:a0:33:b5:35:61:
                    d3:49:07:90:4b:16:c2:6c:c3:20:77:95:88:79:c8:
                    d7:bc:01:b3:26:46:b9:14:e7:9f:ee:4e:d7:78:e1:
                    10:36:c9:c0:e9:bb:c1:97:8e:6a:3a:b8:97:54:0f:
                    c9:2a:24:ce:bd:54:17:4e:b5:13:9f:df:21:07:9a:
                    d8:a7:02:38:13:5e:3e:6f:4e:e8:39:fb:e5:5e:d5:
                    4b:44:e2:75:63:42:e7:2f:76:b0:0b:15:ea:e2:0b:
                    71:a8:27:c8:b6:74:0f:ab:c5:9d:2b:ad:2e:54:74:
                    0b:2f:36:b1:32:80:d6:50:59:82:b9:5b:40:e6:47:
                    7f:45:29:f1:58:f5:c5:84:fb:80:41:f9:e8:69:13:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:F3:90:0D:2C:29:E9:43:78:C1:95:5C:1A:E9:70:D8:D5:7A:23
            X509v3 Authority Key Identifier:
                keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:1e:95:e2:71:f2:1b:dd:95:ae:4b:d0:00:2a:f2:41:fd:
         05:52:5a:3e:c3:f1:4b:75:90:b6:ba:6c:52:f6:89:3c:f2:25:
         c5:11:77:b1:ce:60:b3:f4:ef:33:9b:3e:14:4e:4c:88:aa:7f:
         e2:fa:7d:2e:3b:2b:e5:7f:0d:34:c2:f4:1c:f5:ad:b9:6e:2c:
         d6:60:81:b4:f3:df:56:9f:4f:44:cf:2b:6c:89:b2:7d:f5:d4:
         fb:44:c1:d9:2e:fc:23:90:e2:4a:ba:bc:c4:9f:06:1f:48:59:
         2a:a2:a4:8f:65:18:7d:1c:9e:85:f7:66:a7:75:37:e3:cf:7e:
         ce:f0:59:9c:c4:36:e7:c9:4d:a1:09:c7:b1:f9:8d:5d:bc:f1:
         21:8a:31:27:ff:2d:5a:a6:8b:a3:08:2a:df:65:31:93:cf:d3:
         26:f0:7a:df:f5:2f:c3:15:0e:7c:88:16:29:b3:a4:b1:35:d2:
         fe:59:ce:32:cc:c7:20:68:76:ad:8f:68:75:a9:ba:73:05:64:
         4a:d6:83:dd:33:a5:36:1f:56:b7:3c:56:91:3b:6f:9c:c6:86:
         41:3a:b9:80:da:2f:72:b2:3e:21:a2:7a:07:6f:ae:88:6c:71:
         8f:64:1f:b5:4b:1b:68:f6:c2:3b:6d:cc:20:b8:94:31:85:2c:
         b9:76:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:03:30 2025 by rpki-client