Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
File:                     NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json)
Hash identifier:          hiWaq/2S3LqIo1IClxxt3pExXA4RdC2N1VvLnhPCJ10=
Subject key identifier:   9E:18:4A:B0:B6:74:18:B7:24:75:A4:09:DA:92:FF:43:61:0E:A1:B9
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Certificate issuer:       /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial:       0A01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
Manifest number:          09ED
Signing time:             Sat 26 Apr 2025 19:42:47 +0000
Manifest this update:     Sat 26 Apr 2025 19:42:47 +0000
Manifest next update:     Sat 03 May 2025 19:42:47 +0000
Files and hashes:         1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: //VZN03NMW4ZW9+5x2v5oD12L6QZePIzvM33+w+GAmQ=)
                          2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: menbjtgG3OL9FP2gHIv3HpKwGpwOaKUkt24pbDLYnNA=)
                          3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: bMJemH5ceUwe7SSoHueO95SQnaFhnEbPA4cUZ9QObys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
                          rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2561 (0xa01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
        Validity
            Not Before: Apr 26 19:42:47 2025 GMT
            Not After : May  3 19:42:47 2025 GMT
        Subject: CN=680d3737-4044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:03:3d:76:5d:2e:46:03:d7:c7:71:12:53:
                    35:0b:2e:10:d0:44:d1:da:48:4a:cc:42:4c:2b:ed:
                    94:08:c1:5f:d5:eb:61:36:72:c1:12:b8:bf:f5:53:
                    34:ab:5a:7d:1e:84:80:c7:4d:b2:de:a1:99:ec:8e:
                    9f:61:94:9c:5e:da:a3:9d:7c:3a:f6:f2:43:ba:21:
                    48:15:e7:3d:4f:4e:4c:42:43:cb:db:f6:ee:f8:9a:
                    69:ca:0a:d2:9d:62:a3:1e:cc:d1:c1:c4:6b:0f:28:
                    16:5a:d3:80:de:36:cb:b9:6a:ee:b8:a4:71:1d:12:
                    87:d3:c1:29:62:f9:f0:a9:f6:a8:87:0e:85:1f:07:
                    0a:83:14:1b:39:d8:c3:1b:a0:60:f7:1d:a3:76:f0:
                    2e:42:41:8e:2d:bf:94:35:cb:be:ad:ba:f2:92:80:
                    87:9a:75:a4:9b:d2:c8:2c:e4:48:5c:cb:4f:f3:a6:
                    78:7d:7c:60:16:38:e5:3a:45:19:2f:7a:a0:80:8c:
                    d8:b1:da:63:5a:a6:c2:c3:f0:21:5c:d5:0b:df:16:
                    8f:e8:7a:d1:33:7a:cc:1b:a5:9c:dd:1b:b6:52:7c:
                    41:7a:61:94:61:37:92:3d:30:ae:8b:84:2f:6f:95:
                    54:56:20:23:9c:66:31:96:df:0f:f8:96:17:3d:63:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:18:4A:B0:B6:74:18:B7:24:75:A4:09:DA:92:FF:43:61:0E:A1:B9
            X509v3 Authority Key Identifier:
                keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:c4:c3:5e:b2:98:d5:5e:23:e2:8d:6a:1c:f8:ad:87:49:
         df:ba:f6:91:99:58:b0:69:a2:86:16:61:cc:49:43:fd:36:92:
         99:1e:f7:78:82:99:11:21:e8:e4:1a:a7:09:f5:a5:ec:5b:65:
         20:23:f4:32:5b:43:aa:7e:cf:31:84:13:8a:5c:35:7a:54:bc:
         7e:f7:03:de:a2:f2:66:99:14:7f:c1:8c:d5:bf:44:c5:b7:26:
         d9:aa:23:54:5a:6e:b6:77:9d:be:9e:18:95:8b:25:b9:12:b3:
         a9:9e:66:7d:53:e1:12:ac:29:7f:69:a6:47:fe:4f:97:3b:08:
         e4:25:67:aa:59:af:dd:8e:43:2f:56:59:b7:29:4a:9b:69:cd:
         77:e7:00:ed:13:a7:4d:7a:bb:97:89:4c:19:bf:42:12:0b:69:
         06:09:1f:86:66:6a:50:6f:3a:e9:60:96:b8:26:45:76:17:2b:
         22:6a:fb:c8:b7:7a:a1:2c:3e:21:a1:86:49:bc:d5:ad:f6:8b:
         e0:99:07:f5:cc:01:49:0f:60:30:69:d8:fd:85:87:b1:53:9e:
         8f:56:08:f9:ff:7e:39:eb:5f:96:d6:02:ae:1a:2b:b6:78:43:
         30:d0:35:a4:3d:ff:42:04:92:52:c0:63:4a:68:8b:51:60:35:
         a8:f8:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:10 2025 by rpki-client