Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          LQGD1gxjpcQNTVpumqYcikXILNzcgiN1pbgsZO3mDs0=
Subject key identifier:   E7:5D:7E:6C:47:22:EF:A1:3C:7D:DF:C7:AB:FE:CF:3B:BD:C6:F2:3B
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       34CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          349A
Signing time:             Thu 24 Apr 2025 14:24:45 +0000
Manifest this update:     Thu 24 Apr 2025 14:24:44 +0000
Manifest next update:     Thu 01 May 2025 14:24:44 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: OoE0wb8lVAZ3aCCoQcx2A7/Qan7CRXfWcXxOd7fAH6A=)
                          2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: 3Bh09Zn6mFO5Oea9UBod6MtwVZcXpjm+mtSvhM63HUc=)
                          3: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: MBOQQXrS4Z//4O5DV7gxUdMmCgnG/RaWUrumSPw5Cnk=)
                          4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: +z4up47sitnxc0BGzrLhea39B00Ir9hVkkzOMtz9tBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13515 (0x34cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Apr 24 14:24:44 2025 GMT
            Not After : May  1 14:24:44 2025 GMT
        Subject: CN=680a49ac-9617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:fc:95:41:10:ed:44:7a:ad:67:7a:33:96:
                    f8:e6:ec:d7:38:bc:66:eb:99:eb:a3:a8:55:b2:9f:
                    b4:86:a7:76:6d:6f:55:a4:3a:21:87:25:b4:99:d8:
                    3a:d6:97:8b:3d:6c:e5:3d:4b:dc:14:ad:9d:b5:4e:
                    c6:d1:36:25:f8:de:08:e0:57:6c:d5:e9:01:7b:e6:
                    f6:7d:cf:c5:90:22:a8:1f:c9:27:f3:1e:e4:61:6d:
                    e1:21:94:41:48:e3:62:64:3c:b2:6a:a9:f3:fd:c6:
                    d3:6e:c1:93:76:19:8a:7f:df:04:bf:85:c4:d6:b6:
                    15:e6:ad:b4:9e:ac:9a:08:8c:ba:60:db:a4:98:76:
                    e9:89:47:83:60:0d:d9:33:69:bf:b1:04:46:cc:5a:
                    05:61:f5:8e:5c:ee:2a:15:6c:f2:c3:c7:05:41:16:
                    a9:18:de:12:32:6d:3c:34:f4:4d:ef:97:f9:57:10:
                    57:01:fe:6c:da:e0:95:50:ea:2a:55:fe:86:f8:7e:
                    1c:d8:f8:48:d1:65:39:24:77:f7:e6:e0:48:c3:5b:
                    47:2c:88:d2:4d:c2:8f:d4:00:5d:50:90:09:38:ee:
                    d4:a7:94:d1:b5:0e:3e:7e:48:14:e0:7f:44:f5:c0:
                    c3:f8:5b:c9:c6:eb:54:7d:09:c8:19:17:3c:f5:99:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:7E:6C:47:22:EF:A1:3C:7D:DF:C7:AB:FE:CF:3B:BD:C6:F2:3B
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:35:4f:91:75:3b:10:48:2f:86:57:7c:8a:00:5e:a2:03:4c:
         c0:f5:df:9c:c9:77:19:69:fd:e9:c2:02:cf:88:52:52:2d:fa:
         a6:52:d7:a9:85:fe:09:0c:a9:bf:45:8f:98:5f:8d:26:51:d1:
         8f:05:c0:9b:31:af:7c:96:d2:80:09:18:f2:c1:9a:c6:0d:28:
         9e:53:ff:c5:51:d6:6f:ac:6a:fe:e5:1b:14:e5:93:cd:61:c6:
         25:a8:cb:ed:fe:2d:a5:ef:4e:75:4e:d5:a0:3f:c0:45:9d:8a:
         1e:e7:ee:35:09:87:cb:f3:b9:dc:3a:7c:51:5b:40:3b:36:8d:
         01:9c:9b:27:f1:1a:69:bb:dd:65:5d:16:35:df:c6:d4:3c:08:
         ee:da:91:b8:b8:6f:7c:b7:8f:89:7d:6c:80:01:04:fa:18:f6:
         e8:a4:df:49:93:91:86:6e:b1:56:37:bd:6f:9e:40:21:e7:65:
         06:f6:1a:1d:0a:0a:ab:a8:07:3b:f3:0b:ca:26:ba:1b:9a:32:
         a3:58:3c:3c:59:49:2c:91:0d:a4:f6:f7:d1:06:15:f6:cb:c7:
         ad:97:b0:7e:5b:a5:d7:21:b6:f1:74:b1:6d:a3:59:96:8a:90:
         a4:29:2b:3f:b4:c6:5b:8b:e0:a0:2f:ee:0e:54:81:c6:41:a8:
         e1:d0:dc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:30 2025 by rpki-client