Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File:                     sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier:          pBleQatkLaB6LuHG4JSenJBlb99kESMkbEdi12KhNDU=
Subject key identifier:   25:1F:55:6A:6F:2D:75:52:71:09:95:7C:3E:01:48:B9:1F:53:2B:03
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer:       /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial:       0C42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number:          0C3B
Signing time:             Thu 24 Apr 2025 18:20:45 +0000
Manifest this update:     Thu 24 Apr 2025 18:20:44 +0000
Manifest next update:     Thu 01 May 2025 18:20:44 +0000
Files and hashes:         1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: OHBZSD5/6z/mvDqDuZpimLCbAaEQI5f3GOurxej+Rhs=)
                          2: 719728B803EF11EAB301F66FC4F9AE02.roa (hash: //Y9sRim1JuVKbuAKlrRjn3d7mdHR+lghtxL77FdfiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
                          rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3138 (0xc42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
        Validity
            Not Before: Apr 24 18:20:44 2025 GMT
            Not After : May  1 18:20:44 2025 GMT
        Subject: CN=680a80fd-eb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:31:43:9a:66:83:45:3f:ef:ef:58:42:d5:
                    7b:44:25:09:95:f4:55:72:54:05:c2:80:cf:f9:04:
                    f1:f4:a6:e6:f9:85:75:39:55:fa:74:e6:3a:d7:62:
                    4e:66:53:aa:fc:2b:8b:a1:28:31:6f:4f:60:aa:07:
                    fd:a0:ef:13:0a:fe:83:1f:b9:2f:02:e4:2b:7a:bc:
                    8e:3e:93:e6:7b:1b:34:33:cb:1c:82:f9:c5:f5:84:
                    dd:27:24:62:b2:e5:02:eb:5d:6d:65:9f:a4:40:30:
                    bb:69:cc:ba:99:0f:22:9b:b9:82:c7:03:a4:f7:c5:
                    26:6c:ad:1d:d8:ad:93:2d:a0:73:27:ae:64:09:bf:
                    ab:bb:75:c7:0d:05:6c:23:8c:4c:fa:21:66:1a:cc:
                    b8:83:3a:7e:bd:bd:ae:82:ec:be:e8:8a:e7:94:60:
                    78:99:35:fb:92:28:60:d9:bd:82:16:86:ee:27:cb:
                    4d:9c:50:8d:9d:2e:0c:af:5e:2f:92:1f:8c:7c:89:
                    98:35:38:8c:9b:11:2e:eb:f3:64:2d:54:05:38:4b:
                    a2:54:3c:c4:02:20:f2:63:10:f4:d0:e3:68:61:47:
                    53:04:3f:ef:5f:b1:69:a5:d2:de:63:ab:f7:89:96:
                    f6:da:c6:ea:36:cb:90:b6:66:55:24:30:2d:57:23:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1F:55:6A:6F:2D:75:52:71:09:95:7C:3E:01:48:B9:1F:53:2B:03
            X509v3 Authority Key Identifier:
                keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:63:2c:df:32:b2:29:f3:4a:60:32:5c:83:6f:23:ac:d3:
         1e:0a:d8:32:a3:f5:42:c3:55:fb:d9:71:6e:4d:f7:db:9b:02:
         91:11:93:fd:4b:fc:f4:51:ad:0b:68:a4:ed:9a:d9:71:56:d5:
         3a:cf:73:3d:d3:e1:ee:d5:5b:55:59:43:05:f2:95:5f:23:e8:
         db:4f:ed:ef:48:1f:2e:69:5d:58:31:9d:fc:e9:d9:71:4c:67:
         11:a1:01:93:eb:0d:3c:dc:4b:47:3d:e3:33:0f:f3:d7:36:68:
         e3:31:1f:84:1a:10:1a:c9:70:fb:05:e7:cc:a0:90:27:c7:a3:
         c1:5a:71:0b:89:4b:31:6f:51:24:85:28:88:ac:f0:d2:32:da:
         52:ba:37:53:d8:b4:ea:66:e5:f7:80:2c:fb:32:4a:84:24:df:
         ed:0f:f0:d6:0a:03:61:4b:ed:fd:4c:45:4a:04:e1:e3:44:19:
         bc:1c:d4:af:c9:92:ed:fd:17:e2:aa:98:f3:f7:fc:57:ae:ca:
         ea:df:6b:2f:4e:a0:49:14:d9:08:68:41:c7:bf:e0:20:18:5b:
         e3:fa:9e:1a:55:d9:5e:25:79:7b:d9:06:25:a2:69:c7:48:dc:
         30:cf:01:d5:cd:c1:45:d0:fc:b8:48:ca:f4:1e:5e:06:a5:5d:
         cb:a8:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:39 2025 by rpki-client