Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
File:                     u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json)
Hash identifier:          9awo6KPnKqe4oSgFLLPdA2ZMPgs6+5tdV2zy0tKGZHM=
Subject key identifier:   5C:F5:79:F7:DE:4D:73:1C:BA:4C:31:9F:F0:D5:BC:08:8E:64:DC:76
Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02
Certificate issuer:       /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
Certificate serial:       073A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
Manifest number:          0730
Signing time:             Thu 24 Apr 2025 21:35:35 +0000
Manifest this update:     Thu 24 Apr 2025 21:35:34 +0000
Manifest next update:     Thu 01 May 2025 21:35:34 +0000
Files and hashes:         1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: Zr7dBJ+Nd94doSjXIrQ/gzZL5qIoOLohfElBfHqWA8g=)
                          2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: YklgGoKPIC5Pmt2tOtwd4ysgwGERG7auCGi5OoDyTlg=)
                          3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: ebO9+Vms5oQoG4HlIUTD5BkVkXKCz/huR2BUpn+lQwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl
                          rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DAF1, serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
        Validity
            Not Before: Apr 24 21:35:34 2025 GMT
            Not After : May  1 21:35:34 2025 GMT
        Subject: CN=680aaea7-840c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:25:e3:dc:9c:53:13:25:6a:17:e2:4c:1e:
                    30:e1:c0:7f:ed:22:a1:2f:84:e7:54:ce:94:be:c8:
                    89:31:ec:7f:2e:8d:88:62:b1:bb:c6:8e:8e:85:98:
                    e4:6b:e9:ee:b1:ff:5d:38:a5:5b:dc:64:04:63:64:
                    54:3d:4c:48:6e:fe:ae:98:27:ec:97:41:38:81:eb:
                    14:a9:99:b3:f2:3f:b8:d6:d3:6e:df:17:ec:10:f2:
                    4e:05:ab:46:1e:35:99:80:e6:d2:f1:31:a6:38:ea:
                    6c:09:71:ff:f5:dd:52:f4:23:11:87:de:23:91:82:
                    e9:7c:a2:a4:fa:f3:9e:ce:ae:45:f8:fa:fb:15:16:
                    ce:37:e7:88:bd:30:6d:3e:11:1a:48:ff:5a:1f:a5:
                    22:4e:83:41:76:8c:29:69:71:bb:e5:84:9f:d7:f4:
                    08:e6:74:eb:54:26:48:19:2d:69:1a:ba:1b:d2:aa:
                    66:0a:69:fc:28:59:24:47:a3:9f:47:a5:b7:84:bc:
                    6b:62:7d:a2:c7:dd:5c:4a:07:7b:03:5b:76:01:5c:
                    f7:a3:79:a2:a0:a3:a6:08:c0:d9:20:23:16:c4:ec:
                    d4:fa:90:e1:a1:64:6e:5e:a4:fc:45:5b:3c:86:3c:
                    77:be:e2:e4:2e:09:d1:4f:90:f9:0e:e7:1a:2c:b3:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:79:F7:DE:4D:73:1C:BA:4C:31:9F:F0:D5:BC:08:8E:64:DC:76
            X509v3 Authority Key Identifier:
                keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:7c:4f:84:b2:ec:67:45:59:75:e0:61:d4:ae:d4:c1:a4:
         ab:95:ac:c0:71:ea:cd:37:03:7f:56:70:52:d5:35:a1:8f:73:
         dd:0b:cf:f6:2c:c1:bf:aa:cc:b5:02:24:3d:1d:3f:db:f0:10:
         04:f7:d1:7d:98:0c:cf:c7:59:8d:59:f8:7e:30:8d:1f:b8:fd:
         b4:9e:6c:cb:94:39:50:0d:b7:3c:40:a3:d0:e2:39:fe:51:0c:
         c0:26:fb:48:88:9c:5d:ba:ee:88:30:ef:fc:53:58:24:49:e6:
         92:b6:df:9f:d4:2e:98:d6:99:91:99:57:ca:fe:80:1b:eb:73:
         d5:99:25:60:da:26:79:a6:26:5a:ff:fe:a7:39:46:61:39:f2:
         9d:5b:81:8a:c8:21:6a:6d:98:4d:30:77:4b:aa:64:6b:96:b9:
         8a:22:a7:57:28:b0:2a:52:64:06:5b:ce:52:46:23:b6:8a:d9:
         cc:92:f2:c2:6c:d2:d0:49:60:36:d7:19:75:c3:2f:33:f3:45:
         11:c1:60:31:5f:5a:e7:74:b2:0c:3c:a8:d7:c4:e2:cf:3c:5d:
         00:29:9c:f5:25:a2:a9:32:e9:06:fe:52:f2:0d:d0:ea:72:62:
         91:7d:2c:d0:66:54:2d:a4:34:29:f5:5b:75:a1:2a:d5:f9:71:
         e5:91:54:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:34:13 2025 by rpki-client