Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File:                     Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier:          3o1MORFpnRgM1dJi9ZIbgRnToeeDwxDa9jxm69bqafA=
Subject key identifier:   A7:69:C1:37:CB:E2:51:B6:3A:C1:EB:85:E0:9B:09:CE:25:DC:F2:F6
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number:          0237
Signing time:             Fri 25 Apr 2025 01:41:40 +0000
Manifest this update:     Fri 25 Apr 2025 01:41:40 +0000
Manifest next update:     Fri 02 May 2025 01:41:40 +0000
Files and hashes:         1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: kjlQDkglT0cla7dzGtXUHjnBJlmCCSdcaEE1zTxnZnM=)
                          2: 08B1833C1DE511F08883F35AC4F9AE02.roa (hash: qt/12QruPULSLrioUdGLIDziwQVI0MwcPO5Znz57Xok=)
                          3: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: PCTX1P2d3fRflAHqzzXSaFtOX5cSgvLNCmPW7UGSTiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Apr 25 01:41:40 2025 GMT
            Not After : May  2 01:41:40 2025 GMT
        Subject: CN=680ae854-9d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:06:60:13:70:dc:83:13:33:74:2b:6e:80:bb:
                    8d:c4:57:79:8e:0f:51:f2:05:db:15:22:12:bb:52:
                    d7:5c:45:d5:26:bd:08:b0:9a:35:49:6d:b4:bb:ef:
                    d4:be:c4:f3:fb:54:c1:39:56:33:ef:12:e2:f4:14:
                    87:8a:a9:6b:95:c0:f2:d4:c2:87:47:0e:c7:7a:57:
                    8f:8c:a1:51:a5:b4:bf:89:bc:06:fa:f1:e1:7f:f4:
                    f0:94:6c:06:68:c9:70:6a:76:3c:9b:9f:67:85:bd:
                    7d:77:30:b9:ac:46:ac:46:71:bc:e0:ae:35:d6:72:
                    02:5b:b5:62:3d:26:3c:ff:79:0e:32:4d:26:16:38:
                    81:5d:a9:bf:b4:0c:35:11:9d:46:9f:6e:2b:b0:04:
                    e8:7d:1e:ca:fd:8f:50:14:2a:99:c7:07:27:d6:07:
                    bd:f6:c2:28:7a:00:66:d5:fb:4e:6c:3f:73:90:a1:
                    e2:fc:cf:0c:4a:86:79:51:a5:dd:0b:23:5c:62:7a:
                    76:c3:8c:d2:c0:e0:5a:67:ae:42:65:42:57:21:a1:
                    79:2b:35:28:58:64:b6:e8:9f:9d:17:43:e3:59:bc:
                    57:7c:ce:98:d1:98:7b:74:44:c5:10:ab:28:3d:93:
                    2c:c7:29:83:1b:6b:ea:91:2b:8c:68:46:31:37:6b:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:69:C1:37:CB:E2:51:B6:3A:C1:EB:85:E0:9B:09:CE:25:DC:F2:F6
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:47:49:2c:ba:06:75:3e:e9:b5:8e:99:50:dc:87:4c:f1:
         b5:78:f7:f2:72:cb:16:ca:43:01:29:9c:53:8e:2c:5d:92:61:
         e9:48:92:b5:78:56:3b:46:2d:7e:a3:da:cc:c5:00:e3:1e:fe:
         a7:94:fc:e7:60:2c:be:e9:43:a6:bc:60:a3:ae:1c:2c:b3:07:
         5e:6d:21:c9:6b:93:5b:5b:ba:69:22:16:a8:c7:1b:43:48:6e:
         ab:93:a0:71:01:3b:f2:51:4e:58:ed:3c:20:a1:45:6d:17:67:
         9d:f1:a0:52:4f:2e:c6:d2:c6:2b:5c:ea:e5:5b:55:51:38:ad:
         63:d0:b6:b2:b7:50:9d:af:4b:c1:f0:d7:0b:cb:91:91:53:c5:
         c2:a0:1e:3c:67:06:c8:a9:e6:08:7d:d0:41:68:60:a0:ab:3d:
         d3:be:ec:49:1e:2c:05:22:f3:6d:73:13:21:2e:22:16:91:7c:
         de:af:af:c8:9c:a7:3f:92:5c:8b:0a:5b:e0:53:7d:1d:19:40:
         b7:3c:53:db:4c:71:d1:5c:6b:0f:36:29:48:09:23:9e:5e:80:
         d4:ea:a8:18:ee:46:75:15:ae:4a:16:91:e7:87:c4:f3:91:12:
         9b:a5:6f:84:38:61:63:fb:a9:70:ce:35:15:7d:60:bf:41:ee:
         36:c3:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:37 2025 by rpki-client