Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          VY73cRNRy9tvh/iSSk+8zUL+3Ashlb5jw4wEvLfcncU=
Subject key identifier:   11:D7:57:6F:25:4A:98:AB:D6:44:76:75:DA:CE:E3:97:27:31:01:9F
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          0142
Signing time:             Fri 25 Apr 2025 03:31:01 +0000
Manifest this update:     Fri 25 Apr 2025 03:31:01 +0000
Manifest next update:     Fri 02 May 2025 03:31:01 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: VNpnPDrygc9WmovIB5uRI+6hS6GmxH5KSo852zarsyk=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: O1ci8odveyWb16dTISMFL4I0B+THdeEK/wQxVlAXoG4=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: yvOv4NBbOpEJJw0XLmATyCqTdZVqT5gv8LENR7a7yr8=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: amW3fnguTxFthTpVPQH+OMqY24uLNJt0XaaUMVwv2r0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Apr 25 03:31:01 2025 GMT
            Not After : May  2 03:31:01 2025 GMT
        Subject: CN=680b01f5-3019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:2d:52:96:39:67:16:05:1c:c8:61:d6:a8:
                    40:e6:22:e0:fe:c9:68:6c:5a:a7:ee:84:9c:be:c3:
                    8c:8b:f4:a1:c2:18:cc:39:a4:5a:b1:63:92:7b:99:
                    8e:6b:fe:7f:15:98:27:e6:fe:c1:3e:14:79:ce:ac:
                    d1:ac:bb:4f:43:78:87:d5:a0:b1:68:a3:8a:e2:23:
                    ca:28:44:a7:80:b6:11:d1:5b:f3:ef:9d:a0:0a:bc:
                    aa:ae:7e:f7:2f:86:da:35:30:96:17:4c:48:15:d6:
                    6d:45:29:ea:18:bc:31:94:54:cb:08:c7:84:5e:fd:
                    4c:fa:79:29:be:32:ff:c0:66:38:46:26:8d:fd:84:
                    3c:86:f5:8e:cd:1c:80:06:03:59:58:41:fb:ff:c4:
                    29:1a:0e:0f:e2:32:52:d2:b3:8d:f8:d6:6f:62:51:
                    2c:fe:4b:81:e0:f6:91:d5:e9:c8:9d:ee:77:74:cb:
                    d0:41:12:7e:89:06:83:21:e4:bb:42:92:a1:9c:13:
                    c9:3d:5d:e9:1d:65:22:a6:93:b4:6b:be:6e:0b:3b:
                    7d:3f:bc:a3:15:e4:eb:e2:51:15:83:bd:ef:be:78:
                    18:6d:c4:16:11:08:a9:4a:fa:38:c5:db:e9:be:c3:
                    2a:a1:59:f8:96:21:47:2d:ed:b5:23:ee:cf:49:98:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:57:6F:25:4A:98:AB:D6:44:76:75:DA:CE:E3:97:27:31:01:9F
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:9e:5d:5c:a1:ae:00:67:a0:00:52:9d:83:c8:7c:ca:12:
         00:da:a0:ca:6b:aa:2d:1b:f8:c6:0a:fe:1e:54:12:39:41:09:
         5e:30:03:0c:04:a0:a8:b0:3c:98:88:18:61:64:71:62:7f:bd:
         89:99:ee:91:4b:65:f9:ba:7e:8b:16:b6:03:99:1b:a8:9d:04:
         0e:66:b7:10:b5:33:f9:62:aa:a7:4b:8e:85:00:14:47:df:e5:
         db:33:2d:6d:59:ce:01:aa:c6:2f:7e:38:df:e3:1c:2e:10:a6:
         30:61:e6:e5:d8:07:2e:dd:35:94:83:e2:39:86:da:43:d5:7f:
         42:71:3f:d0:4d:01:de:61:0f:80:b2:93:a7:7e:b8:6d:96:10:
         53:4c:8f:0d:30:e0:40:4b:f5:ec:86:25:95:4e:4a:ba:18:ed:
         84:b2:7a:85:b4:e0:76:01:13:f9:07:85:14:91:58:02:2d:a8:
         f0:60:51:f5:e1:fc:f8:b8:29:b4:9d:4f:45:da:f8:fd:45:00:
         83:c7:52:fc:75:48:47:a0:57:cd:96:ed:36:1f:26:36:51:93:
         8a:9e:72:9d:49:a0:fb:49:65:29:ba:87:20:0d:53:4d:df:42:
         fe:eb:48:69:41:2f:7c:ed:5a:24:d1:63:60:18:38:ea:9a:4c:
         b4:46:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:53 2025 by rpki-client