Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
File:                     SKOukZPdEbs3NMcFR26Yw_94uEE.mft (raw, json)
Hash identifier:          8DCB6/NpBs0tdfyQg1euX7Do3ZpGlBeX98FTUlwCjhc=
Subject key identifier:   65:EC:12:00:4D:CF:97:4C:F7:D9:26:48:07:2A:B9:01:AD:32:DE:AF
Authority key identifier: 48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41
Certificate issuer:       /CN=A916534C/serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
Manifest number:          07C1
Signing time:             Thu 24 Apr 2025 20:57:42 +0000
Manifest this update:     Thu 24 Apr 2025 20:57:42 +0000
Manifest next update:     Thu 01 May 2025 20:57:42 +0000
Files and hashes:         1: SKOukZPdEbs3NMcFR26Yw_94uEE.crl (hash: DzOdXns+im0xTX9QVKPBhm7Rqc98H4UAuWVGa+gW+iQ=)
                          2: FB54EFD2F31711EABD181553C4F9AE02.roa (hash: bCPJBkn9emdc8QIWrm8jMUVZ7T/2TjesHwvqUFZpfEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl
                          rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916534C, serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
        Validity
            Not Before: Apr 24 20:57:42 2025 GMT
            Not After : May  1 20:57:42 2025 GMT
        Subject: CN=680aa5c6-c212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:9e:63:88:ac:16:90:fd:7e:f3:87:0b:c7:
                    5d:45:4d:1c:c7:3f:bf:67:85:cd:d8:ee:93:b8:55:
                    41:e1:54:de:6e:7b:3d:2a:a7:59:ba:ad:63:b2:ee:
                    f3:6d:ba:eb:f1:05:b4:8d:3b:49:a5:4f:0c:39:dc:
                    eb:f8:db:1c:f3:27:52:b6:58:87:8f:da:c2:70:55:
                    8a:24:22:9f:94:f5:d6:ba:47:c8:f6:f4:01:94:05:
                    53:9f:59:bd:26:18:8c:90:14:2b:3d:69:24:11:96:
                    db:04:c1:7f:ca:c6:3a:57:c0:c5:b3:cb:74:ae:3c:
                    23:42:c1:c9:1b:81:79:31:2f:6f:29:14:77:09:9d:
                    8e:db:e6:f1:c1:51:5e:20:c6:a0:0a:a0:15:a2:6c:
                    aa:37:43:f3:9f:ac:d6:06:5a:3b:d7:6a:48:0b:f2:
                    2d:8e:85:17:95:4d:fc:8c:f6:3c:04:05:50:c3:67:
                    69:95:1a:3d:24:86:1d:81:8f:8d:6e:2b:c9:7a:9c:
                    69:a1:f2:97:c3:ca:bd:59:0d:d0:58:13:b5:d8:3a:
                    43:e5:b9:29:59:7d:6d:6b:54:f4:fb:f5:1f:08:7f:
                    a4:d0:38:fc:bf:c1:52:1a:07:e7:45:27:5d:48:03:
                    30:8a:cf:46:ac:c2:88:7e:ad:b4:1c:87:2e:5f:f3:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:12:00:4D:CF:97:4C:F7:D9:26:48:07:2A:B9:01:AD:32:DE:AF
            X509v3 Authority Key Identifier:
                keyid:48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:11:5d:e8:a2:c0:b9:e7:ef:9b:07:19:6a:62:b4:e6:38:
         75:8f:c5:7a:e2:e9:4f:63:09:48:51:4a:7a:f4:7c:f8:2c:7c:
         cc:9a:34:1d:4e:8f:aa:bb:ad:ee:a8:ab:9e:e1:b4:eb:d5:58:
         2e:6f:ba:a8:a6:56:cd:50:81:e2:d4:07:d9:93:0a:67:c3:6b:
         4a:e2:af:98:14:9e:23:15:64:65:22:31:33:19:b0:0e:70:05:
         9c:d1:4c:6d:81:46:97:ca:aa:15:05:6d:0a:96:18:33:52:7f:
         78:1f:3a:e9:dc:65:07:31:cc:4a:98:68:35:80:08:84:b6:2e:
         4c:c1:e4:d0:5b:c9:e5:de:ac:59:1f:91:45:9a:29:90:f2:2a:
         01:4c:ed:7a:56:0b:51:0d:8a:ea:28:e0:6d:77:06:30:67:d4:
         0f:15:0e:8c:f5:f7:29:a5:27:de:75:ea:66:ae:68:aa:c0:28:
         6c:39:70:ff:88:c6:11:72:b9:6b:2e:da:67:fd:a1:05:47:c6:
         b0:a7:80:b7:1a:69:e5:6f:31:15:c3:af:12:d0:56:b9:ac:47:
         5f:f5:1f:53:49:33:f1:6f:9d:de:ec:fa:14:1e:1b:08:8d:99:
         63:04:c9:1f:1f:b8:29:c2:1e:5e:9d:2e:22:7f:c8:a3:dd:f9:
         be:80:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:34 2025 by rpki-client