Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File:                     jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier:          3WaeQ04s8r27oYIiNorsj/nz6s57BGdXjVMsNJmWG/Y=
Subject key identifier:   78:F1:AD:08:23:4C:ED:72:9A:91:F5:52:3C:74:28:15:50:89:F6:24
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer:       /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number:          B3
Signing time:             Fri 25 Apr 2025 05:07:25 +0000
Manifest this update:     Fri 25 Apr 2025 05:07:24 +0000
Manifest next update:     Fri 02 May 2025 05:07:24 +0000
Files and hashes:         1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: tE+FU+TERHNxNdmj5GcsXr5t9G+J7HxMYmj/uCamgWU=)
                          2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: Ie9Y5pCGNtZspU9t66mnmp1QTKLtQUg0jtZnjasjHa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
                          rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
        Validity
            Not Before: Apr 25 05:07:24 2025 GMT
            Not After : May  2 05:07:24 2025 GMT
        Subject: CN=680b188d-8aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:74:70:fd:3f:f6:72:6a:d5:0e:2f:48:df:
                    4d:88:30:d7:79:60:54:f2:f9:ae:22:88:b2:c2:ff:
                    65:c4:60:b3:d1:29:e1:8c:0f:6f:ab:09:8c:07:b8:
                    bd:48:23:15:6b:ea:8f:cd:42:32:31:c6:6f:25:3d:
                    89:3b:0a:0b:79:2a:ee:a7:28:a1:5c:71:60:f2:20:
                    e2:5a:c9:af:fd:60:f2:c2:0b:92:35:29:c3:b1:ae:
                    a6:a8:5b:51:f5:2e:ed:57:52:65:7f:7a:e0:9a:32:
                    e5:fa:45:df:5c:b8:bb:5e:37:80:d6:88:cd:eb:ce:
                    01:e3:90:6d:ec:95:23:17:9c:96:b8:69:f1:31:4a:
                    cf:db:5a:ba:72:cf:35:9f:af:0e:46:5f:3d:a2:ff:
                    e5:bb:f0:ce:61:4d:b3:e5:90:93:30:f1:08:06:7f:
                    28:a5:8f:73:e8:45:04:9a:7e:a0:e7:79:a4:e2:e6:
                    22:4c:8e:30:d2:58:ae:31:5a:22:b9:5b:91:b1:7e:
                    02:58:d3:36:27:cd:ca:de:54:36:05:8b:06:f6:05:
                    47:70:e2:6b:27:55:d9:4a:38:ac:f3:1a:bb:09:45:
                    19:39:66:5a:a7:a5:e3:9c:6e:c4:0c:d0:80:af:ad:
                    5a:8f:af:a5:72:7e:6c:70:67:f7:a4:ad:b6:c5:7e:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:AD:08:23:4C:ED:72:9A:91:F5:52:3C:74:28:15:50:89:F6:24
            X509v3 Authority Key Identifier:
                keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:52:c8:28:79:ca:36:b0:c1:5c:ea:7b:48:7b:af:9a:9d:
         fb:04:95:ee:7a:40:79:f5:61:64:e1:56:aa:97:ff:21:fc:38:
         16:5d:5f:31:9f:63:24:a0:a5:92:89:5b:6f:06:c2:1f:d8:dc:
         c9:68:37:c9:5d:64:a5:de:0a:ec:8c:a9:99:9c:ac:37:8f:f0:
         56:95:76:4e:21:fd:6e:d2:ed:1b:12:9f:20:75:b4:ed:9a:1e:
         0c:fc:8d:1a:3b:12:ca:4c:52:48:de:45:4a:ff:2b:98:99:4f:
         f1:a0:07:2e:0c:e2:7c:37:89:4d:cd:bc:7a:cf:bf:bc:45:ae:
         b3:ee:3a:fb:e8:17:51:77:14:cc:9c:26:33:5f:1e:90:48:83:
         47:e7:09:87:60:08:d6:7a:63:df:8b:77:75:95:44:d0:9e:00:
         e0:f3:cd:47:19:b6:fc:15:02:e6:ad:07:38:ab:7d:3d:99:de:
         bd:a5:71:73:3a:a1:24:08:96:27:f4:0b:88:c0:23:ab:f9:70:
         42:a0:56:8a:e0:ff:80:d3:d0:00:75:52:f0:21:35:34:00:00:
         f9:a1:11:bb:74:de:96:a2:3a:0f:9d:d5:52:35:d8:08:30:7f:
         49:f7:8d:e1:0b:9c:16:9f:22:8f:76:d6:b4:a6:5a:97:0e:57:
         56:a6:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:40 2025 by rpki-client