Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier:          6gCLOZvjdiJReMnSYOm2i36FpxSpBBDJBx0axC9dF2I=
Subject key identifier:   0E:F9:5E:14:F6:9D:CC:19:DF:8A:69:90:C3:4B:93:0E:09:07:39:C7
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       11A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number:          1183
Signing time:             Thu 24 Apr 2025 17:14:03 +0000
Manifest this update:     Thu 24 Apr 2025 17:14:02 +0000
Manifest next update:     Thu 01 May 2025 17:14:02 +0000
Files and hashes:         1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: JowHGktLwzSmfd8/lFjWqDvFM3cz/drEvNDBCmuZJ+w=)
                          2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: 94kimPGOonrh9/22CnRNhQEUbVH3UGVmy/9MoC69JLQ=)
                          3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: JfTwkLqNbv+/ppvA7/w5eNK8LGWrJTjTZsuLQ37vMVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4512 (0x11a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Apr 24 17:14:02 2025 GMT
            Not After : May  1 17:14:02 2025 GMT
        Subject: CN=680a715b-e69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:7a:69:07:e6:b6:16:b7:7f:01:30:96:4d:
                    d7:ae:89:f2:9f:01:3e:34:c8:ad:99:a3:05:76:be:
                    5a:a0:c4:3e:12:82:27:b3:9e:48:94:ac:b5:98:bb:
                    6b:32:d9:9e:ca:18:60:d7:c9:5f:32:25:20:a8:da:
                    4f:5f:d2:7b:20:7c:64:4a:76:63:c7:20:03:42:82:
                    ee:4e:06:e4:eb:a2:b0:89:e5:12:d6:0b:22:6b:23:
                    9b:f3:1e:5c:15:ee:72:40:70:27:a4:5c:e4:dc:f5:
                    db:3f:25:03:dc:f8:50:d3:fe:e8:94:e2:72:ba:93:
                    43:8e:b3:4f:a3:be:7d:d6:6d:fa:ad:ea:ea:f9:a8:
                    62:81:f0:6a:a4:98:7a:b4:68:3e:b5:26:34:de:1f:
                    51:92:75:62:5f:05:f4:2e:ab:27:62:f2:ec:df:72:
                    b3:31:c4:a0:50:25:40:47:45:1c:2b:37:6b:a0:9f:
                    23:8f:ae:69:48:7c:85:31:3d:d6:ab:67:08:05:06:
                    d5:a5:41:8c:32:d2:d3:12:5e:6c:bf:4d:64:7a:92:
                    84:ae:f8:85:4d:a2:f2:12:de:b2:21:d2:e2:7e:89:
                    69:93:69:f1:e8:35:6c:0e:b1:5a:c1:7a:2a:e1:f0:
                    7b:8a:0b:19:26:91:a7:4f:74:fb:43:a3:f7:f9:f5:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:5E:14:F6:9D:CC:19:DF:8A:69:90:C3:4B:93:0E:09:07:39:C7
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e3:9d:53:2f:22:bb:21:1f:71:f3:74:30:dc:1d:22:8a:80:
         ca:08:2a:d1:d5:4f:4d:b2:19:f9:59:b7:6c:9b:62:cc:0f:a9:
         fd:04:bb:82:1b:6b:b4:7e:fb:c7:40:c7:2d:ac:d6:46:4a:47:
         ae:5e:3a:dd:71:ef:80:a1:f3:63:03:72:3c:bd:56:4a:98:b8:
         ef:9c:7a:56:9f:9e:c0:25:70:dc:60:31:2b:84:34:bf:83:5e:
         67:2d:14:27:ee:c7:c3:37:dd:30:26:f6:b9:00:6c:8a:44:b3:
         6e:15:af:31:e2:8a:96:ec:c7:0f:30:84:8a:64:91:70:d8:9d:
         dd:e6:ef:c6:fc:8b:f7:36:b9:0f:fd:78:10:50:5b:29:a5:13:
         71:1c:96:fe:aa:45:67:07:eb:8c:97:3e:9b:86:ef:6f:36:ad:
         a7:fe:09:e9:76:3f:4c:7e:6d:67:bb:f3:29:ed:c5:17:8d:83:
         9d:cd:0f:08:a0:00:81:42:54:88:b8:72:42:b4:87:6f:13:73:
         29:3e:bf:74:09:9a:99:39:6f:c0:39:c9:e8:8e:62:be:39:c2:
         3e:e1:72:6c:dc:2f:6a:68:98:bf:19:71:af:cf:04:1c:2e:48:
         aa:9d:f0:13:66:42:5e:82:70:12:7d:c0:0b:19:da:23:7c:39:
         c0:5c:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:06:01 2025 by rpki-client