Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          uNKqu+VaJKdoSy8MAeJAnM/AmqOXl54xwIVd0kwzkvs=
Subject key identifier:   E7:F4:C6:E7:B0:CB:E8:BB:ED:35:D2:CB:EE:BB:75:B7:BB:B0:6E:4A
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       03DA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          03C8
Signing time:             Thu 24 Apr 2025 23:10:11 +0000
Manifest this update:     Thu 24 Apr 2025 23:10:11 +0000
Manifest next update:     Thu 01 May 2025 23:10:11 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: nKnS0JXqIVAKL6O+UdvUaACkAdb3rhPOi3K+R9cOJUg=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Apr 24 23:10:11 2025 GMT
            Not After : May  1 23:10:11 2025 GMT
        Subject: CN=680ac4d3-f9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:33:88:0c:6a:83:85:10:ed:4a:97:0b:25:
                    87:40:c8:07:6b:5a:14:bc:89:9e:24:e3:cf:e6:00:
                    00:32:55:ee:66:50:fc:42:6f:44:55:33:77:59:22:
                    67:62:14:c8:4f:28:88:99:0c:a6:07:db:aa:1a:ad:
                    ce:fa:33:ed:ad:1e:d4:d2:85:16:dd:01:b4:1b:6b:
                    aa:69:8d:e8:a9:b3:0b:7e:e4:5c:a6:59:dc:52:c6:
                    63:38:c8:44:ac:86:14:57:47:01:fc:6c:e9:db:4a:
                    cc:9d:e3:0d:10:99:f9:c5:cd:f1:f3:fb:45:ec:aa:
                    a1:d8:41:1c:3f:20:9a:be:37:d7:1d:7b:2d:6e:46:
                    7c:15:96:a0:7a:71:97:4e:99:bb:61:17:47:ee:c2:
                    ee:9a:44:88:5a:db:b5:dc:e5:f7:8b:01:2a:94:13:
                    ec:f9:95:19:94:5a:91:e2:8a:32:7d:c7:60:65:d2:
                    f0:79:59:a2:cf:ad:38:51:56:cd:8f:d7:52:f9:55:
                    d6:d2:85:83:db:64:8b:53:df:36:d5:e0:66:c4:ed:
                    3c:ee:29:4c:85:c5:cf:33:9c:5e:6b:11:14:e7:3e:
                    a6:6c:b6:59:38:2a:d5:94:77:74:0e:34:dc:e2:88:
                    b2:cf:21:89:e6:44:16:fe:77:0a:a4:03:78:71:dc:
                    3e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:C6:E7:B0:CB:E8:BB:ED:35:D2:CB:EE:BB:75:B7:BB:B0:6E:4A
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:a8:2e:64:10:a6:74:7c:f0:97:b4:73:d4:83:4c:72:e1:
         ed:aa:de:2f:d9:1c:66:af:20:cf:bf:94:d6:18:b8:b9:6f:b0:
         04:5a:89:cb:7e:69:65:a3:f0:31:85:af:38:27:a5:d4:eb:d0:
         b7:ae:31:5c:1f:e6:cb:5e:08:bb:35:cb:af:df:5d:c3:a3:54:
         1f:bb:60:ab:d3:de:72:3e:19:26:1f:fa:ec:46:4b:22:ec:26:
         92:88:14:3d:ed:00:1e:aa:89:11:9f:cc:9a:e0:cf:5b:dc:30:
         c6:6d:d3:43:3e:58:45:55:26:db:87:02:af:48:b5:c3:0f:3a:
         6e:55:91:f6:bf:a4:32:33:3e:36:1a:03:a8:77:1d:7d:7a:d5:
         91:60:ea:83:a5:86:0b:bf:10:72:30:90:b1:6b:45:ef:12:11:
         3c:8a:bf:7f:79:2e:58:27:fa:85:07:16:ec:57:03:9d:23:b7:
         35:3b:55:1d:7a:69:c3:85:0b:66:43:df:f8:e6:6d:d5:6c:28:
         39:41:e7:ff:29:b3:64:d4:16:75:a3:13:75:ae:b9:56:68:4e:
         5a:3b:27:5c:14:f9:da:df:76:94:8e:74:18:72:9c:34:51:35:
         d4:ac:41:0b:66:0c:3a:36:9d:31:77:51:66:57:50:1f:5c:08:
         33:63:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:10:40 2025 by rpki-client