Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File:                     RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier:          iaxfKJeFxzMbi/0S0xm5fSrQvlc0cKnBzm9bpGWnubc=
Subject key identifier:   F0:F1:62:F6:09:E5:BF:02:AE:08:0E:D2:4C:53:48:C8:F9:A2:BE:B8
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number:          0154
Signing time:             Sat 03 May 2025 03:32:02 +0000
Manifest this update:     Sat 03 May 2025 03:32:01 +0000
Manifest next update:     Sat 10 May 2025 03:32:01 +0000
Files and hashes:         1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: qzC0cp3BnnLlMYug3RcPp/5HOTS8X6ICHKp0Yf7VijQ=)
                          2: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: dpE2TI6QCYIe9HLRMKDulM368RG27zsQFQ0bkNTHfzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: May  3 03:32:01 2025 GMT
            Not After : May 10 03:32:01 2025 GMT
        Subject: CN=68158e31-163d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:da:85:03:73:b9:23:80:dc:37:66:e0:6b:
                    2f:c5:4e:3a:43:47:2a:d5:f0:c8:23:95:44:fd:80:
                    a3:55:6b:4d:8a:d9:f3:50:55:54:8f:e5:bd:99:e7:
                    25:97:01:7e:a2:30:1e:ee:72:3a:40:ac:50:4d:34:
                    a0:76:86:3c:00:57:8f:cb:44:9e:06:08:1a:da:88:
                    e9:50:3f:0b:cf:3f:a8:9e:83:18:e8:a2:ef:b4:02:
                    f0:dd:fc:2e:18:c3:01:b4:2b:cb:8c:1a:13:f6:cf:
                    9b:de:47:46:8e:1d:9b:15:93:42:d2:bf:77:e7:82:
                    dc:0c:3c:fe:78:bb:b6:a2:a3:f5:5b:e7:0a:ec:ae:
                    5a:7f:df:d5:d1:08:50:00:e8:32:47:c5:88:d1:76:
                    8f:3b:ec:1e:21:96:1e:28:63:29:03:c1:f8:dd:80:
                    8b:11:9e:25:ca:9a:8d:c8:58:af:c5:32:c2:a3:7c:
                    4c:2f:75:71:6e:c1:2b:aa:84:05:e7:d7:d2:a6:23:
                    9b:59:92:bb:9c:7c:32:ba:93:91:ba:1e:4c:fc:fe:
                    11:32:2e:01:35:ec:54:6b:f0:ea:e7:63:f0:09:76:
                    e9:e5:03:05:fe:0e:d3:55:7e:93:0d:cd:ad:08:6a:
                    a9:12:12:7b:fe:42:cc:c4:22:ad:f7:8d:76:a9:dc:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F1:62:F6:09:E5:BF:02:AE:08:0E:D2:4C:53:48:C8:F9:A2:BE:B8
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:4a:d3:a0:4e:1b:e0:02:96:74:a1:19:d1:e7:4c:0f:43:
         33:f9:b5:6b:ed:27:f6:d9:a7:35:76:cb:d3:39:3d:6a:dc:65:
         6c:f4:d5:06:0b:99:e8:8d:bc:13:39:e6:1e:31:e4:0e:c9:69:
         aa:c8:54:d6:a1:4c:a8:ce:c7:e7:ff:23:d9:38:bc:67:b4:c1:
         7d:b4:cb:c7:2b:41:53:3e:cf:48:5a:00:d5:0d:f4:66:52:a9:
         fa:22:c8:dc:6b:f6:27:9b:4e:ce:c7:76:96:7e:8d:03:e9:61:
         ba:7f:bd:1a:5d:76:77:36:b2:48:8d:99:49:db:ab:51:d5:c9:
         23:fc:7b:45:92:eb:3a:53:ae:92:9d:f9:45:52:5e:fb:d7:90:
         19:96:9a:e2:c3:3c:98:a8:99:77:84:65:12:b5:19:e1:ad:73:
         16:ad:ab:d5:7f:7c:14:a2:69:bb:b6:7a:d1:c5:ed:b7:5d:30:
         2e:ba:8c:32:89:6a:60:21:92:2d:70:db:7a:a7:b4:33:58:92:
         e5:82:dc:a4:3c:e4:1e:d6:02:e5:5a:73:02:05:5a:14:fa:f1:
         11:48:38:6c:81:f7:43:48:45:de:49:67:33:55:48:a2:80:09:
         51:9f:c8:2c:f3:07:9b:af:2b:90:06:80:5c:08:04:61:78:17:
         88:a8:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:51:15 2025 by rpki-client