Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
File:                     jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json)
Hash identifier:          VTMH/5gbFk7pNylB21JfxvgVE8lhHrfoe3kHs3kvKzE=
Subject key identifier:   62:80:F0:2F:C6:32:F3:36:13:61:CB:BD:A9:E2:A3:CC:64:57:15:D8
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Certificate issuer:       /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
Manifest number:          01DD
Signing time:             Fri 25 Apr 2025 01:54:49 +0000
Manifest this update:     Fri 25 Apr 2025 01:54:49 +0000
Manifest next update:     Fri 02 May 2025 01:54:49 +0000
Files and hashes:         1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: 08pnJfkQP1tuR07yw1zTLqPrmSHwMbJ6zKkykLTbejE=)
                          2: 8A805418846911EE8DDA071BC4F9AE02.roa (hash: sBMYi1WuwbM2sJh1B5DWzcaa+AKEL6HXkfE40Ukjn0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
                          rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
        Validity
            Not Before: Apr 25 01:54:49 2025 GMT
            Not After : May  2 01:54:49 2025 GMT
        Subject: CN=680aeb69-05fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:02:f2:3b:4e:60:50:a0:42:a4:80:2c:fe:
                    90:de:8b:c4:40:c0:ef:98:02:df:d7:cf:19:25:75:
                    e8:01:5b:5f:95:83:b8:2b:5a:c3:0c:66:8b:e2:7e:
                    a0:78:ce:54:41:0d:af:42:a5:2b:09:9b:03:a1:bd:
                    b6:d4:5f:1c:36:4d:a6:97:28:26:1d:40:f0:f4:a7:
                    52:5e:0b:ad:46:1b:25:8d:6e:74:96:19:a7:cd:43:
                    51:67:77:ae:7b:0a:68:e3:f2:0d:d2:cd:a0:e5:38:
                    2b:ff:de:b2:3d:81:51:d1:c8:19:00:6d:87:65:7e:
                    6e:fa:96:48:6b:6f:bb:aa:fa:f0:c7:a6:1c:57:48:
                    af:a3:09:c1:9c:56:00:be:07:3b:52:0d:e5:22:cd:
                    1c:09:de:6d:52:c5:51:d9:40:24:85:2d:9a:cf:be:
                    06:2d:6c:7c:c3:99:4f:98:6d:78:c9:44:0f:fa:af:
                    c1:1c:2b:a2:f1:8f:f5:67:de:0b:36:13:37:f1:4a:
                    18:be:97:2d:48:d6:26:45:d1:a9:93:59:3c:e5:89:
                    df:04:39:94:fa:25:4f:03:4b:ca:36:81:c7:09:94:
                    56:cc:73:6e:23:9d:77:b5:e0:62:28:bb:7c:ae:e9:
                    fd:5f:c6:09:e6:d4:86:82:cf:0b:f6:70:ef:25:8c:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:F0:2F:C6:32:F3:36:13:61:CB:BD:A9:E2:A3:CC:64:57:15:D8
            X509v3 Authority Key Identifier:
                keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:2e:f7:71:b4:58:24:61:84:31:62:93:53:ac:88:c6:30:
         41:84:61:9e:70:1d:6a:03:a3:66:e8:52:c3:c0:7c:5d:b8:fa:
         75:e5:27:10:c9:f0:f6:dd:f4:1e:0e:a8:4e:1a:bb:23:3d:3c:
         8b:79:cc:76:8c:2f:01:ae:2d:52:d5:85:76:1e:db:bd:44:79:
         ab:8f:3d:45:99:95:23:b8:35:b6:4c:a4:59:2a:a9:00:86:3c:
         a6:7e:a5:a5:d2:e2:6a:18:d9:4e:35:56:18:c8:0c:f7:29:a1:
         23:2c:f0:8a:d0:56:61:76:fb:ca:24:a7:8c:1d:3d:90:40:c0:
         3a:da:61:e9:ce:a5:24:5c:0a:af:f8:b8:3b:21:db:80:09:78:
         d8:e4:3e:fd:6b:3f:6c:19:a5:37:73:24:4d:16:99:66:c8:ab:
         b5:a5:2f:f8:9a:3d:74:ab:26:1a:99:eb:f5:ed:9d:92:51:7c:
         a9:a3:48:88:a5:34:68:ad:66:c3:a0:87:8b:64:ff:70:4c:f4:
         34:9e:33:1c:d0:e5:df:78:77:ad:d0:eb:2a:d3:bb:8e:bd:7c:
         c7:26:28:18:f6:26:94:31:b9:48:61:74:b8:f5:00:a7:74:f4:
         2c:0e:74:d8:6b:a3:eb:17:cf:a2:81:c5:f4:74:bd:e8:1d:22:
         82:ff:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:37:00 2025 by rpki-client