Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File:                     LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier:          /DdejkNLzE9hk4T30m4R7Yd0r6oahWx0OEC7oofQbJM=
Subject key identifier:   AC:03:C0:67:A8:D5:0F:74:92:BA:C2:DA:8A:C8:5B:11:26:30:E8:03
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer:       /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial:       0B35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number:          0B09
Signing time:             Sat 26 Apr 2025 19:10:24 +0000
Manifest this update:     Sat 26 Apr 2025 19:10:23 +0000
Manifest next update:     Sat 03 May 2025 19:10:23 +0000
Files and hashes:         1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: cqUsocyqeKcM50R2UxUn3nASUWFtDDepRVw41b7KK54=)
                          2: 155B355E414311EE8E969116C4F9AE02.roa (hash: AEcrtgaYcC8nxcIlLTbTydLAoyadUjgPoburPHCFpuI=)
                          3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: ZuckVDBkHWjtjgORAisHfpeFoPo31ZjupHmSg5374TY=)
                          4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: L1V702IcrknjYj/1v+mu1+mrKPDiKzApod7Zc+hqR3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
                          rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2869 (0xb35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
        Validity
            Not Before: Apr 26 19:10:23 2025 GMT
            Not After : May  3 19:10:23 2025 GMT
        Subject: CN=680d2fa0-d5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:f6:82:8a:92:bb:fd:e5:f9:dc:09:39:ff:
                    bd:55:3a:4b:26:9d:60:e9:9a:be:06:ec:2d:b6:5d:
                    c2:3f:d9:76:ff:67:f7:58:6d:ab:25:0e:a6:ec:39:
                    66:64:7f:17:5e:86:af:b7:1b:d7:80:51:0f:5a:97:
                    13:fe:af:a9:87:84:a5:27:ee:0d:7d:42:df:75:7e:
                    4b:14:81:f5:ee:2d:70:68:56:09:c6:ca:a2:2b:f4:
                    ea:10:96:d4:f5:df:e3:0b:70:73:b3:a9:a9:0a:4a:
                    d5:e2:c8:13:ad:8a:a5:3b:50:ed:55:47:14:47:7b:
                    f1:98:57:96:b3:28:d1:55:99:9f:7b:99:d9:d6:5d:
                    42:99:22:7b:10:bb:0b:86:81:47:36:d4:df:0c:53:
                    f1:17:57:47:7b:95:d7:b5:8a:76:15:07:ec:af:52:
                    e5:29:c7:7b:6d:d8:4c:74:68:eb:2a:c6:fd:4a:18:
                    a2:37:3d:7a:e5:1c:45:a8:e8:ba:a3:ec:52:f0:25:
                    3d:26:43:07:74:f8:7a:d9:97:06:b0:78:02:9e:d8:
                    92:75:62:4f:c9:30:0f:3f:08:a8:7b:0f:06:d2:e2:
                    97:09:f7:8e:77:89:f7:44:3b:c8:8c:dc:7a:cf:35:
                    3c:91:4c:d7:58:19:a0:cf:dc:fa:ae:94:a0:d9:fe:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:C0:67:A8:D5:0F:74:92:BA:C2:DA:8A:C8:5B:11:26:30:E8:03
            X509v3 Authority Key Identifier:
                keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cd:38:8e:0a:2d:73:b6:aa:c6:52:29:81:27:04:ea:74:f6:
         0a:7f:79:f9:61:40:d1:c9:7d:74:95:27:e4:4f:65:77:e1:7a:
         f8:14:05:81:af:d0:28:bb:dc:7a:ba:75:c8:71:2f:80:ff:ec:
         9f:49:2e:6e:e9:c1:4e:23:a3:f2:9d:ef:bf:49:6f:b4:89:c6:
         c7:d4:de:2a:cf:de:29:70:80:69:a6:b4:67:c6:21:8c:0d:0e:
         fe:c2:4c:5d:ec:7f:08:18:ad:aa:41:80:2a:80:4e:a7:e1:b1:
         5e:8b:62:2b:04:fd:e1:ae:cf:33:b1:97:c5:30:de:10:48:22:
         a9:b1:32:3e:7f:fd:cc:d9:98:c5:a1:0a:cf:28:e3:e1:36:1a:
         7b:93:e5:f7:7c:36:c6:96:2b:d7:de:c7:9d:99:fe:69:62:d4:
         ff:c1:c6:f9:86:5b:ab:43:2f:96:f0:46:ac:d0:da:68:da:f4:
         2d:36:51:b8:13:f7:c8:4d:3a:24:e2:20:ac:ef:92:a2:bb:bd:
         fd:79:f1:b5:5e:de:ec:10:d8:66:8d:ce:61:2a:11:9f:ce:c7:
         19:3b:d8:2e:25:b1:16:e2:4e:6b:1c:98:6e:61:7c:8a:1b:db:
         72:f0:3e:fe:5f:67:9e:8c:3a:0c:c0:e6:78:25:be:16:bd:0e:
         86:d2:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:05:18 2025 by rpki-client