Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
File:                     19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json)
Hash identifier:          EjRhiACHmvcRYy3hOJNXcdmo2DODTuTv4nqduUrDf90=
Subject key identifier:   00:71:FE:1D:23:04:72:BC:D3:5F:F8:91:9E:74:38:A0:71:D7:81:B3
Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
Certificate issuer:       /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Certificate serial:       04A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
Manifest number:          049C
Signing time:             Sat 26 Apr 2025 23:36:26 +0000
Manifest this update:     Sat 26 Apr 2025 23:36:26 +0000
Manifest next update:     Sat 03 May 2025 23:36:26 +0000
Files and hashes:         1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: vGSIf/WevQ3GF3r+ISCdVzmXEYiXltA7rOMNjH/1XMg=)
                          2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: mvkJO23Rhne3EOWrAQ2tX8d2RfjeSAd4lU2tWfhmNuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl
                          rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A0B8, serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
        Validity
            Not Before: Apr 26 23:36:26 2025 GMT
            Not After : May  3 23:36:26 2025 GMT
        Subject: CN=680d6dfa-fdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:b4:29:6d:05:7c:fd:67:45:0e:df:78:91:
                    d1:6f:6e:15:84:7d:e2:1c:ff:0b:aa:d0:78:66:41:
                    c3:62:e0:f3:ee:40:fa:d5:e2:71:6f:4b:c3:b7:ff:
                    4c:f6:60:ce:bc:0a:a1:98:90:9f:2d:ec:2a:64:9f:
                    98:10:02:26:ba:58:14:3a:01:37:fd:b7:c6:07:1f:
                    aa:1d:f3:08:c2:88:12:0f:26:4a:e8:13:a9:ed:2f:
                    56:7b:bb:db:0c:3d:71:b5:8e:8a:26:07:80:5f:43:
                    b3:05:ae:8f:9a:a7:e1:b8:74:7d:dc:3c:55:21:ac:
                    c8:a9:04:f8:ae:cf:f3:01:a5:9c:a1:72:27:cb:a0:
                    d5:df:bc:fc:96:0f:e0:24:5f:c0:68:13:9d:38:21:
                    5c:72:9b:45:ed:04:e7:9a:65:b8:86:88:51:a8:2b:
                    be:7d:f0:8a:b7:ab:88:bf:79:62:20:47:2e:9d:b8:
                    b9:86:ae:b9:af:ae:99:03:37:72:62:c5:4a:dc:2b:
                    38:7b:2b:48:b8:eb:e3:59:77:9e:26:a7:69:91:51:
                    33:0b:2d:30:08:c5:20:77:1c:e7:ef:f1:24:60:e2:
                    6f:e4:5f:eb:93:d5:5a:7f:76:61:d9:55:5a:fa:21:
                    d7:8e:8f:7b:4a:97:1c:ee:9c:16:7d:15:50:44:48:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:71:FE:1D:23:04:72:BC:D3:5F:F8:91:9E:74:38:A0:71:D7:81:B3
            X509v3 Authority Key Identifier:
                keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f9:70:83:18:8f:a1:cc:c1:0f:3b:7a:9d:44:6b:66:9a:c2:
         5f:52:00:2b:70:35:a9:85:c5:1e:83:73:38:ca:3b:d4:df:97:
         8f:6a:e1:7e:13:0f:7d:fd:1d:6c:7f:24:a4:04:21:90:f0:07:
         d3:41:48:64:d4:d1:b9:3a:e6:5e:d7:0d:c1:12:83:86:8e:16:
         ad:34:90:5d:22:43:f9:70:99:eb:5b:da:49:c7:d7:8a:37:13:
         13:a2:f2:a5:a7:d9:49:17:95:6b:bd:e3:0a:03:f1:66:64:89:
         77:4c:71:f8:42:5f:76:9e:0b:58:e0:a1:34:a9:d2:24:3a:d1:
         94:a9:22:0d:c0:05:e6:2d:80:6c:f7:67:e5:f8:58:69:7c:63:
         86:6f:29:c8:56:30:4d:63:db:50:cd:59:ea:71:bf:e5:26:f6:
         74:00:0b:c6:02:26:77:0d:ac:07:de:2c:e5:75:3a:cb:28:8c:
         fa:2d:04:67:eb:c7:51:6c:e3:c3:e4:3a:6c:d3:90:86:69:32:
         7d:8e:73:ed:ce:41:07:cd:6b:1e:29:a3:c8:e0:49:f3:36:57:
         f4:5f:ec:ed:c2:5a:65:cf:b6:42:16:07:7b:40:9e:6b:f4:28:
         39:ae:fe:6c:87:f6:1f:4e:52:7e:03:e6:6d:c9:0e:b0:dd:4a:
         1b:a5:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:28:39 2025 by rpki-client