Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
File:                     cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json)
Hash identifier:          j2lmLkWtmsMmka6pEUR3ZeuT/mrASkLgW33iRhMfbz0=
Subject key identifier:   1A:4B:48:07:F3:A2:EA:37:EE:04:A0:F1:17:74:13:47:63:8C:8A:DB
Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Certificate issuer:       /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
Manifest number:          7A
Signing time:             Fri 25 Apr 2025 05:43:00 +0000
Manifest this update:     Fri 25 Apr 2025 05:43:00 +0000
Manifest next update:     Fri 02 May 2025 05:43:00 +0000
Files and hashes:         1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: u2mkgjAnrs5KHDNeedkjA4jfIP3dAX8Lp0U54YonXAc=)
                          2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: ho9e+hBvfRrUv61HQybAcXR0qZ4hUME6WoyxclRolHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
        Validity
            Not Before: Apr 25 05:43:00 2025 GMT
            Not After : May  2 05:43:00 2025 GMT
        Subject: CN=680b20e4-9aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:48:0f:79:07:47:c1:c2:09:08:7f:f2:5d:
                    84:72:cf:b5:ae:fc:94:c2:24:87:0d:d2:46:29:a8:
                    94:04:43:52:61:d9:3b:2f:be:42:51:d0:44:6b:43:
                    1a:3b:19:92:68:51:2a:f9:89:f3:92:26:a5:c3:81:
                    fc:29:19:b0:a6:7f:fb:2c:8e:35:bb:66:77:1b:b2:
                    c8:fb:f0:87:85:08:20:0e:42:08:3b:5d:e7:72:f6:
                    b6:34:86:b1:d9:f6:6d:de:3f:7b:cc:a7:32:96:99:
                    bb:67:c3:4e:b1:87:9c:57:5c:7d:86:9d:17:4d:36:
                    98:28:4d:aa:bf:91:62:c0:46:de:6b:70:4c:c3:39:
                    6e:59:92:89:7b:3c:b7:6d:58:7e:c4:e0:5e:bc:0d:
                    25:60:75:52:d0:9b:de:7b:1a:97:82:64:70:b2:86:
                    27:18:e8:d0:15:df:46:09:e2:55:e4:af:9a:c7:b1:
                    c7:82:f8:6a:53:3b:93:5a:c9:e1:48:22:85:41:fa:
                    92:db:93:14:0b:23:b9:a2:3e:4d:ca:78:c8:48:8c:
                    16:7a:5c:58:7b:49:fe:d6:69:93:8f:da:a1:16:98:
                    a8:11:6c:df:14:5a:83:67:56:37:5d:27:52:44:30:
                    fa:72:9e:d1:8c:82:22:f4:26:a7:25:d7:95:71:8b:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4B:48:07:F3:A2:EA:37:EE:04:A0:F1:17:74:13:47:63:8C:8A:DB
            X509v3 Authority Key Identifier:
                keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:51:ef:8f:62:76:b5:7f:3f:58:31:33:a0:08:a4:8b:8b:45:
         53:49:8c:e6:92:8d:58:58:11:1a:35:ac:40:ce:0e:62:66:7a:
         97:f3:47:5d:9f:11:81:e4:59:b5:df:a9:ee:55:85:d7:e5:b4:
         15:0b:f8:1c:0a:37:ad:ed:ef:b9:fb:a4:d5:c8:f5:3f:5e:3a:
         af:c8:d4:9b:d9:28:62:62:f3:00:50:76:b8:ba:a6:b2:de:27:
         e0:9f:62:fe:d6:41:9c:dd:e7:e7:84:fc:84:b5:57:fd:85:8e:
         c9:88:4c:3e:dd:60:c4:92:21:e6:c0:cf:a9:67:86:bb:d9:9b:
         7b:f1:7d:d0:6d:2d:6d:97:9b:df:92:7b:7d:f2:ef:cb:cf:2b:
         82:82:f8:c4:be:6f:b0:c0:72:57:12:b0:5c:81:38:89:33:56:
         d3:3c:b6:83:cd:8b:51:c9:c7:5d:5a:98:4d:f6:d7:be:97:4c:
         c7:90:3b:84:fb:2a:3b:6e:23:f3:d9:47:9a:2e:fa:e7:69:36:
         bd:60:70:69:62:36:a6:d7:48:09:b5:5e:ed:eb:97:8c:66:da:
         62:5f:19:5a:4e:33:67:28:b1:77:fe:78:f7:42:52:ac:b3:8f:
         8c:5f:51:e7:be:dd:e5:50:22:18:24:89:fe:10:97:84:13:7e:
         9c:b5:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:38:39 2025 by rpki-client