Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
File:                     stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json)
Hash identifier:          zRjY/rL+SoEX7abhg0rGStX1cD/e3vuxB43DJhbHWoE=
Subject key identifier:   77:D6:F0:09:5E:FA:B2:04:3E:24:80:BC:99:95:03:C2:45:E8:6D:17
Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
Certificate issuer:       /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Certificate serial:       0322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
Manifest number:          031C
Signing time:             Fri 25 Apr 2025 00:56:22 +0000
Manifest this update:     Fri 25 Apr 2025 00:56:21 +0000
Manifest next update:     Fri 02 May 2025 00:56:21 +0000
Files and hashes:         1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: 7/6x4Y2spo9htnkDFoHluhUgcEa0iGXIgZOt+omKeBA=)
                          2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=)
                          3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
                          rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
        Validity
            Not Before: Apr 25 00:56:21 2025 GMT
            Not After : May  2 00:56:21 2025 GMT
        Subject: CN=680addb5-13d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:18:6d:70:14:0d:44:2f:62:f7:82:c9:ec:
                    6e:4e:9d:40:71:a5:f7:ba:bd:d3:23:39:b7:d8:56:
                    8d:91:15:6f:95:58:7f:6d:cb:fa:27:94:62:6f:ce:
                    4b:db:7c:da:70:d2:3c:2d:8a:90:02:60:6b:0d:34:
                    a7:2a:fd:19:6f:9b:0b:b8:25:65:55:6d:2a:27:0f:
                    79:74:cf:e7:20:bc:f3:6c:02:4a:7f:6d:0d:e6:8d:
                    0f:93:98:10:19:6e:14:57:57:0e:d2:ac:73:13:a7:
                    57:54:1c:85:5a:1b:4a:ff:f0:a3:03:1f:67:d3:d8:
                    6b:52:3b:e0:b7:ff:8c:ff:8e:97:c4:92:99:e1:e2:
                    42:59:a7:bf:1c:a5:b8:c3:96:c9:11:e5:2b:76:9d:
                    b5:64:88:70:5d:1b:d1:7a:d4:f5:98:1c:c5:23:bd:
                    d2:8a:81:b5:38:74:54:44:56:4e:2f:ed:e2:d0:60:
                    03:3d:d1:c3:ee:2b:f0:f4:cd:6c:86:02:ce:a2:32:
                    85:55:42:a3:20:31:3c:ce:b6:d2:b4:6d:f1:d8:85:
                    fc:52:fb:fb:7c:fc:c3:89:14:d4:ae:bc:ba:c3:d6:
                    c2:70:8f:1d:4e:2c:f6:4e:06:a0:3e:60:3a:79:b2:
                    e2:23:35:85:dc:78:f5:ce:c5:4c:b9:4d:d5:49:53:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D6:F0:09:5E:FA:B2:04:3E:24:80:BC:99:95:03:C2:45:E8:6D:17
            X509v3 Authority Key Identifier:
                keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a3:71:de:b1:c0:db:db:01:c8:59:0e:f7:12:ef:47:33:b8:
         f8:ee:9c:93:f8:38:3e:6c:4d:f4:85:35:0e:ab:74:a0:df:06:
         a1:27:70:f3:9e:c9:fe:e7:67:cd:47:d6:35:52:c3:ae:a9:b6:
         9d:28:7e:b9:4a:75:99:61:62:6b:52:29:fb:0c:1c:22:0f:4a:
         99:ad:2b:c7:15:51:8b:0b:a6:76:28:d2:da:d5:c7:f9:b2:d0:
         5e:ee:d8:00:dc:18:2d:45:bd:a2:f9:6d:ef:c5:8c:c1:18:1b:
         d6:fa:71:07:6d:11:e6:7c:f8:f1:e4:a9:e4:e1:da:cd:39:30:
         bd:97:f0:53:4d:23:a5:64:d6:ba:9f:15:68:dd:8a:86:42:15:
         6c:98:5f:76:8f:e8:0d:a6:72:c2:9c:cb:31:5f:af:87:fe:f9:
         77:90:15:90:9f:c1:ed:94:92:c2:8f:69:a0:e2:a1:1d:3c:8e:
         a4:d1:50:02:c8:52:47:26:f7:2b:d3:2b:f2:f5:9a:4f:16:c7:
         9b:81:b5:5e:bc:0c:98:eb:b1:fc:99:45:d9:b5:21:d3:a7:cd:
         30:88:24:77:5d:27:ed:70:22:8f:51:00:88:f5:49:5b:14:bc:
         bc:b0:73:24:9d:72:8e:4e:8c:ed:4a:56:53:e9:fd:b6:f9:c7:
         c2:64:ac:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:23 2025 by rpki-client