Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File:                     31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier:          MylzcWt3bBLPKMe6GwqPk8HTPfbFOrPeKLpjws1B+oM=
Subject key identifier:   78:2A:9D:A3:D7:80:C7:C5:BB:1D:B5:B1:77:DA:75:03:08:E2:C3:9D
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer:       /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number:          0164
Signing time:             Fri 25 Apr 2025 03:05:26 +0000
Manifest this update:     Fri 25 Apr 2025 03:05:26 +0000
Manifest next update:     Fri 02 May 2025 03:05:26 +0000
Files and hashes:         1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: rjuSPIfxSvEt0J7j/GJSuKkz/ZoCfA217hcBzNCsGNk=)
                          2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: M5+rFpRElgL5MsNDAAy/cLdqoRb25PYbimpSg/t1Z3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
                          rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
        Validity
            Not Before: Apr 25 03:05:26 2025 GMT
            Not After : May  2 03:05:26 2025 GMT
        Subject: CN=680afbf6-9218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:78:65:cb:a5:62:1c:a1:28:e6:a1:5c:42:
                    a5:1a:83:4b:7a:89:c6:81:2d:63:61:b4:34:38:46:
                    4a:70:7c:f4:24:bf:52:db:f5:0a:3e:f6:70:a9:0e:
                    95:06:9e:db:52:34:55:5f:20:9b:50:63:27:7d:39:
                    f8:78:3c:5f:b9:80:e3:be:1d:ec:ea:5d:0d:2f:ac:
                    b8:04:cf:03:d8:c4:ad:b3:b9:52:e6:b5:5a:94:d2:
                    22:dc:39:c2:71:3a:9e:d4:2b:1d:3d:18:38:7c:94:
                    45:9c:19:d2:40:fc:c0:75:be:c9:56:fa:04:09:9b:
                    e2:d2:58:40:ca:f8:43:54:9e:c4:0a:36:2c:4e:37:
                    8d:83:3b:88:04:7a:30:87:bd:9d:00:cd:85:f0:b0:
                    4a:7a:fb:e3:35:14:f8:e5:05:fb:67:91:e7:1a:62:
                    0e:96:ab:fa:6d:62:2e:d9:3b:44:f6:80:af:c7:54:
                    c2:47:ae:71:f9:33:4e:5c:3b:3d:a5:67:67:30:81:
                    1b:ac:6b:c4:3b:57:2b:14:1c:d4:00:b8:68:a5:d0:
                    aa:07:18:6d:33:d2:a7:4e:78:8a:66:2e:9f:66:ba:
                    4e:06:93:9a:2e:07:b8:7a:87:30:b4:cf:87:4b:13:
                    72:c1:d4:99:72:b8:3e:7e:98:ff:ac:f1:d8:e8:ba:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:9D:A3:D7:80:C7:C5:BB:1D:B5:B1:77:DA:75:03:08:E2:C3:9D
            X509v3 Authority Key Identifier:
                keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:66:1b:f9:aa:52:6b:f6:86:d9:14:e0:c6:76:92:ed:ff:70:
         2a:46:bf:d8:24:d4:9b:f6:30:30:2e:cd:1d:c7:ef:cb:6f:4f:
         4a:23:0c:53:33:d6:9f:77:00:67:f4:c7:9a:14:ca:ae:8b:e1:
         80:3a:33:dd:1d:2d:78:be:ae:ce:7f:09:e2:0c:92:8e:c4:1d:
         05:ae:66:eb:6c:f2:21:f1:20:c9:6a:52:64:f3:d0:8f:69:5e:
         7f:7c:f8:9a:ef:70:f9:c5:10:4c:6d:db:a3:23:16:cd:2d:c5:
         f8:87:7c:cf:75:63:e0:d0:fc:3d:e3:fa:d3:d2:87:d7:42:2b:
         40:6e:8c:da:4e:a7:96:0f:a8:02:b6:d1:21:57:9d:ad:98:3c:
         65:2e:21:72:a2:3a:83:40:7b:b5:55:19:81:e9:6b:a3:3d:28:
         2b:58:74:fe:8b:52:3c:d7:48:72:0e:e4:06:ea:a4:86:53:cd:
         a4:9a:63:9b:12:4d:fd:ed:61:db:13:71:36:7b:a7:f4:93:a4:
         1d:85:f0:78:1e:c9:d2:43:27:ca:c5:0a:db:68:f9:c3:dd:30:
         cc:4d:21:b3:2d:0f:e0:ed:d4:6a:12:f4:7f:53:e2:a1:7e:22:
         d2:d2:33:ff:f6:93:b9:6b:32:2c:a5:ab:a9:c6:ec:56:e9:44:
         71:56:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:55 2025 by rpki-client