Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
File:                     V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft (raw, json)
Hash identifier:          js3k0NPszlNwd8VEZAR0sKP+e1IY+MGKJQmMdVwi1YY=
Subject key identifier:   F0:92:F4:B5:97:AB:F1:47:C7:AA:E1:A2:C6:73:BA:C6:18:8F:63:73
Authority key identifier: 57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Certificate issuer:       /CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
Certificate serial:       144C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
Manifest number:          1445
Signing time:             Thu 24 Apr 2025 16:55:41 +0000
Manifest this update:     Thu 24 Apr 2025 16:55:41 +0000
Manifest next update:     Thu 01 May 2025 16:55:41 +0000
Files and hashes:         1: V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl (hash: J+gNjGdxeokDJaejMGQR+xVnUeaqMcJqerjhT4wxzy8=)
                          2: 36295E5A6E2611E8A01E307EC4F9AE02.roa (hash: LMl3pmdQ0erztJB/e2Vdkx7AhrXjoDAPVdtW6u4E224=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl
                          rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5196 (0x144c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536D, serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Validity
            Not Before: Apr 24 16:55:41 2025 GMT
            Not After : May  1 16:55:41 2025 GMT
        Subject: CN=680a6d0d-3552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:ad:9b:4f:b0:4d:df:66:06:44:f0:68:f6:
                    8c:8a:6a:40:0d:90:6e:df:bd:73:71:16:aa:e7:79:
                    92:33:62:05:7f:07:11:6a:36:d0:03:38:f2:19:e1:
                    39:db:c8:dc:12:18:c4:05:d0:44:ad:fa:50:f7:67:
                    db:be:23:e7:1d:76:5f:37:ea:d0:13:2c:72:ba:57:
                    ea:d5:70:a0:c3:e3:54:45:9c:51:5b:93:1c:ba:7a:
                    8e:bc:89:d9:75:7f:34:f4:d2:09:d9:f3:94:c3:93:
                    fe:c1:03:45:2c:ce:ca:f5:cd:27:26:da:59:fc:c2:
                    45:c2:4f:16:65:8f:d1:19:b2:93:70:9d:8d:b8:f4:
                    78:64:48:28:e0:11:be:ad:26:81:3e:11:f8:41:dd:
                    21:3b:49:f2:4a:7d:fd:a0:37:ab:e5:e4:b7:2a:3f:
                    89:94:57:2a:f1:5e:19:fe:c3:2a:a9:20:e5:b3:a4:
                    f7:34:4b:5e:8c:95:86:05:ce:a6:bf:40:9d:2b:c0:
                    ff:cf:d2:db:c9:4c:05:89:eb:02:e9:2b:d2:6f:78:
                    5d:42:55:4e:be:ba:38:74:81:5f:46:ab:e0:79:46:
                    78:9b:0d:69:a1:d4:67:ab:85:87:35:4e:66:68:25:
                    31:ad:ee:25:04:86:84:92:66:98:67:37:57:74:2a:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:92:F4:B5:97:AB:F1:47:C7:AA:E1:A2:C6:73:BA:C6:18:8F:63:73
            X509v3 Authority Key Identifier:
                keyid:57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:1e:0c:2e:80:40:e1:6a:b3:7c:8a:82:db:28:ea:eb:6f:
         8d:b5:88:e0:ba:d6:de:3a:d0:fc:99:2d:dc:5f:38:f2:05:27:
         aa:8e:da:3d:28:a7:c6:36:ea:bd:ed:ba:1a:fc:bd:92:2a:5e:
         e3:b4:05:d5:83:4a:fe:50:4c:4d:64:1b:0d:91:cf:ea:62:60:
         cd:a3:a3:15:fe:34:77:02:55:73:0d:e2:76:24:2f:f4:90:5e:
         98:cf:61:a2:7c:ab:82:4c:88:5e:e3:06:1d:a4:92:09:c5:ee:
         34:a9:d2:e1:d9:fc:13:76:5b:df:70:b7:0f:69:37:a4:fc:df:
         38:a8:a0:2d:a1:aa:01:3a:e7:ab:6a:27:7a:8b:d3:8e:44:ba:
         a3:43:22:7e:09:68:a3:51:a6:24:65:4d:52:9d:f4:1f:23:6f:
         13:36:8c:76:dd:c4:2d:22:66:b9:ce:3d:7a:13:8d:73:3a:72:
         1d:41:cd:44:9d:4b:27:22:48:ab:17:51:c7:5c:a6:c5:57:b3:
         cc:01:23:56:0e:7d:5c:86:72:63:78:bf:20:6d:89:a5:91:3d:
         25:84:d5:9e:16:2a:b8:b2:8e:6e:61:ab:5a:1b:4e:1b:1b:65:
         72:0d:94:d2:17:61:e6:6c:ca:17:b8:e6:a7:04:f1:53:8b:b4:
         c0:ca:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:35 2025 by rpki-client