Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
File:                     p93zVatoEjcBpb3RX2W6lktd4DU.mft (raw, json)
Hash identifier:          YUWW6S57QVhqg9uQoCjEDiNa5iyZEgAMBSj16deOHQ8=
Subject key identifier:   AE:1A:F8:AD:D5:7E:78:96:26:32:83:5C:CD:CB:D6:55:6D:86:78:39
Authority key identifier: A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35
Certificate issuer:       /CN=A9195A1A/serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
Manifest number:          73
Signing time:             Fri 25 Apr 2025 05:48:23 +0000
Manifest this update:     Fri 25 Apr 2025 05:48:22 +0000
Manifest next update:     Fri 02 May 2025 05:48:22 +0000
Files and hashes:         1: p93zVatoEjcBpb3RX2W6lktd4DU.crl (hash: 3/eh5rgesqFyDyb49g6xZvwfp2w99Dko3eAINoF7uHM=)
                          2: 77BC7D3A74F411EF8B9E1067C4F9AE02.roa (hash: TnDDPyuYfLyHK//K+Hn8T0/qN9TuFXBURI4PhKRtzFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl
                          rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A1A, serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
        Validity
            Not Before: Apr 25 05:48:22 2025 GMT
            Not After : May  2 05:48:22 2025 GMT
        Subject: CN=680b2226-ca12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:47:08:df:82:c6:25:89:ca:15:3c:e1:17:ed:
                    33:eb:7d:d7:f2:dc:b6:08:be:b5:63:09:ad:ef:97:
                    8e:83:a2:77:96:0e:45:26:27:38:37:df:2a:0b:5e:
                    1c:84:fa:a5:1e:57:82:01:c0:72:17:a7:ee:6e:b5:
                    ed:0c:4d:e5:26:c8:e9:e2:a7:cb:b1:31:a2:05:23:
                    f0:b0:c4:66:7c:aa:1c:d2:4a:77:14:18:8b:9d:27:
                    8e:3b:73:c5:3a:85:13:2a:20:0a:9a:4f:e8:9e:84:
                    22:3f:98:77:bf:b8:fa:2e:a2:14:da:47:aa:93:6a:
                    f6:da:b8:b6:14:2d:84:3d:c8:f7:65:5b:9b:f4:bf:
                    98:ae:68:71:ec:03:57:6f:51:b8:e9:5e:7e:5b:bb:
                    a9:2c:63:6d:2e:91:75:2a:e0:8f:2c:02:8b:f7:7c:
                    d3:44:90:d4:8d:be:73:47:2d:8c:fb:07:53:c1:b0:
                    c8:97:18:f8:5c:0c:3a:2f:57:24:ea:48:79:2b:e3:
                    ad:e9:5c:0c:23:de:90:2a:92:f7:26:36:1d:82:d9:
                    9c:a2:35:63:55:26:bb:ea:6c:5e:97:2f:ce:39:1e:
                    45:1f:12:83:54:27:f9:d6:c4:71:8d:c4:ac:8c:1d:
                    c3:c9:38:42:f6:2e:fc:b4:28:c0:9b:0d:2f:43:90:
                    53:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1A:F8:AD:D5:7E:78:96:26:32:83:5C:CD:CB:D6:55:6D:86:78:39
            X509v3 Authority Key Identifier:
                keyid:A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:21:28:1e:5d:b8:2e:10:ad:13:f3:51:0e:03:c0:13:cc:56:
         09:7b:3a:89:b9:ed:af:3f:ee:1f:04:26:22:6b:37:2a:bd:cd:
         21:17:c0:80:7a:21:46:94:b5:ad:64:7d:f4:5b:20:53:f5:3d:
         79:e8:3f:da:ee:18:66:16:f7:26:74:30:55:18:c6:f2:cf:f1:
         78:88:71:8d:84:93:f2:1f:be:ed:ba:3c:b4:30:ff:a8:69:ec:
         99:a9:a9:c3:da:02:de:12:7b:42:b8:c6:26:8f:90:2e:bd:0b:
         ed:1a:8e:75:da:62:6f:bf:9c:b8:7b:49:7b:63:aa:77:48:0e:
         f5:06:1a:d4:53:66:8d:64:23:4f:a9:43:05:96:43:26:02:90:
         dc:9f:da:e6:dc:b6:dc:24:b7:bc:20:39:b2:03:99:4b:16:f4:
         56:a8:e5:4a:e4:3e:d9:9f:5b:1a:74:7d:f4:12:bf:cc:f9:b5:
         ce:44:f4:54:b9:ba:6b:d7:94:fe:f7:4b:a3:54:ff:2a:8f:2b:
         7e:95:ad:92:72:bb:e2:86:5c:88:97:89:f1:fc:c8:14:c4:7b:
         c5:84:f9:c7:aa:7c:1a:87:fb:94:c8:62:df:61:96:8c:f2:bd:
         77:f2:80:0e:7e:70:47:2c:3a:26:3d:33:18:9e:28:03:f6:25:
         82:bb:b0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:29 2025 by rpki-client