Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
File:                     aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json)
Hash identifier:          wYeoo2r2eFGgtcY9uElxDF+TY/htq9gaurkW5tuS/0M=
Subject key identifier:   2D:6E:84:A2:F9:E7:60:37:F7:A8:99:7D:85:36:A2:FB:49:76:A6:67
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Certificate issuer:       /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial:       033D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
Manifest number:          031F
Signing time:             Fri 25 Apr 2025 01:00:52 +0000
Manifest this update:     Fri 25 Apr 2025 01:00:51 +0000
Manifest next update:     Fri 02 May 2025 01:00:51 +0000
Files and hashes:         1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: hcpHe528GOX0cpJQLESY8HPZ14GyE9glLgQCAuSpqHw=)
                          2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: i6v8Xf+0KkaEGhb/TJ+saEyWBQY2o3H9ZszygH46Hd4=)
                          3: 593105685BB711EE8E69584CC4F9AE02.roa (hash: lkS26BT0D3kjQ+vvaIE4qPZCY0e62oxAQkxFZOHBmsQ=)
                          4: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: P57quaW3DlfcRg6H6EBZQJvqJnGiJw0/9o3VwlNBZ7w=)
                          5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: yRSOmcUbcPon9jEF0ergwI8+pr3n7/XtmbTEl4aDVyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
                          rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829 (0x33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Validity
            Not Before: Apr 25 01:00:51 2025 GMT
            Not After : May  2 01:00:51 2025 GMT
        Subject: CN=680adec3-4074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:ff:e8:68:a3:fe:a5:92:f8:fd:53:49:d0:
                    d5:26:68:76:5b:6a:26:5b:88:a6:d9:a0:98:9c:50:
                    31:ea:51:c9:12:3e:bb:15:26:02:6c:1a:f1:56:16:
                    3d:29:eb:df:84:c6:4a:df:84:05:58:64:42:5d:86:
                    10:fa:5f:88:2c:69:56:da:cd:f8:09:c0:5b:49:da:
                    2f:4a:69:ec:6d:25:8e:83:2f:d3:72:2a:08:5d:07:
                    ed:b8:61:3f:73:a0:bc:3f:c1:9a:a7:3a:69:20:97:
                    23:18:dd:35:2e:ac:de:16:fc:a6:61:99:c0:77:5d:
                    5c:91:5a:87:84:64:9f:57:b4:e4:41:4e:29:47:7b:
                    1c:d6:df:18:5e:2a:26:b2:64:8b:5d:4c:c6:02:8d:
                    19:a2:f8:16:e4:0c:88:2e:15:7e:21:21:de:72:2d:
                    a1:d5:24:a5:b3:59:fc:46:37:25:ae:d4:6c:49:e8:
                    2c:24:70:c2:f5:7a:64:26:3c:2f:9a:28:86:53:c5:
                    32:4c:27:6f:31:56:ca:fb:ef:cc:91:58:f1:2e:b4:
                    05:c6:48:71:2d:60:0e:b6:90:53:e2:3a:85:75:c8:
                    35:16:f8:46:f2:d2:c9:5b:be:a0:7b:ae:52:f1:24:
                    3a:6c:b0:48:15:bb:4f:43:3b:62:1e:1d:27:7a:e5:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:84:A2:F9:E7:60:37:F7:A8:99:7D:85:36:A2:FB:49:76:A6:67
            X509v3 Authority Key Identifier:
                keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ed:13:5e:18:59:11:79:5e:30:99:6c:d5:e0:d7:e9:fb:00:
         e2:d8:34:5b:54:0a:48:7e:ab:bc:06:13:d4:a6:3e:44:56:bd:
         79:64:68:2a:eb:6c:af:6d:e4:08:09:eb:e3:a1:7b:8e:4a:f7:
         cb:25:d1:17:1b:5e:72:e6:86:ab:18:98:8a:39:f8:8d:a0:12:
         f6:e9:11:23:0c:c1:3d:97:cf:51:c6:b2:0c:ca:9a:9b:1c:17:
         3f:09:a5:18:52:47:2e:14:03:64:d3:98:d0:9c:7e:22:b4:16:
         d1:b1:08:95:9f:df:43:79:a8:3a:9b:59:ba:91:60:47:54:ec:
         e4:7d:11:d9:a2:b1:a2:ba:0a:87:8d:e4:ca:d9:06:78:35:c3:
         fc:0e:36:a7:d1:b0:e3:02:5a:48:f3:64:2f:c8:42:11:93:c2:
         b3:27:1e:7c:c3:fa:09:57:5d:38:e4:fc:61:14:ea:99:14:cc:
         a4:db:26:32:fa:89:6d:2f:d8:f9:75:12:2e:0a:09:5b:3a:7c:
         dd:c4:e9:b3:f7:c8:4a:b9:05:d8:fc:00:2f:3d:14:95:ca:e1:
         8c:bd:4e:e6:4d:0c:8e:b9:7d:fd:bb:c4:14:c7:3c:ea:db:72:
         fa:49:7d:2a:58:b7:c8:cc:a1:12:bb:cb:40:48:bb:6d:ec:e9:
         5b:22:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:34:18 2025 by rpki-client