Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File:                     rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier:          GXd86Xjsx+lUboh4kCL+HMNggtw1aiDKV1sNwUpxHaU=
Subject key identifier:   2E:3E:1B:69:3A:08:37:B6:A7:77:12:8D:1A:F2:C8:19:2D:6C:1B:C6
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer:       /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial:       0584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number:          0580
Signing time:             Thu 24 Apr 2025 23:03:50 +0000
Manifest this update:     Thu 24 Apr 2025 23:03:50 +0000
Manifest next update:     Thu 01 May 2025 23:03:50 +0000
Files and hashes:         1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: cuTr3iE/yDpDIyc3J3yPUyArWYc8nQVqXBUKNNkCRG4=)
                          2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: 8hqvaN3hvlkWTiAFriU5tZiN/3ujG/aVXQcge+TLoA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
                          rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919905B, serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
        Validity
            Not Before: Apr 24 23:03:50 2025 GMT
            Not After : May  1 23:03:50 2025 GMT
        Subject: CN=680ac356-ba73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:1f:31:d8:19:88:c0:43:fc:dc:32:92:d1:
                    5f:33:02:01:1e:9f:99:a8:29:57:1a:66:b9:86:a6:
                    6c:dd:ee:9c:51:17:20:30:37:32:90:5b:a9:2c:ec:
                    93:26:f6:c3:af:33:21:32:8b:16:9a:0d:90:5c:50:
                    93:be:79:d6:b2:19:64:38:e5:43:37:2a:7c:b4:0a:
                    e8:d6:a6:24:12:a0:98:c2:48:9e:53:21:cb:85:84:
                    03:6e:66:65:66:e0:64:f9:92:d0:b7:97:53:3d:c3:
                    95:08:74:a6:5b:26:03:2a:93:8b:bc:b3:de:47:84:
                    07:d1:bc:1d:7f:ea:b4:ae:4c:bc:33:d7:15:13:e9:
                    39:b9:f7:65:51:97:30:b1:fa:72:80:b6:3b:ad:30:
                    61:99:ab:b8:bc:a2:d9:eb:55:6f:56:85:ae:e1:f2:
                    1b:ec:db:6f:a1:96:2b:57:01:85:bc:a3:ce:37:34:
                    26:70:12:85:b4:04:a8:13:6c:c5:ed:b8:53:b2:d8:
                    23:53:43:6a:db:9d:1e:ba:88:35:35:46:af:36:f0:
                    d6:ce:de:3e:1f:5a:6f:6c:dd:54:5c:44:c5:03:bf:
                    a7:71:e4:b9:ef:d2:0b:dc:10:46:87:07:c1:1a:64:
                    a3:e6:f2:d6:49:13:a8:02:07:27:b0:a5:d3:be:2d:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3E:1B:69:3A:08:37:B6:A7:77:12:8D:1A:F2:C8:19:2D:6C:1B:C6
            X509v3 Authority Key Identifier:
                keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:64:9a:12:6f:d8:bb:53:91:52:6f:1d:2a:35:69:5f:e4:51:
         b6:8c:88:d4:41:fa:72:99:9f:bb:6a:60:c1:e7:fe:50:56:c5:
         1b:53:88:f3:11:56:fb:50:41:e1:c9:ef:c4:7e:db:ba:ad:43:
         00:02:ba:24:b5:1a:8e:05:34:a5:d2:20:bf:35:d9:7c:9f:84:
         b4:13:fd:4b:98:3d:86:d5:ae:27:05:49:9b:bc:85:94:d3:28:
         8f:74:18:df:a1:29:ef:1b:f5:b1:68:64:e6:2e:a4:fd:68:f2:
         2d:5b:76:c5:dc:ed:5a:c5:1d:3b:93:79:37:15:53:8f:b4:d2:
         55:c8:00:5f:ac:58:34:06:27:9f:f4:aa:1a:16:ad:07:51:20:
         25:6c:32:30:2b:a0:a2:8d:c9:38:a6:30:97:13:47:c3:89:30:
         3d:aa:37:6c:75:c5:7b:4a:3c:92:4d:2e:bf:c8:4c:ec:36:0e:
         1d:bb:5a:f5:ca:62:82:01:0a:f6:4b:c1:c7:0b:5c:91:44:3f:
         06:1c:ef:c2:21:82:11:6a:74:85:06:85:df:f2:13:3c:f2:dd:
         ef:77:5d:70:c2:cc:f0:d0:84:db:ed:33:42:f4:88:e0:67:7f:
         a7:29:a4:89:ce:af:14:e9:1b:7a:b1:43:f9:68:36:36:4c:10:
         3f:2d:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:25:28 2025 by rpki-client