Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File:                     1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier:          eJsPmpqFX0SBo6FnWadLept7X7WfLr/I3p5SRjLv4+Y=
Subject key identifier:   D9:9F:CC:CF:7E:7A:82:18:DF:2A:CE:6B:36:A6:5C:2F:96:54:0C:A0
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer:       /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number:          02EF
Signing time:             Fri 25 Apr 2025 01:04:00 +0000
Manifest this update:     Fri 25 Apr 2025 01:04:00 +0000
Manifest next update:     Fri 02 May 2025 01:04:00 +0000
Files and hashes:         1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: xbvEi6s04JTM5XZVgoQxM2k+yZyzFS2Euyja+7eog4o=)
                          2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
                          rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
        Validity
            Not Before: Apr 25 01:04:00 2025 GMT
            Not After : May  2 01:04:00 2025 GMT
        Subject: CN=680adf80-7681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c8:d2:22:2f:83:fa:89:b9:82:28:3f:cb:8e:
                    41:76:66:ff:72:b9:0a:f7:23:7c:2a:78:33:76:fd:
                    95:43:5f:4b:ee:b8:2f:c5:59:08:d7:e2:80:f4:0d:
                    69:15:3f:77:4f:2b:e6:11:c7:8c:2c:58:c3:98:20:
                    fc:8d:1e:40:b8:f0:1a:50:f1:08:e6:e9:b7:21:50:
                    6c:d9:ff:10:f2:16:4a:01:42:61:73:08:6c:d0:f5:
                    f6:90:31:01:5d:14:b5:de:67:d6:7f:8f:96:a2:c4:
                    db:42:c9:4e:4e:5e:6c:25:5d:1f:46:fe:3b:bd:98:
                    5e:14:ef:f7:4c:c9:c4:4d:2b:c0:65:80:4b:55:c9:
                    6a:f9:34:22:a5:8a:7c:79:86:8f:dc:b1:e7:c8:1f:
                    80:85:4b:ec:b7:02:91:7c:4d:7e:bc:0a:28:a7:38:
                    58:41:40:07:be:9e:1a:8a:66:b5:db:b5:cc:5d:86:
                    85:46:dd:ff:14:e3:6e:57:dd:ea:7f:42:b3:bf:e1:
                    32:12:93:e1:37:74:57:90:21:a3:38:d5:44:a3:f4:
                    73:8c:1d:24:63:6d:33:09:62:0f:f4:bb:14:81:22:
                    03:df:4c:28:a9:5c:ff:3c:95:62:d9:59:ff:2b:5c:
                    c6:91:eb:72:e2:15:f0:8a:8b:78:90:ce:90:e9:36:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:CC:CF:7E:7A:82:18:DF:2A:CE:6B:36:A6:5C:2F:96:54:0C:A0
            X509v3 Authority Key Identifier:
                keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:4e:8f:c8:6d:81:e8:f6:ed:3e:b6:53:3a:fb:cb:c2:ff:
         e6:bf:d1:ec:fc:be:30:27:4f:8a:d1:73:a3:8b:46:e3:fe:bf:
         17:ff:b8:7e:2c:c3:66:ad:7c:bd:bd:9e:07:ff:04:9f:00:a3:
         10:f0:22:95:41:2b:cf:c0:9f:75:d7:19:63:47:85:fb:48:ef:
         53:29:2a:56:14:6d:33:a0:28:42:3a:29:d1:23:0b:cb:ea:93:
         a7:84:fb:6a:7b:75:bb:25:05:72:fd:c0:3a:5c:18:fb:1d:8f:
         2b:78:ba:d3:46:a1:a6:00:88:7f:97:cb:8d:25:ef:47:aa:39:
         0c:0c:7f:f7:36:6a:0f:63:6f:a6:58:19:70:e3:22:c1:52:15:
         63:9c:dd:2c:a2:91:4f:1c:f6:cf:09:8f:5f:85:d1:98:44:18:
         45:f5:94:03:6b:5a:54:96:2a:65:a4:4c:08:6b:00:fb:cb:13:
         50:ad:cd:93:08:d9:d0:8d:88:00:e5:4b:a2:b7:08:0c:fa:6a:
         6f:1d:8a:6a:5b:ed:57:dd:5d:f7:45:95:8c:d8:b9:c3:21:55:
         79:5c:de:30:05:4f:80:36:15:d7:73:8a:00:3e:a4:14:46:7e:
         54:6b:1b:65:68:16:2f:03:7e:87:f3:d9:37:e1:6e:5e:7c:bd:
         17:88:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:30:59 2025 by rpki-client