Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          Zn+7AW+Ik/rhIBU7SjbIpMrSXXhfU2frnHmk/vqR9Ck=
Subject key identifier:   1A:FC:46:82:4A:F0:C7:E4:9C:4C:76:06:17:4D:F0:47:01:F1:D9:4C
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       33BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          33AF
Signing time:             Thu 24 Apr 2025 15:20:43 +0000
Manifest this update:     Thu 24 Apr 2025 15:20:42 +0000
Manifest next update:     Thu 01 May 2025 15:20:42 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 58m1Fjpm/AwVvBgsbSieHnpW4JGVgWRKBPx/aE4RPbM=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=)
                          3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13245 (0x33bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Apr 24 15:20:42 2025 GMT
            Not After : May  1 15:20:42 2025 GMT
        Subject: CN=680a56cb-80ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:91:cf:76:d1:11:c8:bd:2c:ce:ac:5d:a6:
                    bc:64:80:ef:82:b3:af:9b:37:a9:a9:f1:34:c1:95:
                    e7:b0:44:9b:7e:38:06:93:09:77:09:db:45:03:29:
                    78:2f:cf:c8:1a:91:ae:ff:3e:12:05:22:e6:9a:6a:
                    ca:4c:da:5f:b9:1a:82:f8:cf:7b:98:f1:c6:ab:5f:
                    b7:c3:c1:39:0a:b3:d5:da:71:6e:b9:0d:50:06:94:
                    42:8f:17:d9:22:b3:f3:98:3f:7e:c9:dc:38:5a:32:
                    04:eb:2e:60:20:7c:ee:fe:b8:6f:44:0b:a2:44:bf:
                    96:75:5f:0c:06:13:2f:91:fb:b2:76:54:a3:2e:4d:
                    49:c4:60:6a:90:5d:c3:40:f9:e6:e5:f0:19:26:41:
                    2e:30:72:a1:35:27:22:fd:56:b0:68:14:1d:ec:2d:
                    95:6d:dc:4c:6c:18:92:9d:08:e3:73:62:c1:82:56:
                    0f:ab:3b:8b:ae:30:b4:bf:f5:ab:18:e1:78:31:b5:
                    70:c3:8e:d1:73:a9:c0:c4:27:00:87:16:5b:6f:19:
                    ab:55:15:58:cf:39:32:78:81:0c:60:dd:36:6d:1c:
                    2c:2f:96:01:1a:4b:15:f4:f2:70:19:31:fc:59:53:
                    9d:9d:1d:d3:04:49:67:50:ed:4f:cb:db:f8:b4:bc:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FC:46:82:4A:F0:C7:E4:9C:4C:76:06:17:4D:F0:47:01:F1:D9:4C
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:86:61:c9:19:2e:08:b6:c5:89:2c:2f:8d:d9:1a:28:89:
         0e:c8:c6:cd:bf:36:36:43:15:c9:09:3e:4e:a0:23:96:aa:6c:
         e6:bc:a9:39:64:37:3a:f1:99:22:a0:51:40:51:3d:41:c9:c3:
         6d:21:29:7a:a1:a0:56:44:53:59:33:54:a3:89:4c:3d:12:f7:
         1c:95:8b:70:4c:06:04:e6:7c:c9:49:13:0a:87:1e:d7:31:c5:
         43:1c:a5:98:0b:4e:91:22:34:83:07:a7:69:a5:8b:de:bf:6f:
         a5:bb:60:0f:f2:9b:5e:12:18:2a:4a:e3:7f:aa:bb:7d:13:60:
         f9:64:9d:38:25:2b:d2:bc:cd:81:fd:52:60:8a:e6:33:ee:e5:
         46:9c:04:be:4f:ee:7c:d8:7e:8e:f5:34:b7:67:1a:01:a5:c9:
         ec:5d:fb:c3:ad:af:7a:53:36:5d:17:bb:ef:f1:2a:f9:30:b0:
         d2:7c:56:fc:fd:e3:f9:0b:14:cc:05:a2:33:af:f5:fb:60:14:
         e3:52:73:6a:0e:37:4e:40:46:4f:4b:e9:b7:84:7b:41:33:10:
         4d:b1:0c:12:fd:bd:0a:c1:3d:7e:69:c2:ee:e7:96:08:84:54:
         0b:6a:07:47:5f:a3:08:e2:c7:2a:5e:c6:27:f5:d6:08:f7:21:
         3b:73:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:59 2025 by rpki-client