Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File:                     A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier:          /zJ6iM4x7zUbaNujUn53S+2gKpi+OXjHVY9K0QurWTA=
Subject key identifier:   82:73:68:15:E2:75:1C:D9:EE:97:EE:D9:1D:51:C5:BA:9D:44:77:46
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer:       /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial:       0BDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number:          0BCA
Signing time:             Thu 24 Apr 2025 18:46:44 +0000
Manifest this update:     Thu 24 Apr 2025 18:46:44 +0000
Manifest next update:     Thu 01 May 2025 18:46:44 +0000
Files and hashes:         1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: HuVBA1FiUtTsYZyMclHlPQFilnDsg63mGOn2nLWXOZQ=)
                          2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: d0pBZZ4RvHYAFaiTNU/2gKYjejf//tWF0XMSJbZsqXg=)
                          3: 398848523A0011EFB7007939C4F9AE02.roa (hash: g/48h2ExElnkoWctOHQeDXu24OxHb6yA2ORuNL7eIjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3037 (0xbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
        Validity
            Not Before: Apr 24 18:46:44 2025 GMT
            Not After : May  1 18:46:44 2025 GMT
        Subject: CN=680a8714-adb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:91:c9:c1:50:8a:62:e9:90:a7:b1:45:80:
                    c4:1e:19:87:88:4c:40:77:88:e0:64:02:56:87:c2:
                    95:93:fc:e8:47:c1:11:fb:50:65:b8:cc:ac:17:51:
                    c5:17:b5:52:da:25:50:c4:3a:14:7d:ce:c6:95:45:
                    11:d2:eb:58:be:42:13:d6:ba:44:af:f9:21:70:61:
                    30:f2:61:24:d6:14:c9:c3:fa:02:7e:f2:7d:ab:d0:
                    7e:2e:97:97:1f:01:ee:88:39:b6:eb:b4:99:f2:f4:
                    93:b3:d0:29:a7:78:9b:fe:e3:77:a5:ca:31:97:15:
                    62:73:4f:54:f6:cf:5b:ef:e2:68:5e:85:39:97:13:
                    57:7c:35:af:95:c2:e6:3d:e3:91:f8:87:df:01:bf:
                    9e:56:c9:95:1e:e1:e7:1d:53:fa:11:c5:12:b0:34:
                    37:60:de:d0:89:a0:5b:c1:e3:ad:f8:fb:92:84:7f:
                    f7:87:1c:c3:62:aa:8a:27:33:c1:49:6b:72:9e:8c:
                    39:5c:f5:a0:a5:45:f1:97:69:dc:ad:9c:6a:65:f7:
                    dc:72:be:7f:b6:8c:b9:e7:a2:e7:33:f0:6c:9c:66:
                    6b:13:7d:35:c9:98:d5:53:e9:41:4c:58:e6:fd:dd:
                    01:80:3d:db:9f:f1:da:aa:36:fe:b9:35:ef:5a:55:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:73:68:15:E2:75:1C:D9:EE:97:EE:D9:1D:51:C5:BA:9D:44:77:46
            X509v3 Authority Key Identifier:
                keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:20:d4:b1:05:8c:d4:55:6f:8d:81:a9:40:5b:73:6c:2b:
         4f:a6:77:fb:f2:32:73:d9:17:23:24:63:e1:2e:7b:1f:e6:39:
         16:81:db:8e:29:9d:06:14:c4:63:ba:f2:12:7b:b0:31:e0:7a:
         24:77:2b:e3:52:06:b9:7b:e5:d7:9c:60:1e:0f:45:01:33:9b:
         7f:34:81:dc:f0:7a:24:89:b9:7f:e1:ee:16:20:c8:21:60:2a:
         f7:23:8e:5e:00:33:84:b5:7a:bd:f9:b9:5f:4d:ef:14:a6:19:
         36:f6:b6:80:ab:eb:9c:85:de:55:b4:ce:00:8a:2d:2b:94:bf:
         bc:ce:3b:54:99:62:cc:0b:9e:a2:36:66:f7:30:c6:ae:25:83:
         89:3b:f7:63:43:f9:f0:0b:ca:0d:4c:16:43:6e:2e:34:2b:b8:
         7e:71:d0:4e:9c:b3:b8:36:6f:eb:e0:6a:4a:3f:e5:a7:b5:8f:
         78:19:ec:a6:33:06:05:b5:79:8b:50:38:fd:b5:e3:27:6f:18:
         8a:e4:45:89:a2:1f:ef:b9:f3:41:c5:b9:74:72:aa:30:95:8a:
         17:b5:1e:49:8c:dd:53:28:36:8b:c4:e4:2f:0b:38:19:38:a1:
         e2:c7:cb:c9:a7:7d:62:49:55:ac:76:aa:c1:ce:37:53:8f:76:
         7a:f2:7e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:50 2025 by rpki-client