Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File:                     pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier:          6uEh6RDY+//733sJ69bTcbTqXWysVBLluVpCnjisLMk=
Subject key identifier:   30:2F:FB:7F:C8:5B:CE:8E:0B:5C:4D:5F:59:AB:47:21:41:2F:BC:55
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer:       /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number:          0182
Signing time:             Fri 25 Apr 2025 02:47:08 +0000
Manifest this update:     Fri 25 Apr 2025 02:47:08 +0000
Manifest next update:     Fri 02 May 2025 02:47:08 +0000
Files and hashes:         1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: x1O2LfM1wYaBb+3XCw0KW5jaZjFpc8BYLDaMm32HeF4=)
                          2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
                          rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
        Validity
            Not Before: Apr 25 02:47:08 2025 GMT
            Not After : May  2 02:47:08 2025 GMT
        Subject: CN=680af7ac-68e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fa:c3:f9:bd:29:98:99:a1:2b:ec:e3:6d:d1:
                    aa:f2:14:a4:1f:11:ab:32:2c:3b:f4:6a:81:9a:77:
                    21:1a:36:18:8a:61:0d:be:8e:4d:05:e7:ae:74:57:
                    7e:2b:ef:6d:8a:d6:86:ed:a6:d9:9b:42:31:0a:00:
                    f1:2f:70:9e:24:b0:ab:ca:29:20:48:1c:59:77:b8:
                    83:07:a5:2a:d9:c3:f2:63:7d:77:21:4e:63:15:69:
                    d8:57:8b:b2:23:0c:29:59:aa:cb:9b:d8:34:a7:60:
                    11:9b:e8:d1:27:c0:a4:73:92:f0:28:44:05:74:8d:
                    8d:8b:54:b4:a0:ed:48:0f:fe:da:d9:c5:d6:3e:96:
                    73:5f:92:79:61:75:9f:32:88:d8:22:43:54:bf:ce:
                    6e:e1:cd:05:03:21:b9:9b:71:04:03:b3:a5:33:55:
                    55:78:6a:c1:8c:a4:58:5f:19:e9:45:bc:91:84:09:
                    fc:09:95:b2:5a:88:c0:f2:b6:92:c0:05:30:af:20:
                    66:39:6c:c3:60:59:b9:85:3d:78:fd:09:5f:c9:c9:
                    32:6d:a4:9d:c3:5e:8e:32:17:14:dc:c1:0b:22:e2:
                    d3:3d:95:6c:d2:e6:fe:3a:89:f5:cb:b2:5f:b3:a2:
                    62:3c:60:e4:12:92:65:5d:9f:ea:62:9f:25:64:5f:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2F:FB:7F:C8:5B:CE:8E:0B:5C:4D:5F:59:AB:47:21:41:2F:BC:55
            X509v3 Authority Key Identifier:
                keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:63:f2:fc:de:d6:32:ae:b3:73:75:94:c9:82:63:59:b7:c0:
         e6:5c:6b:9e:fb:f0:86:59:68:0e:14:95:da:47:04:14:4e:3e:
         93:d1:84:19:11:3d:93:f1:0d:bc:c6:c6:24:83:31:48:4b:88:
         e4:75:fa:a2:72:e9:6a:c1:00:9c:64:08:cd:55:31:24:d8:73:
         69:b6:05:80:48:b6:3a:44:dc:47:f3:5f:45:8a:57:4e:e8:89:
         e0:8f:fd:37:b3:7d:9b:77:9c:d2:36:1b:32:c0:79:c5:5d:18:
         87:6d:7f:c1:cd:0c:eb:a1:5f:48:46:0c:24:33:90:ed:85:89:
         de:12:4d:d0:b3:dc:bd:b8:44:94:4b:01:e8:01:95:5d:97:b8:
         5d:f3:db:ee:7d:14:c7:c8:b2:1d:ad:11:cd:c8:13:4f:fe:7d:
         ba:37:65:53:42:c6:b6:9a:ff:61:70:45:72:dd:50:3f:3c:ba:
         5d:41:ff:c5:68:c4:d0:c4:ca:a8:15:4a:4f:66:05:03:21:dd:
         3b:b6:e6:a6:68:61:c4:d5:c0:29:74:c9:68:e4:ed:13:b5:da:
         b2:17:be:fc:6a:45:63:c9:78:53:a3:3a:bc:91:82:a7:df:8f:
         bc:a4:ae:bd:67:b2:ec:ff:a8:34:d6:1f:df:2f:4d:7b:77:66:
         98:cb:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:53 2025 by rpki-client