Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
File:                     SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json)
Hash identifier:          rPVo/iFLirAoE8LP6Qi9sI79/8mtIbch/I+0cU6VvcY=
Subject key identifier:   71:AA:87:81:A7:C9:31:E6:EE:72:E0:DF:E8:12:D2:12:C2:E4:AC:91
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0E0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
Manifest number:          0DF7
Signing time:             Mon 12 May 2025 17:44:26 +0000
Manifest this update:     Mon 12 May 2025 17:44:25 +0000
Manifest next update:     Mon 19 May 2025 17:44:25 +0000
Files and hashes:         1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: imuNwyU61RbYxRpPb4WlHIpB+Hi9sREifVeuL+x0aKE=)
                          2: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: 2EnIkr0/gsvRkYf/SxISa/9Htz1MjVAylB0K+VzHnAg=)
                          3: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: xZ2PaQGP+pBdXoQTbN4GGQzo/uue2dUnNcJgd+re/CQ=)
                          4: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: v08vXt7jzTRjmDEH2KncOmJlrZfrtUnDKy7ksFpJeHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 17:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3594 (0xe0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: May 12 17:44:25 2025 GMT
            Not After : May 19 17:44:25 2025 GMT
        Subject: CN=6822337a-2be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:74:25:57:97:4d:ef:b0:36:02:63:8d:eb:
                    ea:69:9f:9a:70:10:e4:78:d7:bf:6b:1c:ab:8f:2c:
                    cd:a2:ee:6e:e4:e1:23:9e:b9:ee:92:60:d4:a0:81:
                    8c:bb:bf:43:0b:7a:4f:a5:5d:cf:7e:c7:a7:e4:9b:
                    7e:22:fd:ca:81:d0:7e:50:97:f6:3b:b6:5f:e9:13:
                    7d:30:5a:cb:3d:1d:b3:99:82:e4:88:08:41:8a:70:
                    1c:62:f8:51:47:45:a4:2b:4a:02:51:72:70:b9:e4:
                    34:09:4b:68:53:2d:20:dc:50:b4:d7:bb:2f:c8:31:
                    df:a6:2f:1d:65:76:3f:f0:88:c2:12:a1:da:22:ea:
                    4b:1a:ed:f6:0b:58:9c:37:6a:84:91:54:e9:16:66:
                    7d:82:0b:38:58:41:92:7f:ab:88:03:10:3b:70:7a:
                    f3:9c:b1:75:58:e0:d9:ea:62:f4:91:58:67:4d:f2:
                    39:77:9b:b1:73:dd:4c:a1:6f:d8:6f:cd:f1:b7:95:
                    c8:87:45:e3:2b:09:6e:70:d7:04:01:e1:92:1d:91:
                    d7:a4:19:bd:72:da:35:2c:09:de:53:c2:55:69:bf:
                    04:51:24:d1:09:a8:57:04:2f:be:7d:b2:b8:99:67:
                    9f:1a:78:f7:78:bf:17:37:0c:eb:44:65:e6:08:a3:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:87:81:A7:C9:31:E6:EE:72:E0:DF:E8:12:D2:12:C2:E4:AC:91
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:af:3f:27:f0:f9:38:b4:e3:b8:5c:12:fb:56:3f:ad:0a:67:
         bc:b3:33:ec:5a:2b:41:8f:a9:52:06:9d:09:71:2b:bb:ad:a9:
         a4:b5:8c:3d:8c:5d:83:a5:b8:f9:a9:d2:8c:16:ac:cf:ef:57:
         28:11:d4:07:89:92:89:ef:de:a0:87:08:2c:c6:53:c2:6c:bf:
         a9:74:55:a7:f4:c4:1b:37:e9:3e:70:5e:fe:0c:47:13:a9:56:
         fe:c0:f1:53:fe:2b:82:ac:a4:bd:7c:5a:30:2e:3b:a0:83:5a:
         86:ad:d7:8a:70:09:04:4a:3b:7a:22:4b:d9:82:4d:1e:11:48:
         1a:db:af:bf:7a:fc:89:12:42:63:fc:b2:a3:61:64:8c:4d:16:
         68:0a:9c:32:a3:90:a3:05:54:63:3b:39:1c:e4:83:d0:29:e3:
         7f:45:c2:31:32:6e:94:ad:33:25:ad:41:1d:b1:2e:7a:d0:37:
         46:9d:62:8a:47:38:08:ee:75:2f:1d:12:dc:a5:ab:39:5e:42:
         67:df:36:88:d6:35:b0:73:53:3e:30:df:02:e0:16:93:c5:c7:
         ab:b3:18:7b:02:6d:db:85:de:2c:78:70:25:7b:60:ee:de:2c:
         bb:02:70:ad:26:24:9c:6a:5e:23:48:09:fc:86:5e:37:c7:d0:
         4b:21:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:35:21 2025 by rpki-client