Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          dyD8cw0X90F0WBOWMdV7eeJW3pK6LYY6GNQLPsQLBW0=
Subject key identifier:   50:7F:EF:E3:84:AE:53:74:BF:84:C8:A1:02:5D:F9:29:CE:9E:69:B6
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       032B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          0324
Signing time:             Fri 09 May 2025 00:54:22 +0000
Manifest this update:     Fri 09 May 2025 00:54:22 +0000
Manifest next update:     Fri 16 May 2025 00:54:22 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: vlBbuUV/N/pXGNluKTgVrP7KUGrHK2nGFL2iHnHFnYg=)
                          2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=)
                          3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 00:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: May  9 00:54:22 2025 GMT
            Not After : May 16 00:54:22 2025 GMT
        Subject: CN=681d523e-2512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:54:ab:12:73:55:e6:fd:f6:39:62:93:47:
                    71:09:7b:b0:94:98:65:e9:c3:cd:ac:57:df:f2:b0:
                    63:68:27:ac:8b:e7:d1:ea:ee:d0:47:2e:ad:a5:ce:
                    01:dc:4c:63:03:87:9e:20:f1:e0:e1:de:1c:ad:2a:
                    f0:c3:2b:2e:62:69:20:eb:75:26:bd:d4:53:45:c0:
                    b8:3b:b7:5c:7f:c8:ff:9b:4c:05:9a:f6:fd:ae:cb:
                    3f:0a:f3:d5:77:50:c8:4e:f6:d7:57:43:6e:bd:95:
                    e1:c6:ee:05:2f:41:8d:17:f4:3a:a2:55:a1:5a:ac:
                    20:7c:e8:f6:f2:41:eb:63:d4:d4:35:8b:48:79:20:
                    f0:1e:3b:5e:4e:c1:64:c9:48:e5:5f:07:ef:3e:3d:
                    b8:d6:ec:38:46:ac:0c:24:93:85:15:7a:e6:4e:c8:
                    42:8d:03:ae:0d:f7:7a:04:6b:49:05:86:e3:65:99:
                    be:5a:c0:e1:93:53:3d:31:4e:c7:7f:a8:41:e3:69:
                    62:c0:65:88:8f:a5:1b:4e:de:2d:11:9c:b0:19:7e:
                    72:7a:68:57:c2:aa:29:bd:27:02:59:c8:47:90:a4:
                    0f:42:fd:67:18:23:44:9a:f4:de:2b:5e:99:6a:c2:
                    70:3e:e0:71:3e:08:4c:29:3e:32:17:ad:00:6f:a6:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7F:EF:E3:84:AE:53:74:BF:84:C8:A1:02:5D:F9:29:CE:9E:69:B6
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:38:02:4b:25:35:f5:39:e3:d2:6f:d6:bc:7e:6d:88:44:04:
         c5:88:e7:f9:f3:92:20:97:7e:55:2b:db:3d:c6:af:aa:b6:d0:
         50:c2:23:55:e2:ab:b0:a1:7a:14:58:25:c5:9a:df:c2:ef:e6:
         a1:a0:cd:62:53:d3:b9:9d:51:04:9c:a5:22:18:e4:5e:80:3b:
         e4:e6:6a:43:fc:a4:a6:0a:cb:50:76:c3:56:9a:19:55:e1:1a:
         e1:9b:a8:9a:ac:a4:9f:7a:e3:18:cb:5e:74:5e:fa:91:13:c7:
         44:72:92:5c:1e:29:5a:46:61:a6:48:d4:22:57:e3:2f:5f:67:
         d0:ec:7d:a7:35:0b:32:25:de:ba:a2:21:69:7a:bb:63:45:de:
         69:29:a1:e7:ee:8c:34:88:7b:00:8d:cf:c3:2b:75:67:b6:9f:
         79:7f:58:e6:53:40:cf:00:4a:a2:a7:96:12:29:fa:e6:40:f0:
         67:9e:ed:f3:d1:8e:85:e0:4b:cf:c4:18:bf:5d:8d:1b:a6:f4:
         3a:17:24:d1:00:e7:95:41:1e:56:71:25:e4:b3:d4:ae:09:f2:
         61:55:57:eb:e0:fe:52:4c:2e:d3:49:ce:83:99:17:8e:f5:30:
         1e:bc:db:7b:ae:c2:82:db:b8:6e:92:03:91:63:4c:e3:f7:0d:
         2b:23:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:39:51 2025 by rpki-client