Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
File:                     -swzUrzjgChT2_SwQFJc_B4VLmA.mft (raw, json)
Hash identifier:          xIHpAESZpMjl0uAdLjt/yLQh5BZ9MGeo9uKXC9l8dOU=
Subject key identifier:   39:CC:85:68:57:71:7B:F5:E7:02:E7:31:56:ED:D4:F2:B2:16:4B:FD
Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Certificate issuer:       /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
Manifest number:          A1
Signing time:             Sun 11 May 2025 04:57:36 +0000
Manifest this update:     Sun 11 May 2025 04:57:35 +0000
Manifest next update:     Sun 18 May 2025 04:57:35 +0000
Files and hashes:         1: -swzUrzjgChT2_SwQFJc_B4VLmA.crl (hash: 83OCc6z1S0tuOg2Nc3tgXathJgShy8lViShXBlmQV/U=)
                          2: 164D3C32379711EF9ECC714EC4F9AE02.roa (hash: MwAJLA+u3nsJdB5hxYAQtsiYv2wQXxIJZHkWx14cyEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
        Validity
            Not Before: May 11 04:57:35 2025 GMT
            Not After : May 18 04:57:35 2025 GMT
        Subject: CN=68202e40-3f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:e2:41:8e:70:e7:54:56:2d:3c:08:0e:8b:
                    06:2c:0e:dc:83:42:59:33:79:b1:10:44:d0:22:3b:
                    2c:b2:c2:c9:bf:8f:bd:75:4d:67:33:a7:2d:29:c2:
                    b3:cf:6a:1e:2d:e5:47:8d:9c:cf:f2:d4:64:11:70:
                    a2:7b:60:ce:50:60:6b:e4:ab:9f:84:ee:82:69:42:
                    bf:01:5e:92:79:06:b6:c3:95:e9:7c:0b:af:37:55:
                    97:95:76:57:79:3c:fb:b5:97:b7:4c:10:ef:f5:10:
                    fc:09:2e:21:01:c6:d5:7c:a4:99:3c:74:b0:aa:55:
                    26:18:51:04:c5:6b:fc:7a:8b:50:46:7b:9f:17:13:
                    90:79:59:55:4d:54:bf:b7:73:81:59:b4:82:ef:71:
                    27:d4:22:e1:86:74:47:e6:cb:96:51:77:85:6d:d6:
                    69:5b:db:39:a0:dd:4b:3b:0c:ba:4a:b2:0a:93:52:
                    6b:f9:f3:ea:7e:88:15:f8:31:5b:3d:4c:31:1c:5f:
                    9f:1b:02:07:86:b3:ff:02:b0:b5:96:ec:5e:c0:51:
                    6a:04:98:6d:43:12:bb:71:47:b8:72:e7:f4:39:ea:
                    ec:c9:d9:cc:48:c4:9a:70:80:5d:3b:69:43:e6:f5:
                    5b:08:72:c4:cb:71:8f:4f:29:6a:d2:ea:1e:0e:e9:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CC:85:68:57:71:7B:F5:E7:02:E7:31:56:ED:D4:F2:B2:16:4B:FD
            X509v3 Authority Key Identifier:
                keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:66:13:64:ac:17:61:13:31:b8:e6:d3:40:60:34:8c:2e:
         2b:07:95:e4:19:fe:07:dd:ec:95:dd:80:22:03:ce:3a:3d:a3:
         45:2d:84:91:1b:88:de:40:b5:38:65:af:2e:48:e9:53:a8:6b:
         3a:3c:66:80:54:93:ec:dd:4a:26:f8:b4:21:08:a3:92:3f:b7:
         ac:15:74:9a:eb:e8:67:3c:be:ee:af:c3:4f:08:dd:a5:a0:08:
         79:5f:5e:d1:f0:69:fe:5e:9a:7b:c9:57:25:1e:8e:be:90:b0:
         f4:ab:28:49:43:19:f3:0d:0f:ac:95:25:10:63:c3:e7:15:0b:
         19:35:16:f0:51:40:08:ce:54:5d:b4:c9:bf:de:70:48:91:cf:
         1f:56:ee:21:7f:3b:4f:21:8c:f5:43:90:b4:9f:ba:51:87:d4:
         6a:15:79:e0:42:4f:2f:96:b2:6b:c2:19:83:09:d8:f5:a7:aa:
         ec:a1:df:44:1b:b9:64:c8:62:ab:06:24:3d:88:65:26:a0:99:
         bf:bc:a0:be:31:e8:8d:40:f4:9f:36:e7:fb:8a:61:e1:3a:c9:
         b6:e4:a1:3e:47:b0:97:d8:05:8c:60:1a:64:ab:ea:ae:78:ba:
         72:64:43:df:e1:90:f1:c0:d8:df:92:6f:00:04:ad:53:82:21:
         a6:43:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:06:08 2025 by rpki-client