Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
File:                     4mZe42LlzFj31n9Ka3YhqkYL044.mft (raw, json)
Hash identifier:          4o66FSoZ7zrJVx4OH2WJ2p7AhX67EXu2Xx/hgFE47Fk=
Subject key identifier:   53:9C:A5:23:82:06:5D:DB:09:F7:5A:5B:8E:1A:55:9C:B7:F3:A7:0E
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Certificate issuer:       /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
Manifest number:          0762
Signing time:             Wed 14 May 2025 21:41:17 +0000
Manifest this update:     Wed 14 May 2025 21:41:16 +0000
Manifest next update:     Wed 21 May 2025 21:41:16 +0000
Files and hashes:         1: 4mZe42LlzFj31n9Ka3YhqkYL044.crl (hash: 2FaJ2H8iCUCw3YU3gQQjXsaANml6CGyCBW0D3j9WSNM=)
                          2: C08B23401DA511EBAD78BB46C4F9AE02.roa (hash: mbwHGhtZC2TCJmz+QPwmy+4qyopASkQ/h0BJkTgUJs4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
                          rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
        Validity
            Not Before: May 14 21:41:16 2025 GMT
            Not After : May 21 21:41:16 2025 GMT
        Subject: CN=68250dfd-d76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:69:82:b2:fc:b6:89:ae:93:9e:5e:84:b1:
                    57:ec:49:02:bd:46:b1:f7:19:2a:3c:79:ba:b8:e7:
                    18:f5:12:15:c7:7d:c9:26:87:6c:1e:1b:14:5c:8f:
                    6b:d0:00:15:59:0e:e8:3d:c5:f7:ac:ba:20:dd:f0:
                    e4:ed:ad:39:30:ec:c4:df:c4:d6:b0:48:06:c5:bd:
                    59:10:1c:26:49:67:db:98:dd:26:ca:dd:0b:18:b7:
                    93:7d:96:09:4f:f0:f7:fb:42:a8:ea:55:41:5e:ab:
                    3a:a6:b3:c9:45:5b:ac:c6:a6:0d:67:8c:7a:a2:de:
                    2a:36:27:97:18:37:a0:34:73:86:7f:19:3d:0e:67:
                    2b:82:8d:72:df:1e:d5:a8:3f:35:a0:5c:9c:c0:69:
                    7c:f5:0c:c6:be:f0:4d:61:44:44:73:c8:97:cc:b0:
                    77:ab:13:a7:70:ac:dc:f1:e2:82:19:ea:05:30:a4:
                    de:f5:ec:0c:eb:29:88:ae:df:d6:1d:ab:40:20:f1:
                    3a:c1:71:87:21:23:05:cb:d1:b2:be:6e:d8:c6:dc:
                    2c:90:f9:c9:d9:ad:42:98:08:c4:6f:65:f1:c2:8a:
                    03:25:0b:5b:6a:8b:57:3d:cb:82:08:b7:87:89:c4:
                    a8:c8:27:4c:14:75:28:c8:91:a1:44:23:ae:e1:24:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9C:A5:23:82:06:5D:DB:09:F7:5A:5B:8E:1A:55:9C:B7:F3:A7:0E
            X509v3 Authority Key Identifier:
                keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:2f:bf:e6:30:18:67:68:8e:bc:26:e9:d0:1f:1a:fe:a5:
         36:32:db:a1:c2:2e:88:d6:f9:fe:11:33:f9:53:35:1b:c9:84:
         14:ce:a7:a6:36:bd:f7:17:0c:33:28:42:ab:cc:bd:5a:93:ad:
         56:12:59:75:a0:04:01:2f:b2:b4:40:a3:12:80:d5:ac:f0:27:
         85:25:ba:9c:e0:4d:bb:af:0a:d8:fa:89:b3:7d:ff:76:aa:80:
         59:5a:73:2e:97:ee:1d:12:10:8a:e2:f5:c9:3e:ed:1b:9c:86:
         99:57:c5:c5:52:6d:7f:5c:5b:62:8d:ea:6d:ff:fb:b4:b7:7e:
         7a:7d:13:09:f1:21:be:c0:66:ef:2c:d8:93:f1:f7:71:43:22:
         62:a9:b2:e5:a3:eb:7c:25:cf:8d:c0:11:50:c6:74:ea:74:bb:
         4d:0a:ea:89:86:52:09:f6:74:89:14:1c:96:ce:95:86:4a:a5:
         5e:aa:5f:fe:5f:b1:73:5b:12:0d:ef:31:b7:40:f1:d0:26:2d:
         83:44:76:ce:5b:cc:46:48:61:e2:a2:b1:e4:95:06:19:77:30:
         91:18:a5:d2:d8:60:de:ff:ea:a3:d4:46:fd:dc:78:94:14:f8:
         da:eb:8a:83:a4:89:53:fd:f8:9c:e8:b1:90:f4:e2:9c:29:72:
         87:15:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:38:17 2025 by rpki-client