Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File:                     i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier:          CB5qOS7HE2qL9PH6FI9rB7+wDfnsec9iSGw1SoA2cFQ=
Subject key identifier:   9E:B6:28:6C:AA:2C:71:E8:D9:1F:15:D0:A8:59:73:3E:2E:B5:D4:DA
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer:       /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number:          0116
Signing time:             Sun 11 May 2025 03:44:33 +0000
Manifest this update:     Sun 11 May 2025 03:44:32 +0000
Manifest next update:     Sun 18 May 2025 03:44:32 +0000
Files and hashes:         1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: T3awHWCeP2bks5IW//14h/whsAk2BsM1dmQjKPhyR84=)
                          2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=)
                          3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
                          rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 03:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
        Validity
            Not Before: May 11 03:44:32 2025 GMT
            Not After : May 18 03:44:32 2025 GMT
        Subject: CN=68201d21-de40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a0:53:42:93:05:27:2a:f3:92:c6:dd:82:f1:
                    c1:67:6c:77:b4:c3:df:e5:93:f3:d6:d9:ff:75:24:
                    84:ab:82:ee:06:73:90:77:b7:6b:7a:1f:17:1c:46:
                    57:ef:08:bd:ce:37:d9:7f:9d:0e:9f:e2:b5:65:ba:
                    ae:dc:88:42:94:35:a0:46:9b:b0:0e:90:c9:8c:94:
                    fd:07:4a:cd:39:4e:c6:92:e6:0d:04:87:49:87:d4:
                    d3:59:ae:76:9f:ef:81:8c:34:9f:e9:99:c3:6c:3e:
                    b9:e3:27:3a:cc:6b:8a:e8:bf:cf:18:cc:ff:49:44:
                    1f:2e:45:42:d4:81:01:ae:ef:9c:31:59:2c:04:50:
                    b5:22:f7:05:67:8d:04:fe:a6:3f:7a:e2:30:ca:76:
                    4a:9f:86:9d:87:9d:de:30:e3:da:3b:0e:22:fe:e8:
                    38:6a:8d:0c:e6:50:aa:1c:34:ae:76:85:2b:00:31:
                    4d:e4:4b:78:05:56:95:e8:cd:7e:8d:9f:21:8f:53:
                    43:a1:51:27:2f:a1:ed:c1:ad:5f:e7:73:13:6d:55:
                    ca:f9:e3:84:f9:68:c3:43:93:c4:d4:f7:9f:07:ea:
                    bb:48:a9:5d:bf:6d:04:4a:ea:2d:56:2e:65:0f:ce:
                    bd:c5:41:62:f9:ed:0d:54:46:e6:48:57:0c:81:7f:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B6:28:6C:AA:2C:71:E8:D9:1F:15:D0:A8:59:73:3E:2E:B5:D4:DA
            X509v3 Authority Key Identifier:
                keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:94:c2:ef:08:00:8d:d8:6b:c7:25:3d:0d:d1:a0:21:fa:99:
         e3:c6:cf:34:6e:f8:b2:9f:4c:00:ac:1e:a5:7e:d2:ef:63:13:
         e6:6f:82:6d:18:60:8f:5a:ff:4c:07:5a:5e:0a:4d:d0:e2:4a:
         00:07:c4:a2:9e:f5:bb:2a:27:34:c0:76:f7:81:4c:4d:8e:2a:
         76:ce:18:cd:1d:46:41:f8:55:b1:f2:4c:5b:a2:91:f0:9b:ee:
         b1:68:70:3d:62:ab:62:a9:39:e9:86:b2:85:25:9f:ef:43:4d:
         4e:6e:9f:fa:8f:09:41:58:df:6a:8b:30:ee:4f:d7:d4:56:f5:
         47:85:2d:93:82:ad:b7:68:bd:61:c4:f4:f0:29:f9:07:14:40:
         de:1a:1e:b5:58:88:0a:c0:85:da:4d:c3:01:9e:8c:7c:b4:c7:
         59:a3:a3:b1:87:bf:65:0b:95:36:97:46:4e:09:ff:5b:6f:36:
         74:f8:bf:44:1c:5d:09:dc:fa:b4:8d:dc:d6:5b:d4:23:01:9c:
         8e:cc:3c:c9:43:da:bc:d0:11:50:98:23:a8:f6:ce:87:51:5e:
         0c:33:f7:4b:f9:41:76:94:73:18:5f:86:4c:a3:02:ff:5b:42:
         2d:f8:21:71:16:cd:6c:6c:7f:86:f5:1b:8f:56:4e:24:7c:60:
         46:5f:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:26:11 2025 by rpki-client