Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File:                     26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier:          kr9XU/xYfEi+g4eYuFBfJq5fO5D/9sH2FzNq5lhC21M=
Subject key identifier:   0F:2A:1C:6E:95:B8:62:41:87:13:31:65:D2:33:82:B2:84:73:74:A1
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer:       /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial:       035E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number:          034E
Signing time:             Sun 11 May 2025 00:35:57 +0000
Manifest this update:     Sun 11 May 2025 00:35:57 +0000
Manifest next update:     Sun 18 May 2025 00:35:57 +0000
Files and hashes:         1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: 5NHZrKwRMUgnzSNTMEIMcqptT8ukUUivbvs9j2zm2jA=)
                          2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: YZBCLzG1LRQi5fjPkPYGATjitv5X8ahwOZh2l+uHQzk=)
                          3: 422287F0D30511EE8753D541C4F9AE02.roa (hash: 4KkZhlwS8BwldE+nm9AJgbyzDDEgaxmp/JCW8JNKT3c=)
                          4: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: 2yiJ1vYQVaVYgn6ZIE4vtmjEfZixmgLzUvn/Jupt42Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
                          rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 00:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
        Validity
            Not Before: May 11 00:35:57 2025 GMT
            Not After : May 18 00:35:57 2025 GMT
        Subject: CN=681ff0ed-c1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:94:69:bf:8d:74:81:b4:65:b3:60:09:84:
                    66:e3:93:f8:f0:3e:74:04:b3:8a:c5:61:fc:aa:7b:
                    6e:30:fb:e3:87:50:89:11:cd:5a:3b:9f:36:a0:73:
                    3a:e4:18:10:0e:30:21:a2:91:07:69:6c:81:e2:be:
                    e8:eb:9d:e0:09:b4:17:d7:f1:c7:c7:ef:33:87:c9:
                    78:b3:98:04:46:ef:bd:ab:69:0a:d3:78:90:3c:c1:
                    92:3d:e9:46:3c:7a:ae:be:c5:d4:8f:89:f5:41:8a:
                    e9:36:d6:54:64:00:73:6b:3a:23:46:03:8e:82:c8:
                    f4:e8:42:3f:58:00:a9:fb:be:2c:66:a2:60:de:5c:
                    b2:00:c4:ee:64:36:30:bb:85:73:71:a4:74:b4:60:
                    09:64:29:82:e0:42:20:0a:aa:76:51:bf:fc:f6:75:
                    c1:35:c0:67:4b:3b:2d:35:44:f9:b1:b7:9c:ab:d4:
                    cd:7a:7b:41:a2:96:a3:e8:67:08:0f:a6:b8:62:c2:
                    f7:85:ab:bf:f6:6d:d2:d7:d2:ba:02:f2:da:a5:76:
                    55:ed:2d:11:64:1f:c8:7c:b2:5a:49:96:8f:30:fe:
                    9b:a4:27:14:62:3f:54:f3:ca:5d:12:8c:7d:d5:36:
                    d3:9e:78:4d:40:9a:fb:53:41:e0:b8:26:5f:0e:8f:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2A:1C:6E:95:B8:62:41:87:13:31:65:D2:33:82:B2:84:73:74:A1
            X509v3 Authority Key Identifier:
                keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fe:56:29:46:40:eb:7e:4d:4a:95:8a:99:d7:b8:db:31:a9:
         52:13:52:cd:77:68:2e:32:de:e4:36:5e:95:bb:a1:5a:6a:3b:
         58:6b:6d:9d:23:86:88:f1:00:cb:87:24:0f:ed:32:b4:19:4c:
         46:a8:b7:b5:e0:1d:15:34:73:fb:e2:d8:f1:77:2a:32:8c:1f:
         01:58:05:13:60:b3:15:4e:1d:d4:90:95:68:ea:c4:83:c1:61:
         17:36:99:4b:72:28:95:5f:7b:e2:fb:e1:ac:d1:e0:b9:97:f9:
         d6:16:00:e6:b6:04:d2:88:df:ea:a7:f0:2e:b7:fd:32:cb:a6:
         7c:bd:bf:74:e8:12:64:27:dd:8f:88:43:8c:72:5a:ba:17:96:
         28:3a:4a:6f:8a:e8:f6:d3:75:64:73:ad:46:85:1d:d5:84:41:
         4b:ef:a5:a4:1b:51:5b:15:c8:a3:ec:6f:64:b2:f3:8e:6a:a4:
         24:6c:f5:2c:fb:f1:99:87:53:ac:1a:aa:a9:79:b6:84:b7:dc:
         c6:ad:36:d0:f4:9f:39:a4:eb:2c:fd:10:52:c5:f7:6f:67:da:
         d4:9f:62:1e:36:1d:3f:9f:dd:91:3d:81:e1:66:1d:4c:08:33:
         ca:89:57:38:10:6d:d5:1f:bb:69:0a:b9:8d:c9:57:50:51:06:
         82:69:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:27:16 2025 by rpki-client