Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File:                     7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier:          TShjkb88fyjrrTuR7/L77eg/gpsFTqu47xejYiibUAI=
Subject key identifier:   5B:9A:FD:8D:BF:1F:26:8B:07:CB:81:D6:46:49:EA:58:66:42:DE:C4
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer:       /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial:       0BDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number:          0BC8
Signing time:             Mon 12 May 2025 18:42:54 +0000
Manifest this update:     Mon 12 May 2025 18:42:54 +0000
Manifest next update:     Mon 19 May 2025 18:42:54 +0000
Files and hashes:         1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: 7q435/Bfaa1I0kWvdgWhqbQvK/GX003rHK9gg61kI8s=)
                          2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: HvkNMYRpxj5Pjk2b6IdbHOGMu5kf16FTiNfirlOJwkA=)
                          3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: db0uZkZWuJQaQM8R/3bIEhp6I+FLcCb/1k0tn5JacmM=)
                          4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: g8z7pfsZjZXsZNzC0de4NUY66eo2G1FWTU8PNhYjoTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
                          rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3036 (0xbdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
        Validity
            Not Before: May 12 18:42:54 2025 GMT
            Not After : May 19 18:42:54 2025 GMT
        Subject: CN=6822412e-eb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:12:99:7b:59:bb:4e:78:fa:1a:6a:1d:c8:
                    97:c4:75:bb:87:53:86:05:7b:ea:7f:41:68:a1:0c:
                    c2:29:1a:c9:c2:40:3d:51:a4:b6:d8:c6:90:e7:61:
                    68:72:f0:fa:78:a4:04:61:fe:37:4c:2e:60:95:90:
                    15:4d:3f:7d:09:6f:95:01:8b:5f:f5:05:97:94:54:
                    b2:1a:a3:cd:e6:78:b2:a7:39:71:f0:27:9b:b5:9a:
                    25:ee:ba:3b:7a:4f:18:6e:d6:45:83:72:8d:68:5e:
                    59:e5:d3:96:9c:6a:93:e3:fb:6d:f0:71:62:30:bc:
                    76:0f:76:4e:3c:c3:8c:2d:bf:05:5f:a1:4c:76:0a:
                    fa:38:d0:e0:87:64:05:19:7d:42:aa:03:95:72:a8:
                    a3:42:18:ce:f3:d8:c6:16:3d:69:ff:83:5e:b9:de:
                    c6:10:94:78:cd:1a:53:c0:53:a3:25:dd:c4:d7:54:
                    fe:83:be:31:63:a4:b2:c6:25:66:75:c4:41:e5:53:
                    f9:a8:ef:48:2d:b9:8f:3c:f8:74:a5:0f:d9:c6:93:
                    d6:27:19:73:a3:20:13:92:f0:c8:95:59:86:2f:27:
                    23:8e:d0:5a:fa:d1:3b:59:72:17:57:40:9e:75:68:
                    9b:9f:65:05:90:19:79:8f:41:04:73:26:3f:9b:0b:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:FD:8D:BF:1F:26:8B:07:CB:81:D6:46:49:EA:58:66:42:DE:C4
            X509v3 Authority Key Identifier:
                keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:de:94:8e:74:12:32:4c:65:e6:8f:45:cf:dc:79:7a:43:
         f4:11:66:b7:0d:fd:7b:5e:32:85:7c:ac:51:b8:48:2f:88:93:
         7c:bb:f8:28:1e:26:9c:48:97:72:c4:4a:8d:e3:14:92:8d:22:
         0b:9d:e4:3f:f9:94:34:d4:cb:86:bd:fc:cd:5f:ea:ed:b6:f1:
         37:6f:a8:43:ac:80:d7:12:c1:5c:b0:44:0e:63:19:53:23:ae:
         f0:df:63:aa:d7:81:6c:1e:69:64:7d:ca:fc:09:1c:44:ab:42:
         0c:33:b9:83:6d:b3:e2:2d:3d:98:96:5d:3f:7a:2b:59:9a:c8:
         97:9a:2d:ba:13:a7:a3:de:b3:d5:b9:50:ea:73:f0:86:ba:74:
         ec:c7:2d:08:96:93:60:8d:f9:c9:7d:0d:10:e4:59:c9:98:0a:
         94:80:b8:6a:ab:89:47:e2:b3:2a:57:3c:09:f5:94:29:8f:ec:
         e2:e0:d3:9a:bc:80:10:a3:fb:56:cc:13:93:af:8f:2e:c2:4f:
         ad:f3:c2:4b:74:30:99:1e:96:aa:31:6a:58:4f:f8:6f:05:ce:
         db:7f:dd:de:1e:17:8a:0e:47:48:16:5a:97:42:a0:31:5c:9e:
         b2:79:1d:30:4e:38:95:a4:db:4c:4e:79:2c:5c:b5:c5:f9:d8:
         d6:20:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:34:30 2025 by rpki-client