Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          4XI5rKa4ciHyy1A6cbKh6qwANS/8JsOINSvRIDAHnHo=
Subject key identifier:   6A:6F:DF:5C:EA:15:D0:77:0F:E7:18:14:CC:48:9A:81:5C:35:CD:4F
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       0797
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          0792
Signing time:             Tue 06 May 2025 21:10:43 +0000
Manifest this update:     Tue 06 May 2025 21:10:43 +0000
Manifest next update:     Tue 13 May 2025 21:10:43 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: 8z5XPpt/kcebvtmJWNUz8gzrlU+Legu+8xtAIxjSw6o=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: U97kR7RcsCigK2e8XjTe4vPaz//2MFlJM/gHaNAYSkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 21:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943 (0x797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: May  6 21:10:43 2025 GMT
            Not After : May 13 21:10:43 2025 GMT
        Subject: CN=681a7ad3-113a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:2d:a5:bb:5f:d0:bc:6f:e5:6c:3b:3e:2a:
                    14:55:c9:9f:8a:dc:3d:63:bf:4b:b8:61:53:f5:b4:
                    6a:f9:f8:b1:ad:ae:40:f4:4f:81:fb:dd:d7:84:59:
                    67:7b:84:40:d9:af:f1:fa:31:6c:8c:67:bc:95:8e:
                    b1:a9:a0:c6:1b:6f:9a:80:cf:72:7a:9f:5b:4d:55:
                    36:8b:42:40:51:ab:e1:ab:95:34:40:20:4b:28:e2:
                    fa:3f:56:23:7f:65:71:54:86:fd:f7:f6:1f:49:b6:
                    39:ed:30:3e:76:2e:a9:71:fd:ee:35:31:7a:1d:16:
                    47:e6:76:47:d0:6b:5f:38:36:f9:b0:af:f1:02:49:
                    31:38:5f:4f:cd:9f:85:a0:62:04:fb:db:bf:41:fd:
                    35:e0:c5:e1:10:7a:ab:cd:ab:67:4b:b0:1e:0c:5e:
                    dd:2a:9a:b1:ba:bb:04:b7:42:1b:35:80:4e:0a:80:
                    2d:d3:18:2d:45:24:ce:12:3c:a7:a7:61:96:64:31:
                    49:19:e5:13:21:c9:bf:b7:44:11:d1:50:51:88:a0:
                    55:c0:49:41:1a:1d:bf:d4:20:7a:45:bc:76:d5:90:
                    11:d2:d1:a6:8b:14:d7:d5:69:9f:96:f5:d4:9b:ed:
                    03:63:0e:08:1f:0b:34:06:72:42:7a:6a:75:a8:5d:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:DF:5C:EA:15:D0:77:0F:E7:18:14:CC:48:9A:81:5C:35:CD:4F
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:aa:e4:b5:b0:d8:1d:cd:3d:8f:e6:13:1d:41:62:c9:60:0b:
         75:f6:9e:f9:22:db:da:e6:f5:c2:bf:fb:cb:9f:13:1f:30:e1:
         fb:05:cd:38:93:98:b8:63:dd:8e:e2:92:07:eb:97:04:eb:26:
         05:42:b2:66:37:8a:41:e3:c6:18:12:ad:46:90:88:ab:de:19:
         b6:02:f7:ad:33:17:27:62:b8:5b:00:a3:57:f1:65:31:17:c7:
         06:07:91:a4:8a:13:ff:92:83:4b:fe:c9:3e:e1:a1:d3:66:8b:
         22:9e:01:11:b3:0e:0c:a5:56:7f:c0:e9:b3:ab:a3:d2:89:a0:
         02:80:b2:f6:39:db:ca:5e:bd:0e:e2:ee:c9:c5:46:35:80:65:
         2f:18:6d:cc:84:2c:59:b0:3e:e6:68:84:a7:a9:f7:8a:77:b6:
         60:cb:ed:c5:b1:77:35:9f:7b:aa:01:11:80:1d:07:31:3d:61:
         6e:bf:bd:a8:4c:c9:f5:9d:8d:7d:47:77:b9:11:6a:a7:b8:fa:
         00:2b:05:44:3e:96:40:90:a7:f0:3c:a8:38:48:6c:f0:a7:0e:
         bc:3e:ea:cd:59:28:91:8f:6d:a2:87:58:bb:d3:a3:75:6b:a8:
         c2:75:c4:bc:11:36:39:05:1b:f8:33:e1:13:0f:c1:1c:f1:54:
         e3:83:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:57:51 2025 by rpki-client