Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
File:                     dS97SFPDqcnwf9naxduWq37y398.mft (raw, json)
Hash identifier:          iyyCl0ou/8jEO7ttSz6E85F9pXwRQYRiJsYZwyG06Z4=
Subject key identifier:   8D:79:48:87:7D:43:F1:00:25:01:F8:6B:FF:A0:B7:6A:32:AD:08:43
Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
Certificate issuer:       /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
Certificate serial:       038A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
Manifest number:          0386
Signing time:             Sun 11 May 2025 00:25:34 +0000
Manifest this update:     Sun 11 May 2025 00:25:34 +0000
Manifest next update:     Sun 18 May 2025 00:25:34 +0000
Files and hashes:         1: dS97SFPDqcnwf9naxduWq37y398.crl (hash: lYqIADzLhvA5f7IurZwomxtStOnnzIknV+NfBGO7YKk=)
                          2: 6A4842A69F8611ECBE806D30C4F9AE02.roa (hash: vZ6MvUd27mPzfp5A96TFmJZRSLkOxkRd29pgThht6lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl
                          rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 00:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913979C, serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
        Validity
            Not Before: May 11 00:25:34 2025 GMT
            Not After : May 18 00:25:34 2025 GMT
        Subject: CN=681fee7e-ac23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:62:d6:75:d4:b8:d6:68:46:36:81:1b:2a:
                    13:73:86:d7:51:9a:75:80:1f:8b:de:8f:7f:a5:43:
                    d4:44:69:09:8f:d1:33:50:89:fa:50:75:46:50:1a:
                    d3:30:57:e6:32:42:94:e5:9b:9b:43:87:43:21:e8:
                    32:8f:06:46:87:54:dc:3c:2d:17:60:1c:1f:75:86:
                    ed:95:62:d5:47:79:1a:37:d3:eb:bf:e1:a2:09:11:
                    57:29:83:94:5f:a6:3c:3d:2d:47:78:98:01:33:cd:
                    d7:78:26:a2:5a:07:0a:e2:c5:9b:8d:52:fc:dc:56:
                    c7:eb:cc:ea:99:68:1a:af:34:36:8a:e5:6b:68:d7:
                    61:76:96:7b:5b:87:b9:ef:8f:18:b1:cb:d2:de:01:
                    3f:c7:be:21:40:9f:dd:0d:58:4f:ee:a0:ac:41:21:
                    cb:80:28:8d:23:f5:fc:71:d6:6d:13:c2:1b:52:50:
                    17:8e:f6:9d:e6:f7:12:8a:ae:94:6e:5b:1e:06:d7:
                    be:d5:e4:02:78:f9:ed:48:cb:8a:e6:15:7c:1d:53:
                    ec:59:00:35:0c:8d:c1:fc:5c:cf:9a:e0:ef:e1:20:
                    29:79:48:7a:87:5a:dc:b8:e0:a3:08:3b:03:ea:48:
                    dd:ee:96:96:f9:eb:bd:d3:4f:7b:a1:f3:52:6a:74:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:79:48:87:7D:43:F1:00:25:01:F8:6B:FF:A0:B7:6A:32:AD:08:43
            X509v3 Authority Key Identifier:
                keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1a:44:b9:44:09:e7:47:33:8a:db:de:bd:7a:8b:f3:cc:22:
         a0:d0:a5:48:18:50:cd:56:8d:89:4b:cb:09:61:16:d6:be:39:
         d3:a8:7e:43:d9:90:83:cd:27:fe:a0:9b:76:25:50:ae:2a:ee:
         ff:e4:5b:39:eb:58:48:78:fd:1f:24:4a:d1:4c:da:c7:0b:72:
         7b:e7:ad:33:56:b7:96:bc:bc:21:f4:33:02:c3:e4:f7:bb:b5:
         5e:64:56:de:0f:f0:4e:d5:ac:1b:28:37:55:46:48:a5:8b:bd:
         98:e3:2e:29:27:5f:70:78:09:f2:85:02:00:f1:88:fe:5c:a3:
         49:dd:94:44:ba:07:02:3b:a5:d8:9d:1b:fb:99:ef:b7:8e:cc:
         61:da:b2:9d:c1:54:3c:96:63:90:33:c9:62:a1:d7:18:0f:69:
         79:96:98:01:8f:02:01:8e:0b:1f:10:64:ef:bf:da:a2:91:2d:
         3d:a5:59:76:b6:3e:b1:ed:42:f3:8d:4a:41:0d:0f:51:09:b0:
         29:fa:ad:f4:30:dc:c7:98:90:d7:55:94:87:d3:0f:31:82:3e:
         98:37:bb:f9:63:ad:cc:1e:20:b7:75:5a:f5:ea:32:42:42:ed:
         88:97:58:76:86:ac:1b:c4:44:a6:8c:2e:48:3e:bc:30:6d:25:
         05:70:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:09:01 2025 by rpki-client