Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
File:                     aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json)
Hash identifier:          qbwrJVFuC0lY9hX2kGEQfgfb1xRS/b3wWanDW5dxVCE=
Subject key identifier:   24:38:73:99:B5:35:9B:5F:2B:6A:55:7B:D5:96:52:7A:B9:83:25:0E
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
Manifest number:          9F
Signing time:             Tue 13 May 2025 05:27:17 +0000
Manifest this update:     Tue 13 May 2025 05:27:17 +0000
Manifest next update:     Tue 20 May 2025 05:27:17 +0000
Files and hashes:         1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: n0ONcvdBFNXgrwNMRyWU27ahh8F2nN2rtNfZ6hesm/E=)
                          2: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: sPbStdVNUQpgeo3cCvwb+dSIcpm/Yx/AptYb/ozc94k=)
                          3: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: LFS2UufFNk1EGZW0kkO6tt4P+aiBcuisDdPBhJ+0Sd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
        Validity
            Not Before: May 13 05:27:17 2025 GMT
            Not After : May 20 05:27:17 2025 GMT
        Subject: CN=6822d835-e468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:58:d3:2d:7d:78:9f:3a:c0:d2:38:22:d2:
                    b5:c8:b5:8d:2a:4e:f6:08:a2:03:21:b4:88:ca:93:
                    97:e9:96:74:89:a5:d3:4e:20:b6:3b:35:ca:90:ea:
                    03:e3:66:12:05:80:54:29:db:25:8a:81:d6:f4:ae:
                    27:b3:76:18:7b:d0:c2:dd:5c:2f:30:59:35:56:aa:
                    44:96:05:99:12:a3:8c:41:6a:5f:f9:a0:a3:0e:30:
                    36:00:73:b0:20:a9:c6:e9:d5:7e:96:70:d4:c1:87:
                    e8:88:7a:1f:a4:22:be:46:28:46:fc:00:29:4f:83:
                    50:27:1d:89:6f:19:c4:da:92:d0:71:75:8b:c8:c3:
                    34:54:e2:80:44:8a:d8:e8:d5:0a:0d:f7:18:35:36:
                    1c:70:fe:c2:12:6c:3c:55:0f:d7:4f:87:4c:88:ac:
                    de:1e:f5:ee:e0:b7:bc:cc:fe:88:9d:cf:34:97:50:
                    a6:63:dc:86:2c:07:a9:b0:9c:b0:98:fa:e1:8d:ce:
                    4c:bd:eb:c1:81:a0:62:a5:8e:52:b3:17:6e:3c:4b:
                    2c:6c:0b:39:de:fb:9c:0a:cd:bc:92:18:a0:ce:af:
                    3b:fd:dd:c5:ac:b5:26:76:01:20:88:03:f1:c4:51:
                    1d:55:91:3b:0c:c3:94:da:a0:9a:23:fd:ac:a0:2f:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:38:73:99:B5:35:9B:5F:2B:6A:55:7B:D5:96:52:7A:B9:83:25:0E
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5b:bf:e8:d6:33:ea:8e:7f:b1:f3:11:30:10:67:fa:60:cb:
         fa:6b:2a:17:cb:a2:fc:fc:21:46:28:43:43:82:35:7f:46:cc:
         dc:ed:c2:ec:67:41:28:67:3c:d8:de:9b:cc:81:64:35:4b:78:
         62:19:c1:8d:f6:ba:7f:41:8c:83:bf:a5:40:2f:66:c4:fe:f5:
         36:d8:35:7d:41:38:fa:e2:94:42:81:b5:c5:28:11:c5:72:79:
         06:a8:44:07:ef:42:e4:51:8f:94:00:06:cd:a8:10:84:6b:dc:
         41:6d:9d:55:e8:15:c7:ae:61:bc:2a:38:9a:de:f1:a5:c1:cd:
         84:25:83:b4:4a:c3:06:d6:aa:67:b2:f3:af:4a:21:02:38:f2:
         1a:61:62:b7:fb:f0:ea:ba:e2:fb:a1:ee:a5:2f:e0:89:ce:ee:
         58:a1:63:d0:82:c4:ee:3d:41:01:51:de:cf:f4:77:d1:8b:78:
         69:e6:51:c6:c1:7d:ea:6d:66:37:87:ce:6c:70:48:8e:c0:75:
         e7:4f:88:56:1e:e7:3f:98:52:75:62:54:86:43:94:3d:04:84:
         a9:eb:b8:09:e4:a5:d4:24:8c:55:d8:47:dd:ff:18:e6:59:18:
         d5:ff:df:28:4a:a4:a2:6c:c2:7b:dc:e6:50:06:fd:ac:40:af:
         41:5a:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:37:11 2025 by rpki-client