Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
File:                     S7gN2OW27S9XRVhQcDM-9KFdcis.mft (raw, json)
Hash identifier:          2lmZogjvirMPWnCN+lsRq/gGNHgUMeWhNgnuLdJ7IU8=
Subject key identifier:   A7:7F:1A:C8:C1:F0:B8:FF:FF:2D:8D:39:1C:B7:55:E9:F7:78:47:32
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Certificate issuer:       /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
Manifest number:          0115
Signing time:             Tue 13 May 2025 04:06:50 +0000
Manifest this update:     Tue 13 May 2025 04:06:50 +0000
Manifest next update:     Tue 20 May 2025 04:06:50 +0000
Files and hashes:         1: S7gN2OW27S9XRVhQcDM-9KFdcis.crl (hash: m9SG4+oYQQMpiGA+z2GBr3IcnWjr2bSZ4uQOrBVrq0w=)
                          2: 950812A4C5FE11EFA76A3266C4F9AE02.roa (hash: GtV0FeTeVluX/XanCeN+2QewCWE0y4Wr5uEweqnsLBI=)
                          3: 2B752026906B11EE8F088143C4F9AE02.roa (hash: i5nUZW342vifNZFiCtQR4fCIygdGR2eDt7BNl5170G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
                          rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B077, serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
        Validity
            Not Before: May 13 04:06:50 2025 GMT
            Not After : May 20 04:06:50 2025 GMT
        Subject: CN=6822c55a-f8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:79:d3:ed:97:c3:53:0c:36:72:2d:8f:5c:
                    e0:5f:42:cd:e9:42:20:ba:f8:72:9c:41:f3:5e:70:
                    00:4e:3c:0d:59:92:06:07:d7:e2:5e:fd:11:89:54:
                    51:08:d5:72:fe:1c:86:fc:f9:46:ef:59:3f:31:98:
                    23:77:6e:4f:78:b3:43:53:cb:42:f0:3c:a1:67:3c:
                    7e:64:de:5b:9b:8f:f9:45:8d:b7:c3:6d:1c:b9:a7:
                    19:50:c1:77:bc:2f:d5:66:9d:34:ac:92:c2:f4:e5:
                    bc:7b:55:b4:57:5c:cb:e3:e2:89:38:58:ce:31:61:
                    2b:f3:e3:8a:a8:56:53:9d:22:98:11:fc:e5:9f:5d:
                    7b:88:2c:69:a6:ce:97:82:9b:f8:83:b4:ef:59:8c:
                    20:04:92:94:ce:2b:8c:18:93:94:b8:48:16:71:23:
                    8d:5c:be:9a:84:0f:41:ad:72:02:7c:9f:1e:fc:8d:
                    8d:aa:ce:04:d8:1d:f7:88:42:1f:8a:60:53:b7:93:
                    d2:2c:93:3d:b2:68:c5:31:e2:06:50:f5:2e:71:d6:
                    3e:ca:f8:28:5e:30:83:10:44:62:32:22:d1:83:23:
                    1b:83:5b:89:5e:11:d4:29:61:e1:b6:0a:e9:26:39:
                    7c:43:83:89:9d:16:22:1f:78:ce:6b:68:2f:04:f3:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7F:1A:C8:C1:F0:B8:FF:FF:2D:8D:39:1C:B7:55:E9:F7:78:47:32
            X509v3 Authority Key Identifier:
                keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:ca:81:2b:47:57:d3:1e:8a:5e:1b:ee:cd:f2:df:46:2a:
         4d:f3:ea:bc:58:e8:ab:83:73:9e:ea:a2:07:68:5e:ac:15:6c:
         29:78:7f:6a:90:11:a8:46:fc:21:4d:75:83:2a:ca:a8:ed:85:
         b5:a8:6f:43:a4:a4:f8:1e:71:46:d7:fb:8f:13:a3:b9:f2:75:
         f0:dd:5d:ec:57:2d:b2:35:d1:4c:dc:9e:81:1d:d1:e8:86:f6:
         18:25:71:08:71:a5:75:d7:ef:62:62:f9:36:dc:88:bd:2d:87:
         41:bd:57:a8:90:4f:06:38:12:ff:e5:b0:36:31:c4:95:20:9c:
         20:af:a6:bf:63:a9:cf:61:c9:b5:00:64:7e:e6:17:4f:f3:83:
         96:b1:4d:16:60:b5:a3:9e:28:b7:77:34:0c:6e:f0:84:d5:f2:
         a4:69:13:f4:a0:d4:a6:ab:6b:1b:67:59:44:3b:c3:80:a6:40:
         24:dd:3d:10:12:15:10:de:ec:e5:63:94:8f:21:8f:95:51:60:
         fb:51:ea:d1:50:b5:ee:b0:66:87:bc:5c:16:c9:5e:3a:18:cb:
         b0:25:b2:0a:38:2d:8c:81:eb:37:b3:cd:31:a7:ef:f5:9f:a1:
         9a:f2:23:5c:32:96:68:00:28:88:30:eb:28:0e:85:31:f3:db:
         14:d9:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:09:41 2025 by rpki-client