Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
File:                     jDgUcj_HVempuhvDNWZKUZu8HO4.mft (raw, json)
Hash identifier:          aw87tfG4uHaNePqXHWe4TzLbGXEnktHLPflpTfQzu6I=
Subject key identifier:   80:A4:69:C5:E9:57:8C:7C:7A:9B:12:1B:15:C2:5B:C2:85:D1:1B:52
Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
Certificate issuer:       /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
Manifest number:          048C
Signing time:             Thu 15 May 2025 00:04:37 +0000
Manifest this update:     Thu 15 May 2025 00:04:36 +0000
Manifest next update:     Thu 22 May 2025 00:04:36 +0000
Files and hashes:         1: jDgUcj_HVempuhvDNWZKUZu8HO4.crl (hash: bFULXlpTO7TgKwIwcsW/GPWI9aavZD7/V88bK5/AA54=)
                          2: 4AB7A910321C11EF9E87D582C4F9AE02.roa (hash: IWsNQTcMNZCIYRCXuETJFZmlLwkTa3oCDru3o4pBSFg=)
                          3: 46493600A91511ED9E2AC948C4F9AE02.roa (hash: Cvm3jGgtG/IO+qWj8hVQiUBhVroPBRD0seW7V/cVRpo=)
                          4: 45835FFCA91511ED9E2AC948C4F9AE02.roa (hash: ec1O1GTZ4dz+0/pZQ1zL6I07kP1Ns22R8lDvYSkImuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl
                          rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 00:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C40D, serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
        Validity
            Not Before: May 15 00:04:36 2025 GMT
            Not After : May 22 00:04:36 2025 GMT
        Subject: CN=68252f94-171f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:32:4d:5c:f9:03:fd:83:d8:c5:83:b8:7e:
                    e4:71:93:63:22:99:ef:9a:a2:42:13:d5:a3:56:0d:
                    45:c7:3a:73:55:dc:16:62:a2:e4:36:98:fa:23:04:
                    7a:a0:91:e3:69:ac:4d:81:c0:eb:27:9c:e2:2a:6e:
                    2b:f8:eb:e8:5f:7f:02:70:0f:f8:6c:08:6f:93:88:
                    96:f3:9b:0b:1d:81:f9:00:80:c3:11:ff:c8:57:70:
                    3d:53:6e:38:de:69:a3:81:3f:b3:34:95:a5:cb:c9:
                    81:b4:ce:6a:83:d3:c8:68:ea:62:72:b9:55:4e:1e:
                    bd:cd:9b:4e:83:b0:6b:35:73:84:67:c4:4d:c1:7c:
                    c9:49:4f:56:d8:26:4f:1f:5d:a0:2b:1a:dc:38:e2:
                    6f:71:6b:46:09:b2:1b:ee:b4:e8:40:76:5b:09:ab:
                    38:50:23:9d:99:ca:9a:0a:d8:10:b7:10:69:d8:12:
                    15:16:19:bc:2e:23:34:49:2f:8e:76:fb:41:7c:eb:
                    3d:75:ed:35:5c:04:f6:db:c5:40:67:31:27:aa:4a:
                    c5:d4:33:fd:40:a4:96:5e:39:2d:37:b7:31:64:b6:
                    7d:f7:3f:e6:e9:b4:a1:2e:67:cf:1d:59:89:c4:e9:
                    28:72:18:3e:82:47:02:d9:2a:56:d8:02:6e:c6:d7:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A4:69:C5:E9:57:8C:7C:7A:9B:12:1B:15:C2:5B:C2:85:D1:1B:52
            X509v3 Authority Key Identifier:
                keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:92:fa:21:3b:1d:aa:04:83:33:0d:3f:9a:39:75:93:b3:60:
         6c:b9:e4:f7:b8:b6:9e:41:12:a0:f8:a1:b6:20:2b:94:03:d5:
         23:7f:78:c8:aa:f9:87:d9:98:d7:49:f5:c1:4b:0f:ef:22:7f:
         91:84:d9:e7:0a:25:d7:91:54:44:3d:2c:a8:b0:4f:6c:35:75:
         c3:59:3e:0c:63:08:58:ed:d7:4d:fa:8d:a5:36:40:0d:8e:cb:
         7c:29:0d:83:7c:85:72:2b:e7:d5:41:69:fd:c5:a7:d3:95:f9:
         f5:03:75:dc:94:05:e6:7b:14:5b:47:1a:a3:71:ea:22:3d:f6:
         60:12:cd:95:5f:fa:48:ce:4e:71:17:52:07:ba:d7:10:f1:78:
         be:63:50:4f:d8:af:47:bc:c8:ba:00:32:84:63:b4:48:97:34:
         36:29:4a:9c:24:f7:74:2c:72:6a:29:5b:80:94:7b:84:76:c0:
         b8:17:a8:1e:70:a0:ec:b3:79:7f:16:ec:71:93:f5:06:51:93:
         d1:69:e1:30:46:7d:36:2f:ee:29:2c:a4:1e:49:33:05:13:9e:
         75:8d:9f:a6:aa:7d:0c:fe:2d:68:00:ce:03:cb:12:b0:42:95:
         bc:a0:3c:ea:a3:ab:44:1b:07:7e:4d:02:93:ab:7c:13:de:7a:
         23:5a:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:11:47 2025 by rpki-client