Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File:                     cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier:          n4WszGGVJUCvQc7WByM9SdIZEU5QKejZHOISBONZ+fU=
Subject key identifier:   FB:73:36:3D:DB:58:C1:20:4D:CB:A9:3C:64:10:59:E3:42:9B:E2:D0
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer:       /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number:          01E5
Signing time:             Fri 09 May 2025 01:52:20 +0000
Manifest this update:     Fri 09 May 2025 01:52:20 +0000
Manifest next update:     Fri 16 May 2025 01:52:20 +0000
Files and hashes:         1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: b3oZzsu/FpW3cuS7UflOdaTXOToQYSNEoQWsSL8iG8k=)
                          2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: 3aaeEi1YrA3uSceTUOZGuJZHBHy8WbpEjF+B/7Isrys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
                          rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 01:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
        Validity
            Not Before: May  9 01:52:20 2025 GMT
            Not After : May 16 01:52:20 2025 GMT
        Subject: CN=681d5fd4-fd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:f6:7d:d1:5b:8a:53:8a:91:c2:32:d4:3c:
                    5a:a0:fb:e4:c5:79:fe:64:9d:37:b5:e8:93:71:ce:
                    40:fb:04:a4:80:fe:50:95:e5:31:f9:15:15:4b:d7:
                    a1:52:57:4a:d0:cc:8f:5a:f4:1d:65:4b:2b:db:17:
                    59:f6:be:e4:f5:ec:5c:31:e7:64:1e:a9:23:88:a1:
                    38:b8:36:d5:27:46:d6:1a:09:48:af:8b:88:7b:cc:
                    b8:0a:a2:0b:4b:8b:74:d4:be:83:e0:53:2b:d0:c9:
                    b8:03:47:ce:c4:ad:24:aa:40:40:fe:0e:f1:27:19:
                    ec:52:ad:c8:ad:c3:c1:9e:21:f6:55:f0:6a:bb:6d:
                    b7:69:ac:cc:e2:e8:68:0e:99:91:f4:2b:98:c1:9d:
                    60:fe:c6:40:c7:71:45:8f:13:03:b7:bf:4a:cf:12:
                    0e:4c:0a:08:6f:91:c6:01:49:77:fa:52:0a:33:b8:
                    ca:96:dc:dd:43:1e:80:6e:8a:55:bd:71:78:ec:27:
                    f7:80:68:51:af:a5:86:52:25:dc:ac:88:4e:03:2a:
                    1e:f6:b4:e7:9d:f4:e2:36:9e:e4:14:23:3c:e7:a7:
                    36:4e:6d:08:0f:d1:03:fe:2f:87:5b:b1:da:d8:db:
                    79:3b:50:07:ed:bf:f8:8e:25:77:49:64:92:14:7e:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:73:36:3D:DB:58:C1:20:4D:CB:A9:3C:64:10:59:E3:42:9B:E2:D0
            X509v3 Authority Key Identifier:
                keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:ec:5a:5a:88:a1:cb:3e:9b:07:01:c2:8d:d0:89:38:a0:
         a8:94:fa:d8:ae:30:f8:0a:ca:65:63:51:f1:a5:6a:15:b7:bb:
         88:bb:5f:3a:51:44:dd:01:51:f8:27:6f:6d:f2:f2:db:3f:a7:
         30:76:2a:40:46:7d:32:c4:fc:ec:0a:12:a1:91:60:19:5f:9f:
         b1:6f:2d:d9:fe:5a:13:c4:d7:f1:c7:c4:a6:01:13:e7:21:9d:
         56:02:87:20:20:aa:b8:d0:5c:36:2e:d4:08:51:a3:0e:00:01:
         a5:89:e9:18:e5:3a:bd:52:bd:79:da:e7:08:8d:88:34:f9:ee:
         09:7d:36:48:c1:99:27:c6:4f:f0:2a:8c:8f:31:3c:18:c0:70:
         bd:f4:bc:d5:84:17:29:29:2f:97:80:8e:92:20:5d:14:57:85:
         99:db:65:a5:f7:2d:25:fd:84:34:75:b5:5a:57:71:33:03:30:
         55:a2:7d:57:c9:48:8a:57:9a:12:c6:14:fa:4d:fd:4f:8b:d4:
         b1:bc:86:4f:dd:a6:fc:02:e0:c1:23:80:35:46:d6:2e:7a:6b:
         7e:a2:5f:03:ef:b7:26:ab:65:56:f8:49:c4:10:bc:3f:90:91:
         6e:cd:0e:24:1c:ba:5a:ff:f8:e0:5d:e0:3d:8b:bd:c0:79:d7:
         02:a5:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:52:52 2025 by rpki-client