Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
File:                     CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json)
Hash identifier:          6ICoz2F+4CMOuiAzeKk/YbjEqrO81O5FgXbqAOFNo/o=
Subject key identifier:   0F:CD:D2:AF:C4:4F:0C:84:29:99:32:F6:BA:65:E7:6F:81:16:42:1E
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Certificate issuer:       /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial:       116E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
Manifest number:          115A
Signing time:             Fri 16 May 2025 17:29:36 +0000
Manifest this update:     Fri 16 May 2025 17:29:36 +0000
Manifest next update:     Fri 23 May 2025 17:29:36 +0000
Files and hashes:         1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: 0bhehNdaS86tw4X76fL49DBTAknAzneL/VGdYoI+yjY=)
                          2: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=)
                          3: 03960D4AFF6411EFB94AD726C4F9AE02.roa (hash: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs=)
                          4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
                          rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 17:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4462 (0x116e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F600, serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
        Validity
            Not Before: May 16 17:29:36 2025 GMT
            Not After : May 23 17:29:36 2025 GMT
        Subject: CN=68277600-e866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:9a:86:58:f5:44:20:7c:bd:c8:bc:61:f6:
                    3a:69:d1:b5:d0:75:e4:66:e7:16:84:0a:84:eb:c1:
                    d1:2c:43:c6:d3:63:ee:f1:68:d7:1e:9e:b8:0b:0e:
                    53:a0:05:b4:6b:80:bf:b1:6b:1e:71:1d:42:41:1b:
                    14:06:47:67:c6:2c:99:08:22:e5:a7:4f:b0:aa:4e:
                    ee:59:5f:1d:8a:3a:dc:3c:28:3b:9a:59:ab:77:2c:
                    63:21:d1:35:c9:e8:3c:70:69:85:de:12:23:94:a1:
                    93:64:56:21:92:ee:4b:39:a5:3b:40:b1:64:10:d4:
                    6b:e5:af:e0:b9:5a:1f:82:b7:ba:52:d4:b9:54:57:
                    c0:b5:a2:2f:ab:54:a4:6e:bd:f3:f4:79:a9:65:06:
                    dc:2e:44:99:7a:4d:a6:ec:7b:ad:e4:73:d4:17:95:
                    c7:d2:37:89:78:28:0f:01:05:bb:f8:c0:63:53:f2:
                    5c:ff:af:0f:cd:5d:e6:58:53:8d:3d:4a:c7:25:b4:
                    2b:2f:76:39:13:88:84:99:05:7f:19:25:b9:5e:21:
                    71:22:ac:95:6e:2e:92:61:61:69:99:a1:ae:9f:51:
                    3e:3b:c9:1a:0b:6a:dd:78:e7:3a:bb:09:26:1c:47:
                    6b:13:2e:af:85:cc:db:cf:b8:84:b1:45:ba:91:33:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:D2:AF:C4:4F:0C:84:29:99:32:F6:BA:65:E7:6F:81:16:42:1E
            X509v3 Authority Key Identifier:
                keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ea:9f:a0:d1:82:a1:60:c8:93:fd:c1:a8:02:2f:81:ee:2a:
         0a:59:2f:21:dc:9c:18:20:44:99:85:98:2f:0c:d7:9b:38:64:
         33:c5:ab:eb:ef:cf:b1:d4:5d:63:2c:b8:17:20:ef:a9:e6:75:
         c5:5e:fe:13:a4:52:dc:ba:23:42:ab:db:a3:cf:65:c7:94:e5:
         ca:7a:bb:94:0c:d7:00:21:63:25:b8:e6:26:59:f1:95:bb:45:
         ca:c3:59:14:ce:10:fa:f7:fc:bb:08:f7:de:e7:90:cd:d1:b4:
         d8:5f:fe:81:ba:77:5a:fe:67:39:ed:a6:4d:58:36:30:db:ee:
         95:04:ea:ec:2c:9f:52:52:a3:c2:0c:52:0d:f6:cd:92:c9:ce:
         89:b0:83:ce:33:b9:c5:d4:ad:ae:75:1c:6a:3d:e0:ea:a5:f2:
         54:78:d2:99:79:65:b4:46:94:ea:7e:6a:82:3d:a5:7e:dd:33:
         20:55:24:2f:48:7b:a9:83:8b:40:5d:f9:9a:e0:e7:13:c4:1a:
         12:44:aa:83:f1:db:21:c0:03:48:ef:24:91:6c:70:1b:8a:83:
         59:5c:99:c6:e7:87:e6:cf:4d:51:ae:29:75:3f:31:1a:ba:80:
         73:ba:83:67:e9:21:fb:fe:ef:c5:25:36:c2:68:79:82:d0:49:
         2a:15:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:18:51 2025 by rpki-client