Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File:                     ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier:          nq856RoXe7M5lKnfnkKAxbg9GZsWzYbQxNdM8JmzYvc=
Subject key identifier:   65:C5:E1:89:95:EF:EC:34:2E:C5:3C:E0:BA:97:91:AB:45:B6:3B:FA
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number:          015E
Signing time:             Thu 15 May 2025 03:34:22 +0000
Manifest this update:     Thu 15 May 2025 03:34:22 +0000
Manifest next update:     Thu 22 May 2025 03:34:22 +0000
Files and hashes:         1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: MygKMjRE8+UUAEkeNwOEK3K7KBCVQLJ+xrsv1tYbYds=)
                          2: 4950E3D278DD11EE8A6C4021C4F9AE02.roa (hash: Wqf/UZ8rMgVoYOxFa1Ev+jSS/yI2xrRNpsu2d8EWaHI=)
                          3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: WjHWHlMw004j7AFf+/V42umH42AnNHW4KVxKLw4YzKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 03:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: May 15 03:34:22 2025 GMT
            Not After : May 22 03:34:22 2025 GMT
        Subject: CN=682560be-3c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:58:6d:9a:26:d0:2a:11:83:9c:ed:6e:d0:
                    39:4c:62:39:84:59:dd:a4:36:6c:87:b3:2a:b4:39:
                    cb:ce:05:9a:8d:6c:0b:3e:90:8d:09:58:14:8e:96:
                    b0:9b:37:f1:03:00:f0:ca:59:e7:9f:80:c6:5d:2b:
                    18:f2:38:3c:84:28:2e:84:ef:b3:44:bb:db:97:b7:
                    67:08:5a:fc:9c:de:32:c2:c0:e3:87:4d:f1:ca:12:
                    37:dc:68:8a:68:ef:c9:74:ee:ce:f2:9a:e9:86:5f:
                    76:6d:2e:49:39:57:8b:b4:79:bf:fb:02:90:8c:b1:
                    e3:41:e3:34:d9:d2:cc:0b:cd:40:92:f2:5e:7d:a6:
                    52:c0:ee:88:31:19:01:7b:2c:d6:e2:80:80:d5:e5:
                    a8:ea:0f:29:06:ad:30:fb:01:4c:22:6a:75:e8:c2:
                    e7:59:c7:2a:ac:ea:64:99:20:3e:e1:9f:25:7b:c1:
                    98:2e:7d:50:c9:4f:ca:99:39:0c:05:6f:56:96:07:
                    be:16:b3:b0:33:6e:c9:57:ec:7e:04:60:be:fa:2f:
                    48:c6:18:04:dc:5d:4f:f6:ec:5e:71:ef:b5:f6:90:
                    04:34:0b:a3:6d:65:0e:ef:f7:40:6f:10:26:8c:47:
                    a6:18:83:d7:72:b0:95:d8:69:57:2b:bf:42:bf:6c:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C5:E1:89:95:EF:EC:34:2E:C5:3C:E0:BA:97:91:AB:45:B6:3B:FA
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:68:2e:03:ac:38:8e:af:22:0b:0e:72:39:4a:7f:1d:26:42:
         ee:13:a1:fd:97:e1:d3:1b:34:72:55:a7:e5:06:ec:7d:84:6d:
         86:07:77:ba:69:de:37:58:e1:5b:75:ae:8c:36:d4:00:d9:14:
         cf:4b:7b:ff:63:ff:6a:0d:b0:dd:d7:9a:24:34:d8:45:49:ef:
         6c:4f:c4:94:3c:25:78:10:52:3c:48:bc:42:cb:d1:f8:c4:3a:
         44:92:2a:1f:f3:ae:10:12:c2:11:63:88:02:a1:4b:89:b2:6d:
         73:1e:f1:e2:aa:2b:69:f6:90:51:23:93:5f:b7:1f:d2:14:40:
         ac:c4:f7:b7:ed:6f:54:e1:89:83:9e:92:fa:29:7e:29:f0:8a:
         1a:1c:ce:74:a5:2b:13:24:0a:48:86:e2:a3:df:51:bd:29:b9:
         d3:3f:b4:a2:e2:08:7c:a6:da:4b:a4:f0:29:8c:6a:9b:5e:28:
         06:48:6c:3b:f2:fd:92:1b:44:55:3f:57:62:42:37:15:ee:60:
         7a:59:dd:cc:42:f5:59:8c:4b:4b:34:68:75:29:68:ab:a2:e6:
         1e:0a:86:20:2a:47:ed:dc:66:4c:a1:b6:c7:d0:51:9a:a8:9c:
         8d:3f:89:51:b6:55:65:b2:65:a0:1b:07:b2:51:7d:48:21:48:
         88:92:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:35:12 2025 by rpki-client