Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
File:                     g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json)
Hash identifier:          vwLoANozuvPcVqNFoae6BZ4EPkfiTr3c+pyMefGSylY=
Subject key identifier:   3F:E2:79:D1:31:E2:2A:BD:36:15:25:AC:09:EF:88:8E:B9:1F:4D:D2
Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
Certificate issuer:       /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Certificate serial:       097E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
Manifest number:          0978
Signing time:             Fri 16 May 2025 20:23:52 +0000
Manifest this update:     Fri 16 May 2025 20:23:52 +0000
Manifest next update:     Fri 23 May 2025 20:23:52 +0000
Files and hashes:         1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: gNNiteOS1nNtgDi50tu32o+ow4mvXTtwvZvPop5Nxps=)
                          2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
                          rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 20:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430 (0x97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
        Validity
            Not Before: May 16 20:23:52 2025 GMT
            Not After : May 23 20:23:52 2025 GMT
        Subject: CN=68279ed8-6515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:87:1e:f7:43:92:ca:ad:35:77:76:e6:2f:
                    8c:e7:e3:7a:0c:7d:16:6c:a9:16:cd:be:52:38:8b:
                    81:27:38:20:28:8a:b1:d3:16:65:c0:56:47:74:15:
                    5b:25:0b:e6:2e:97:ed:c2:11:b4:e1:8a:7c:80:6b:
                    ee:38:d0:b9:e5:14:ef:a5:4e:90:30:f4:f6:e7:b8:
                    cf:b1:fd:6d:c2:b0:66:82:15:2a:c1:07:17:c0:f1:
                    36:0f:3b:ff:3d:47:1c:99:54:7a:83:49:a1:1c:9b:
                    c4:2b:7e:1f:4d:ba:c3:ea:ba:fd:ef:77:d5:77:05:
                    15:4d:38:3e:42:01:64:ea:01:21:71:0b:08:fe:2b:
                    cf:46:b4:60:64:3e:b5:7e:00:a4:04:c8:72:5c:54:
                    5c:a9:44:f3:ef:bd:bb:c3:b9:58:97:ba:b0:17:dc:
                    8c:58:b3:84:6a:c9:4f:54:b7:c9:ab:60:9c:dd:7f:
                    35:25:7b:a8:01:0d:39:37:58:f6:b0:8b:4d:45:d6:
                    82:83:17:34:41:50:d8:ba:3a:a5:1e:b9:e4:b4:af:
                    af:5f:11:ae:44:c3:4a:70:6d:da:b0:e1:80:36:4a:
                    58:33:ed:3f:72:bd:dc:c9:08:09:87:7c:e5:0d:30:
                    6d:84:f2:a5:4c:b8:5b:1d:3d:33:aa:3c:f3:95:70:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E2:79:D1:31:E2:2A:BD:36:15:25:AC:09:EF:88:8E:B9:1F:4D:D2
            X509v3 Authority Key Identifier:
                keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:bd:29:81:ad:70:ee:f6:d0:83:36:df:40:b3:b4:56:e0:
         01:21:66:c8:f6:fc:0a:a0:ba:44:39:df:b3:ce:71:c8:c4:db:
         fa:97:d7:53:9e:86:ed:33:3d:e8:93:0e:67:b4:78:77:a4:ae:
         24:04:18:ac:d1:d5:2c:61:78:3f:85:b2:bf:fe:51:94:5d:0a:
         30:5b:e5:f7:d6:a2:b0:62:47:80:28:e5:79:03:18:5e:89:73:
         63:c6:80:a0:bf:f7:ca:c2:85:5e:43:e2:32:37:d6:7a:4d:9d:
         2c:81:de:75:68:78:7f:d6:1f:e6:8d:b3:66:64:ce:59:00:12:
         b3:c6:38:d4:6c:66:0e:6b:9d:9b:cf:64:ff:8d:3b:f0:0d:a0:
         06:66:f5:1c:78:de:b8:d6:6c:83:81:89:a1:27:48:1e:35:48:
         a9:16:82:4c:ca:32:af:45:3c:0b:a8:2c:35:09:5a:e7:07:73:
         9e:b9:7c:c9:e7:8e:36:3d:ed:33:e7:f4:9c:b0:5b:74:d5:50:
         cc:61:f6:77:7a:51:ab:4e:73:b2:30:0d:80:00:8e:3b:5a:25:
         5e:ff:dc:da:91:3e:00:5f:40:30:cb:80:9a:93:5d:7d:9c:80:
         c4:8d:0c:53:fd:eb:25:1a:e5:e9:87:cb:cc:5f:d5:3b:f2:35:
         72:f5:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:04:21 2025 by rpki-client