Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File:                     H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier:          uHhAeEpdyX/oGxxBbNzhEW03hT2+YL8zghHw7ajKs2o=
Subject key identifier:   71:56:84:D0:83:D8:E1:08:8D:7F:54:DA:00:6B:26:5E:57:4F:55:87
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer:       /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial:       0C30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number:          0C1F
Signing time:             Fri 16 May 2025 18:51:37 +0000
Manifest this update:     Fri 16 May 2025 18:51:37 +0000
Manifest next update:     Fri 23 May 2025 18:51:37 +0000
Files and hashes:         1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: vacxo/En/hpquGS2bYyxsnA8mVYqQXsE5PKsBMoQdMA=)
                          2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: jjQzstnlPYenRZWamhU8+OP/S56HuWE5rPwPEoYqLOI=)
                          3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: FwxCipQAsBk9UBv8EDrb+Vo/Shz8I+uuiBIqO9LmFMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
                          rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 18:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3120 (0xc30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
        Validity
            Not Before: May 16 18:51:37 2025 GMT
            Not After : May 23 18:51:37 2025 GMT
        Subject: CN=68278939-36dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:12:6f:12:c3:c8:91:8b:32:53:62:b5:1d:
                    a1:c7:6c:78:fc:69:c8:62:28:c8:ef:18:91:5e:44:
                    eb:db:e4:c3:0a:a8:0c:5f:6b:db:75:2a:57:f9:69:
                    ee:b1:9f:9c:ae:c5:3c:67:2c:e7:ed:d1:0e:4b:b0:
                    8c:d8:cf:3b:c9:12:49:1e:91:b7:db:82:e2:60:21:
                    5e:74:52:c3:eb:85:33:c1:e8:da:8e:fe:d0:98:f0:
                    32:7f:99:7d:44:cb:a1:6d:4f:d4:e3:0b:3a:a6:01:
                    12:5d:52:1a:75:b6:0b:61:36:03:73:b5:2e:ba:5a:
                    57:b9:a0:e7:a5:cf:86:77:81:0c:8e:33:a7:0e:6a:
                    ec:b2:d1:13:1c:2e:66:5e:aa:37:42:cd:f0:83:0b:
                    3b:5a:01:cd:39:cb:cb:c8:e3:a6:67:2b:0a:1a:94:
                    d9:0d:62:3e:48:93:be:a3:48:cb:bb:31:23:9c:56:
                    b0:34:d4:93:bb:6d:3f:83:87:be:64:39:e3:b6:c2:
                    66:c8:5a:7b:a3:76:df:e7:85:de:99:4b:dc:f9:c6:
                    39:8d:60:cf:a9:4b:20:84:b6:8f:0b:68:c8:48:76:
                    e4:e8:59:82:85:fb:0d:51:7e:cf:c2:66:64:56:12:
                    8a:4d:a7:3f:25:5d:c8:9e:18:af:f6:6b:e7:8a:9a:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:56:84:D0:83:D8:E1:08:8D:7F:54:DA:00:6B:26:5E:57:4F:55:87
            X509v3 Authority Key Identifier:
                keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:59:86:2a:d4:59:6d:24:90:a1:e9:af:59:b6:65:11:75:23:
         0d:fb:34:f4:70:e8:4e:76:13:c8:d2:f9:41:00:94:af:ef:05:
         b9:e7:9b:06:c3:cb:aa:12:f3:73:50:ee:15:d6:bb:a0:d4:e5:
         89:79:c1:c2:60:48:13:f8:2c:80:f6:67:e3:f8:f3:e4:a6:16:
         5a:eb:38:71:e5:3e:33:b8:8a:c2:8a:bc:00:2a:01:03:2e:15:
         a1:5d:a6:37:98:27:09:64:7d:be:46:2a:20:1c:9b:0b:6c:0b:
         15:28:78:3f:11:2a:36:bb:58:00:2d:29:f1:73:68:12:17:fd:
         35:1c:15:4e:7a:51:6b:df:c2:93:6e:07:d2:0f:56:d5:07:9c:
         27:30:25:a9:6a:fa:6d:93:2b:ce:e6:d4:f6:d9:e1:6d:6d:62:
         6c:bf:cd:b5:cf:9a:fe:30:25:c7:5d:b2:da:98:79:37:84:71:
         04:66:7f:22:6b:b8:d1:3b:39:bc:cb:6c:19:c0:64:01:c5:49:
         c5:b8:2f:9d:f4:cb:d5:d5:4d:00:04:46:5a:1f:16:92:e6:2a:
         0c:56:9e:00:7b:a9:73:9c:df:ce:fe:b5:c1:00:d7:a4:8f:71:
         04:6e:39:27:ea:eb:b6:40:d6:a4:29:ca:16:55:35:8f:27:e2:
         10:91:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:54:29 2025 by rpki-client