Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          Ju+2yf+Fo3MjV6Jmed4FwT8126gAO6w9UMeqTyVfdtM=
Subject key identifier:   BC:D3:40:EA:31:FB:94:A7:8A:19:C5:1B:9A:DE:2F:D0:68:64:EF:CB
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          B5
Signing time:             Sun 11 May 2025 04:47:14 +0000
Manifest this update:     Sun 11 May 2025 04:47:13 +0000
Manifest next update:     Sun 18 May 2025 04:47:13 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: lRHqt6a3fqyO0gpvvawm+j0+LmUgJU7XrYrC2un7aGM=)
                          2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=)
                          3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: May 11 04:47:13 2025 GMT
            Not After : May 18 04:47:13 2025 GMT
        Subject: CN=68202bd1-2fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:4b:39:7e:8a:43:81:7c:2b:59:33:41:51:
                    20:b2:f1:be:51:88:d2:35:0e:75:4d:00:e5:cf:c0:
                    db:08:07:72:2f:0e:de:a4:16:36:e8:ed:db:67:94:
                    08:a1:53:8f:0e:0c:7a:e6:7c:87:ff:d7:8b:4f:05:
                    02:31:d9:86:eb:06:86:81:86:68:80:e0:ee:c0:7d:
                    87:58:dc:64:84:43:8d:f7:df:40:64:f9:75:b7:0f:
                    30:91:6b:c3:9c:3f:b6:08:c9:aa:b9:8e:30:a6:e1:
                    ad:3e:46:63:4f:27:ca:23:2f:1d:f8:4a:42:0f:5b:
                    85:8d:84:61:41:9e:90:fb:bc:c7:c2:15:8b:fd:c0:
                    68:db:a8:2d:a0:81:2e:ee:b4:e6:d5:6b:87:7f:50:
                    8f:53:78:81:8b:92:cc:47:8c:5f:ef:c6:5c:a3:b0:
                    35:4a:ed:40:cc:4b:c6:87:88:b8:47:67:1f:19:fe:
                    53:64:07:d1:b7:ec:86:b5:ae:d3:99:1f:91:df:89:
                    6f:d5:b3:f8:62:68:b6:d8:37:af:80:fb:d1:5b:06:
                    b9:30:82:c3:ca:e5:66:1f:4d:ea:eb:5a:57:69:36:
                    d7:2a:64:fa:b0:f1:bf:87:14:1f:44:6e:2b:0d:23:
                    96:ac:2d:6d:8e:ad:43:c7:c8:7c:90:1a:9f:b7:cf:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:40:EA:31:FB:94:A7:8A:19:C5:1B:9A:DE:2F:D0:68:64:EF:CB
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:46:87:a0:a3:9f:07:23:c8:c8:9b:af:77:68:c3:4d:0a:
         64:cd:cb:50:41:60:9e:4b:80:d3:ca:dc:0e:e1:af:87:ee:3a:
         b0:0b:64:af:20:56:c0:fb:b7:6f:76:50:8e:a7:3e:02:5f:7d:
         2f:55:19:1a:bd:59:c3:1c:20:76:6d:fb:ec:6f:51:ad:52:a7:
         26:eb:d5:00:76:2c:e4:bf:35:3f:95:d0:b4:f8:a4:e0:b0:9e:
         43:47:ea:5c:df:13:f9:e9:f3:04:92:c3:49:76:ae:c3:ba:6e:
         49:1f:d1:06:1d:66:cd:6e:13:1a:5f:37:36:5a:16:03:92:a8:
         a1:35:35:07:aa:f2:a3:d6:12:54:03:21:3f:2f:b4:68:84:5d:
         aa:1d:91:eb:48:32:cd:5e:e8:ed:38:77:9f:94:43:f9:f8:2d:
         33:36:c6:a3:74:bc:3b:02:a0:c8:f3:eb:e9:26:26:b8:b7:a8:
         6f:5a:8e:f8:76:26:f9:67:ba:e9:ac:dc:9d:73:17:45:90:64:
         a3:e0:54:64:55:f6:67:14:68:18:10:a6:79:02:4c:90:14:bc:
         1c:48:17:45:aa:e9:f3:74:b9:04:9e:17:72:d9:7e:ef:68:a0:
         4f:9f:9c:de:3a:2e:b2:f2:8c:1a:3d:b2:e9:a9:46:77:81:98:
         34:f3:d2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:02:22 2025 by rpki-client