Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File:                     hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier:          Yt/wG3NFFuW6Ubr/UCaPpHjGOizqqdE9CZsYiJXfTbY=
Subject key identifier:   8D:82:05:18:93:5D:C8:9F:CB:82:AC:87:A4:A5:53:AE:3A:07:26:35
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer:       /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number:          AE
Signing time:             Tue 13 May 2025 05:34:38 +0000
Manifest this update:     Tue 13 May 2025 05:34:37 +0000
Manifest next update:     Tue 20 May 2025 05:34:37 +0000
Files and hashes:         1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: wCF6K1LgnawXY14FmLbCw3qbQs/yqYbnSMJKOFdQ9B0=)
                          2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=)
                          3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
                          rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
        Validity
            Not Before: May 13 05:34:37 2025 GMT
            Not After : May 20 05:34:37 2025 GMT
        Subject: CN=6822d9ee-7fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:5d:16:9f:07:9a:be:f5:7b:d4:1a:d1:0c:
                    73:b9:02:13:6a:20:c0:ea:b4:72:5f:9f:15:d9:a3:
                    b9:57:bd:51:29:63:6a:22:59:f4:e5:99:50:c2:d0:
                    37:cc:d6:3d:5e:f9:fb:93:54:60:bb:34:bb:b6:67:
                    27:01:d8:9d:3a:fe:d0:05:ab:c7:70:01:37:61:b2:
                    8f:16:e0:bf:9a:96:a0:1f:5a:a1:9b:b4:46:8c:54:
                    df:a1:31:f8:08:3c:77:10:cb:d7:5c:06:21:40:91:
                    db:df:e6:a9:ce:ae:60:b5:cc:92:a2:da:fe:4e:73:
                    92:35:0e:bd:04:d4:05:3f:c1:b3:5b:b9:f9:d7:07:
                    29:50:d9:fc:fe:cd:7f:6f:7a:fa:02:50:a1:c1:2e:
                    ee:5e:c0:13:37:f8:33:ae:84:9a:54:43:ff:37:35:
                    5b:c8:78:96:e8:2b:fe:10:0f:bf:88:91:63:91:41:
                    93:8c:ed:b4:d9:dc:c4:56:aa:5e:9a:c7:6b:16:39:
                    d8:01:c9:8a:97:22:ed:1f:56:4d:ad:bb:3f:4c:b0:
                    d9:0f:05:d2:85:7d:4d:d3:4f:c9:e1:1f:35:c5:d5:
                    0d:13:e1:ec:15:b2:56:e8:b2:1e:0d:27:bf:3d:85:
                    96:d0:40:52:5a:1d:fb:eb:82:dd:32:43:a3:f6:ae:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:05:18:93:5D:C8:9F:CB:82:AC:87:A4:A5:53:AE:3A:07:26:35
            X509v3 Authority Key Identifier:
                keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2a:fe:95:32:91:10:12:d0:7e:b0:ff:3f:d5:3b:77:f5:d1:
         df:a2:f3:1b:f2:e2:12:dc:cb:66:a3:72:3c:03:e2:98:73:51:
         bd:13:f0:f4:4e:41:13:13:c7:0e:0f:2f:93:2d:94:77:ad:a1:
         1e:e9:7b:17:0a:77:34:c6:3f:3a:fc:c8:66:d1:1f:36:83:69:
         38:02:c2:45:46:78:e5:c7:6e:48:45:64:b7:5c:bf:cf:70:3c:
         56:1c:ad:8b:3a:fa:48:88:93:ee:fd:d8:ae:37:e0:28:02:78:
         95:f3:0c:a1:91:38:ea:84:d4:5b:f4:08:99:cd:24:8f:f3:f1:
         bd:9f:fd:af:93:94:17:6b:d5:dd:43:4b:09:ad:0c:1e:8a:3e:
         cc:dd:0b:e1:d0:f4:e2:7f:d2:3c:e8:3b:37:c1:45:33:6d:76:
         57:fd:65:9e:45:d3:51:d5:64:13:50:a5:32:b7:6b:38:60:13:
         cd:b4:e5:e6:d5:27:de:64:d5:5a:4d:07:b1:d9:ba:4b:97:59:
         76:89:65:f8:8c:b4:ba:ca:d3:36:b2:6f:b6:ea:cb:c8:04:66:
         86:47:92:af:1a:95:2f:7c:5b:3f:5b:b1:23:e7:ef:2b:18:ec:
         90:b7:9b:dc:49:a5:89:3d:3a:a2:6f:82:80:8f:20:cf:3c:b0:
         80:a0:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:45:29 2025 by rpki-client