Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File:                     0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier:          jt/ugqNwhEh6TZnDID+/W3UyIlw+h6pEwFrd6ywELp8=
Subject key identifier:   3C:E4:A5:76:E8:D2:0F:AB:ED:5E:4C:E6:0F:13:0B:5C:C7:B1:73:D2
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer:       /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial:       08DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number:          08D4
Signing time:             Sat 10 May 2025 20:09:56 +0000
Manifest this update:     Sat 10 May 2025 20:09:55 +0000
Manifest next update:     Sat 17 May 2025 20:09:55 +0000
Files and hashes:         1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: cE7FATs43oGRAs6bwec8ioE0lG45G9L2zwnGPnaTbSE=)
                          2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: uf4p5pgx1V0SluLNrAv0V4EHqRaHMDNsXkTRhyZ1WHY=)
                          3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: 76P6B+zD6PNBr4hksz9RJT8sA9qgnhZO985SFBzvQHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
                          rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 20:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
        Validity
            Not Before: May 10 20:09:55 2025 GMT
            Not After : May 17 20:09:55 2025 GMT
        Subject: CN=681fb294-5abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:34:2e:49:0d:66:13:af:b4:b5:31:7d:2f:
                    0a:94:28:ff:06:9a:10:13:6b:e0:6f:4e:35:37:6b:
                    da:82:cc:96:c6:12:07:f3:50:ea:9c:a6:72:04:31:
                    7f:37:05:9e:84:e4:2b:08:58:ba:78:60:cc:38:b2:
                    63:fc:ed:59:97:93:cb:7f:6f:7a:dc:30:a1:9e:23:
                    dc:8d:67:86:fe:6c:07:98:39:f5:c0:6e:be:6a:a7:
                    45:6e:22:a7:e3:bc:75:9f:c6:ed:ee:21:06:53:ed:
                    b6:9c:c3:f0:2f:ad:29:e4:86:0b:40:47:1d:de:08:
                    ef:12:48:2f:49:d2:a2:c2:e0:d1:cd:7a:19:19:ca:
                    a9:20:14:d3:24:79:bd:40:11:ee:62:eb:14:f0:c9:
                    ae:51:0e:a5:ea:96:50:d1:e8:69:6e:a3:78:b9:7b:
                    7c:12:b7:28:d5:c8:be:99:06:c8:35:7b:6f:c6:07:
                    a8:a9:74:c1:7d:4e:8a:ec:09:2c:de:f5:92:05:71:
                    87:ed:87:ff:f9:41:eb:c5:b8:21:80:52:21:70:73:
                    e6:ae:ff:cc:69:73:85:67:f4:62:88:23:51:b1:21:
                    bd:cd:ea:ae:7e:bc:3c:9d:cf:90:36:6f:cb:99:36:
                    4d:95:55:48:db:1d:30:ac:d0:62:4a:97:86:e6:8e:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E4:A5:76:E8:D2:0F:AB:ED:5E:4C:E6:0F:13:0B:5C:C7:B1:73:D2
            X509v3 Authority Key Identifier:
                keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:55:39:2f:31:bb:f8:8c:b6:f9:ca:1b:3f:f6:8d:a3:00:
         8c:c6:ba:e5:2f:75:1f:e8:24:71:74:0d:cd:40:4a:78:a3:b5:
         cd:d6:1d:c4:ff:be:31:1b:56:54:a7:ff:fa:b7:4e:fa:b5:f1:
         7b:e7:d5:ae:f6:c6:87:ce:1a:47:5c:26:fe:d4:e3:02:ae:43:
         9d:b0:90:42:dd:c2:2a:e0:04:3a:48:b6:3b:6b:96:f6:ad:47:
         7a:bb:a4:bd:ea:76:1f:57:bb:ef:50:6d:22:25:68:b0:ba:8c:
         30:1e:29:95:bb:25:8d:55:42:bd:0f:09:0f:bd:ec:83:d8:78:
         f4:a1:d0:3d:49:3b:05:70:61:dd:72:8d:fe:f0:d7:72:a5:5d:
         4e:0b:9c:70:da:f4:71:a1:34:6c:e7:15:59:bf:fe:6f:40:6a:
         fd:56:d0:51:99:8a:79:88:cd:f3:cb:ad:53:0d:c0:53:71:08:
         ee:cc:ae:a2:d1:99:f4:b0:4a:c8:c2:aa:83:be:bf:cb:1d:5e:
         f6:ce:d9:71:ea:31:0e:45:ee:fe:6c:56:2e:fe:b2:cf:01:f3:
         b0:70:1b:ec:0a:ad:df:88:26:2c:43:a3:b8:63:7a:1f:18:5c:
         62:c7:87:e2:01:f4:12:de:d0:e5:de:35:29:c4:07:33:3e:3d:
         d1:7a:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:14:48 2025 by rpki-client