Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          FV6lXoaIOwyH+lBRASKwQLGgvBTpiSEiM+KnM72cjm8=
Subject key identifier:   4F:79:6C:87:1A:CC:DB:1A:AA:EA:87:F6:C7:8A:25:0A:81:61:E8:15
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          01D6
Signing time:             Thu 15 May 2025 02:13:34 +0000
Manifest this update:     Thu 15 May 2025 02:13:33 +0000
Manifest next update:     Thu 22 May 2025 02:13:33 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: U8mwYLfPh60BnmbiqQg1W1nsW4oBlMV+lheDBqLa3HM=)
                          2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 2v1fNj4a/xWl8aWsyyllbFfz3S6+MQv77E5w5OZvxxo=)
                          3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: GrunRdOPzVgoKdklWpjxOZFACret6qIAPie8FS/bKnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 02:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: May 15 02:13:33 2025 GMT
            Not After : May 22 02:13:33 2025 GMT
        Subject: CN=68254dce-4457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:b6:aa:2d:2a:f9:33:59:1d:12:1a:ba:95:
                    31:f3:88:35:72:87:f5:50:7b:77:13:0b:61:c5:47:
                    16:b2:bd:c8:c7:21:46:46:26:c6:a7:79:e2:2f:6a:
                    35:85:56:57:b1:71:fb:3d:7f:fc:28:ff:2b:9d:1b:
                    85:a4:df:38:b6:06:ef:97:58:30:94:43:db:6f:b2:
                    58:b6:37:10:3f:13:e6:05:d6:22:59:e3:09:16:3f:
                    d6:b0:ec:a5:bd:2d:c2:b2:fa:48:cc:2a:59:f2:b4:
                    01:b1:de:eb:f6:b8:69:e1:dc:87:94:12:76:dd:df:
                    49:1a:3a:20:54:d3:70:ef:af:30:21:09:18:ad:95:
                    ce:e4:9d:ca:0f:d0:0f:dc:c9:f5:f1:5c:6c:1b:bd:
                    79:2d:3d:79:39:76:14:7a:63:9e:03:cc:8d:f4:dc:
                    2b:ba:6b:84:c7:c8:3f:90:40:cb:84:04:04:28:62:
                    63:6b:a5:aa:b5:ac:67:5e:fb:ed:56:76:3a:a2:03:
                    e9:08:a9:74:aa:d4:d0:2a:f3:86:55:57:a6:98:79:
                    8c:09:ac:4f:f8:66:08:d6:37:7b:84:3f:88:80:65:
                    b8:37:9f:c0:2a:85:b3:25:51:af:f4:c4:c8:f8:93:
                    c1:fe:37:15:82:6f:55:14:19:c9:03:a5:d1:9d:3a:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:79:6C:87:1A:CC:DB:1A:AA:EA:87:F6:C7:8A:25:0A:81:61:E8:15
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:66:ec:6f:9e:8c:a7:43:6d:eb:a1:56:e6:54:50:9a:7d:
         0f:25:24:d4:0c:e3:f4:26:a9:de:60:79:b4:9d:4e:a0:e1:ff:
         0a:fa:49:05:da:0f:9c:28:01:1d:81:db:0f:e8:62:76:47:80:
         d4:8d:73:4a:7f:8b:7e:ab:b5:8f:72:98:a4:0e:9d:35:eb:d9:
         55:c5:c5:2e:3f:d5:d5:88:28:f9:b3:a8:99:53:de:12:73:23:
         c2:ff:93:cb:52:d8:1a:95:c4:c9:91:c5:6b:b3:3a:ad:6f:e7:
         d6:bb:8c:6f:bc:24:80:2b:37:92:39:1b:b8:da:ab:0b:4f:5a:
         cf:09:95:99:d4:15:68:94:99:37:b1:58:62:48:70:8c:a0:b9:
         0f:1d:62:41:5a:db:22:89:49:d9:a0:bc:5b:4f:ed:28:80:cd:
         68:86:78:d5:31:ee:43:74:04:50:d5:43:8c:85:2d:a8:2a:fb:
         f0:70:79:37:e9:48:91:a8:da:e3:05:bd:cf:1e:44:d0:4d:36:
         57:9e:79:5a:2e:f5:91:0f:7f:f3:97:da:51:d0:e8:54:b1:a4:
         32:68:50:59:56:3b:16:6b:31:ea:2a:71:3c:99:30:ad:0f:a5:
         d8:d3:85:bc:88:be:d8:6b:4c:44:2f:01:a9:85:43:ed:87:ef:
         5a:38:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:50:44 2025 by rpki-client