Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
File:                     4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft (raw, json)
Hash identifier:          bLMYjemrmiSsbg6b4B+IEnm8pZzg+hGoNrG004Q45/o=
Subject key identifier:   C9:EC:76:8B:36:CD:2F:F6:7E:E6:75:F4:0F:87:5D:C2:7F:14:73:D0
Authority key identifier: E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17
Certificate issuer:       /CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
Manifest number:          0137
Signing time:             Sun 11 May 2025 03:20:42 +0000
Manifest this update:     Sun 11 May 2025 03:20:42 +0000
Manifest next update:     Sun 18 May 2025 03:20:42 +0000
Files and hashes:         1: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl (hash: WXlVoasCV8FE18/wPaz7ESYyHS9oo+iLSH/nIENAW0U=)
                          2: BED765785B0411EE94E4143EC4F9AE02.roa (hash: nzuv2qiqFy7RBa+xOMRhwb33N3s9hvdrnFdUnSAlhPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl
                          rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 03:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C948, serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
        Validity
            Not Before: May 11 03:20:42 2025 GMT
            Not After : May 18 03:20:42 2025 GMT
        Subject: CN=6820178a-739c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:fd:aa:39:a5:2b:e0:9e:6d:1c:c7:e4:3f:
                    96:15:94:43:0d:5d:bf:2f:d9:a4:2a:90:f1:12:69:
                    67:bf:55:10:ea:39:2b:b2:51:af:b8:9e:c5:7a:1d:
                    2e:d5:89:40:8f:55:d8:16:8a:b1:28:39:18:72:cf:
                    96:84:0e:37:5b:6a:30:63:89:50:0a:9f:6f:80:de:
                    4d:17:87:1e:a3:77:16:27:1f:ac:02:32:bd:67:09:
                    46:6f:25:fd:f5:5d:51:c3:c6:af:38:62:b7:17:1f:
                    f8:23:73:ec:44:d1:94:54:d4:70:6e:f7:33:33:65:
                    26:2b:cf:61:81:08:cb:9d:82:f2:bb:1a:26:79:5d:
                    69:3b:a5:cb:aa:84:44:b3:5a:4f:55:f4:41:df:44:
                    99:9a:9e:8f:7c:5d:2f:7b:03:66:ac:c5:21:e1:e2:
                    f6:e4:24:da:80:fa:d8:50:4b:f8:4a:5a:4e:bf:81:
                    ce:05:0d:3d:de:bc:66:fd:9e:3e:af:e8:2a:31:f8:
                    4f:9c:51:9e:c2:48:85:da:0c:1e:2f:01:84:4d:b9:
                    c3:3c:9b:42:75:91:5b:1d:e6:76:f5:8d:14:7e:f8:
                    79:9e:bb:39:2c:c2:66:2f:24:37:ba:06:b5:e7:4f:
                    e4:09:2e:6d:4c:86:3e:51:02:78:2c:67:f7:70:58:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EC:76:8B:36:CD:2F:F6:7E:E6:75:F4:0F:87:5D:C2:7F:14:73:D0
            X509v3 Authority Key Identifier:
                keyid:E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:a4:1a:7b:8d:ff:2c:4c:69:71:17:8e:95:7a:bd:48:19:
         62:17:98:18:a3:18:d8:95:38:19:03:39:74:4c:17:8a:0f:2a:
         8b:8c:3e:1b:22:33:9f:a1:d6:16:5b:d3:32:85:78:07:84:0e:
         0f:eb:e4:73:db:55:0d:4a:d5:bc:0c:bf:52:2f:d3:73:dd:d8:
         68:cc:d8:28:8c:4d:d4:12:68:e5:c6:34:49:20:eb:f1:39:a4:
         ff:d5:1d:00:21:c1:3c:66:22:54:33:5e:b3:30:48:0e:84:73:
         32:31:43:77:86:b4:d4:85:20:cc:78:3e:01:15:ad:81:a0:c7:
         b3:d2:c5:f1:c9:c3:8a:fa:0c:57:41:eb:13:4a:40:85:3e:a4:
         b4:4a:db:85:45:dd:96:3d:6d:32:33:98:8d:94:ca:c3:d7:e4:
         1a:25:bd:9d:63:5d:65:7a:45:98:5f:e4:f0:f1:a5:cb:1b:32:
         c5:78:eb:4b:81:fb:60:41:5d:7f:55:f1:a8:cc:8d:19:bc:86:
         8a:1f:32:2c:a5:ac:7c:03:2f:4a:c6:87:82:6a:20:f8:35:b6:
         e3:9a:54:f3:cc:64:86:74:05:cc:01:47:d0:85:df:e9:a1:97:
         e7:96:2a:e2:4b:f6:e7:f0:46:cb:6a:e0:5c:e8:17:5d:31:04:
         02:9e:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:17:33 2025 by rpki-client