Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File:                     _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier:          cazfcrwTt1aV18XXv1QecYegxBA2p/hN955AFK7vMkY=
Subject key identifier:   2B:2D:97:CF:BC:1C:EE:E1:8F:03:CD:70:AF:C9:B2:B3:23:80:51:DB
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number:          74
Signing time:             Thu 15 May 2025 06:09:51 +0000
Manifest this update:     Thu 15 May 2025 06:09:50 +0000
Manifest next update:     Thu 22 May 2025 06:09:50 +0000
Files and hashes:         1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: OU3ryerVmcnohNn1BT0zttYH/v+tzwri9/oIDYCqsBc=)
                          2: 1976FC0CFA6C11EF99638E1FC4F9AE02.roa (hash: te5PzAkdFI+eQ5CMJL5Z4aIa9hh81p7zUj8QOmt+SYo=)
                          3: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: WagnJcg5f8efkpfWr+mqkirfnMGP4KyRA+7+p8TOFRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: May 15 06:09:50 2025 GMT
            Not After : May 22 06:09:50 2025 GMT
        Subject: CN=6825852f-7411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:60:24:f4:16:97:ac:7a:e5:fc:5d:d1:e7:
                    f3:ba:28:fd:69:88:17:25:4a:ac:cb:0f:60:cc:11:
                    8b:09:0f:b9:af:a7:fe:2a:2f:1b:17:de:cf:d2:65:
                    aa:a3:bf:92:3f:a8:64:30:f9:a5:ab:84:d8:c1:b3:
                    56:8f:9b:32:b3:a1:87:fd:5a:90:fa:5e:8b:19:8d:
                    74:40:cb:11:07:a5:fc:84:f7:39:e0:5b:97:55:af:
                    06:18:42:f5:74:bb:6a:b3:72:8a:67:ff:f7:c3:58:
                    c3:3a:d9:9d:96:b5:15:cb:00:77:89:c8:2b:b8:4e:
                    ac:0a:d3:9d:52:72:48:1b:df:31:dd:95:61:d5:8e:
                    ff:fd:ec:49:4e:d2:9b:5b:bc:a7:3f:15:7d:84:35:
                    97:ff:bd:c9:b6:64:b5:ee:d6:35:f1:2d:da:40:b6:
                    71:7f:61:91:d0:5d:3c:23:bc:46:7d:cf:36:ea:83:
                    35:50:5f:29:60:fa:6a:54:c5:7a:ff:59:ad:b6:51:
                    16:3d:f6:76:e5:23:12:72:73:df:41:ab:94:8e:e5:
                    3f:0d:c3:b1:b3:e5:4b:98:15:25:dc:e6:05:d6:e6:
                    12:ef:98:dc:67:96:71:8b:4b:a6:64:41:58:90:50:
                    1c:45:81:f1:82:4b:8d:94:8c:b6:6c:5b:67:1a:de:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2D:97:CF:BC:1C:EE:E1:8F:03:CD:70:AF:C9:B2:B3:23:80:51:DB
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:29:91:6b:4f:a7:30:87:58:9b:2d:05:4b:68:5b:46:77:bc:
         14:f7:c7:1f:74:5a:63:b9:14:86:c0:29:41:4c:7f:f0:71:3e:
         3e:be:06:3f:6a:2c:89:cb:6a:67:4e:f9:c3:47:9c:ae:52:b6:
         e7:3a:d0:e7:27:35:53:d0:e5:dc:4f:07:b2:c7:df:0e:5d:fa:
         41:74:4c:83:eb:8c:45:8f:b8:df:c3:5a:fe:65:44:a2:9b:db:
         f5:f3:53:06:9c:8f:fd:d1:e0:63:67:7d:ec:d3:42:a1:0d:2c:
         99:ed:11:14:c5:9d:1f:50:46:33:e6:2f:72:51:04:11:6a:ad:
         5b:9e:44:bb:49:02:79:38:2c:c4:e9:14:4f:33:d5:f8:59:b7:
         55:db:4b:6f:18:b9:c2:80:d1:cb:d9:19:97:50:c9:2a:bd:52:
         d8:7a:63:f1:e9:8b:97:0a:34:c7:d0:2c:9e:56:31:98:dc:87:
         47:c4:79:c1:ea:cc:b6:ab:6e:5a:73:61:22:24:b8:38:70:39:
         2a:31:42:fc:8c:c2:ba:cf:ef:93:85:b7:dc:41:89:52:5b:ec:
         d2:24:93:30:ab:7f:e1:24:c4:61:b4:6e:f7:9d:22:89:e4:a1:
         6d:fa:c6:98:d8:51:22:40:3d:40:56:36:50:c4:08:4f:9f:d8:
         2c:50:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:02:18 2025 by rpki-client