Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File:                     P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier:          qHBY/O9DyX08Dic0Q32p64btzjc2aNZWLcft7HTNtsE=
Subject key identifier:   D9:AF:30:AA:BA:49:4C:AB:25:94:28:24:30:BC:90:D6:95:CC:C5:9E
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer:       /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number:          0212
Signing time:             Sun 11 May 2025 01:43:20 +0000
Manifest this update:     Sun 11 May 2025 01:43:20 +0000
Manifest next update:     Sun 18 May 2025 01:43:20 +0000
Files and hashes:         1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: OMtBa1eKmM7bzJmojKS44Z18Fgc1XuSrRd+lvqrg7Lw=)
                          2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: b6MhCI2q2jPGB8Vadu+OAGml/y/4nQ509qbcxbzKawM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
                          rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 01:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
        Validity
            Not Before: May 11 01:43:20 2025 GMT
            Not After : May 18 01:43:20 2025 GMT
        Subject: CN=682000b8-4a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:94:32:d0:85:e3:97:6e:1d:57:a5:28:ed:
                    f7:93:91:21:4d:5b:40:cb:12:85:aa:a4:43:1f:db:
                    44:b8:c5:69:0f:d5:6e:e9:c8:3b:f3:f1:ac:27:1f:
                    a7:f4:bf:9f:43:04:aa:b6:2d:ea:a0:e6:ce:5d:4a:
                    ee:33:14:a8:23:4d:82:f4:56:57:37:45:a9:80:5f:
                    3a:48:57:81:c3:7a:64:3b:ae:6c:3a:0e:74:e6:d4:
                    35:d1:db:ca:70:b0:10:7d:b2:6c:f2:ac:11:8e:9b:
                    ef:ec:b2:a5:68:83:71:80:d0:48:62:c0:d0:b6:fe:
                    1d:22:11:9f:b1:06:c9:e0:e0:6a:6b:e2:e2:ac:f2:
                    cb:c2:78:50:38:80:cf:c1:80:4b:b7:24:7f:64:9f:
                    56:68:ca:a5:e6:03:88:2e:ce:f1:65:4b:4f:5c:ea:
                    e3:ae:0f:b7:a5:e6:38:99:42:28:c8:ec:b7:bb:8c:
                    b4:3f:30:9d:2b:f2:95:07:47:c1:dc:72:14:37:5c:
                    9f:08:1c:6c:c0:88:71:9b:44:a4:86:cd:3c:76:e1:
                    b3:f7:76:53:3f:5c:d9:44:22:66:34:74:00:bb:c2:
                    ab:08:c3:a1:16:e5:1e:91:5b:cc:c9:cc:37:30:b9:
                    6b:c7:51:fd:15:51:d2:51:0d:d7:37:55:cc:cf:e5:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AF:30:AA:BA:49:4C:AB:25:94:28:24:30:BC:90:D6:95:CC:C5:9E
            X509v3 Authority Key Identifier:
                keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:3a:21:87:0f:2a:e4:ca:01:a5:f6:ea:9c:b0:ef:b4:8a:
         f5:56:a4:19:fc:59:a8:1f:74:77:c2:45:4a:64:d2:d4:18:c2:
         1e:c0:27:e5:9b:c7:d2:79:1f:24:6a:7c:48:ec:69:06:c5:4a:
         c1:86:7a:b4:5b:35:fb:85:3e:b8:55:4b:48:44:ef:16:48:19:
         d2:6a:47:a5:5c:1e:a1:32:4b:56:4e:34:4b:52:29:f1:e1:72:
         a7:91:93:22:8b:7a:2a:4d:63:32:9c:b4:89:21:8b:e5:9e:fd:
         1e:b4:ad:32:18:06:fa:f4:d1:1b:23:24:ef:5e:fc:83:05:7f:
         2e:e7:a2:34:0a:a9:65:dc:f7:9a:89:cd:4c:13:cd:02:49:5a:
         15:ca:7c:63:7e:4e:16:1a:6e:c4:2d:5b:d4:af:c3:3d:b9:12:
         a3:9b:d1:b8:c2:49:3f:f3:b8:d2:43:e2:08:7d:62:95:14:5f:
         36:f3:52:16:2a:91:ad:45:35:47:14:b8:75:bb:84:54:84:90:
         66:af:0c:2d:ee:14:2e:37:c3:51:71:4b:69:6f:b5:7e:4c:06:
         19:3b:63:a8:85:c1:0f:d9:2b:f9:11:f5:07:72:83:13:b6:d1:
         fa:19:f2:f9:06:a1:5e:5a:8f:e4:a1:de:f9:e8:ca:fa:96:05:
         0c:42:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:15:20 2025 by rpki-client