Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          ydyuOcF6IQraP6AykK6dzNEQI9wr9JoS6Fx8NFLWvs4=
Subject key identifier:   CF:21:4D:3C:7B:B4:4D:7F:E2:C0:3D:C4:00:04:26:75:C9:1A:F2:B0
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       3500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          34C2
Signing time:             Wed 14 May 2025 14:41:18 +0000
Manifest this update:     Wed 14 May 2025 14:41:17 +0000
Manifest next update:     Wed 21 May 2025 14:41:17 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: /6KvB/07Pneg48KTFbthYCvPl3hkPPDKQO5xmPvZbdQ=)
                          2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=)
                          3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=)
                          4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=)
                          5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 14:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: May 14 14:41:17 2025 GMT
            Not After : May 21 14:41:17 2025 GMT
        Subject: CN=6824ab8d-8f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:76:6d:dc:16:80:b2:bd:73:34:af:2e:cd:
                    a3:95:c9:87:8f:6d:43:2c:7a:8e:d3:e8:61:06:d1:
                    40:fe:89:03:15:54:22:88:e1:d7:40:99:ad:3f:42:
                    48:cd:20:f7:b5:86:2b:aa:0a:1d:45:7d:9b:36:8f:
                    e2:4b:74:ad:90:51:64:20:41:53:a0:e9:a4:70:d9:
                    45:df:a9:23:f7:8d:77:d9:c8:d0:2a:f5:9a:4d:e5:
                    d7:ca:5c:ce:60:b9:7b:36:93:62:ce:2d:1b:1c:54:
                    ea:41:3a:79:d5:9b:9d:1b:4b:71:60:70:7c:c6:f8:
                    4b:0f:43:01:1f:48:2f:cc:94:32:5c:89:1a:81:cf:
                    0c:07:b5:af:d4:40:a8:c4:6f:f1:c5:5b:da:2b:15:
                    43:e9:32:76:25:ac:94:97:d3:ce:f8:29:c3:5a:25:
                    f9:1d:02:d5:ee:51:a7:de:be:41:3a:13:b7:32:dd:
                    f2:59:c5:0a:05:42:23:0f:73:8f:9c:2b:26:52:1b:
                    b0:47:ad:4f:af:9a:be:3d:dc:4a:01:fc:a3:7a:a2:
                    ab:1c:87:87:4a:43:31:91:57:a3:19:09:1a:d4:38:
                    12:3d:3d:c0:3a:33:39:24:05:db:cd:d8:ee:90:7b:
                    b2:e5:5e:d4:5e:bd:3b:60:aa:05:ed:83:91:31:45:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:21:4D:3C:7B:B4:4D:7F:E2:C0:3D:C4:00:04:26:75:C9:1A:F2:B0
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f7:cb:02:70:83:6e:52:1f:8a:2e:da:9c:4d:ac:d8:e0:0e:
         5a:59:3d:24:7f:3f:41:ce:81:86:59:8d:77:12:dc:87:27:73:
         3c:f2:4c:36:4d:3c:10:88:e5:80:e5:34:c7:a8:7f:cf:23:d4:
         5f:b5:a4:08:85:8d:b8:b5:20:87:90:22:ac:51:d8:f1:1b:21:
         0f:f1:26:fe:63:c9:ea:96:db:7e:0c:d5:49:d4:a9:f0:42:0b:
         62:ff:19:db:c8:4b:ce:04:53:15:79:d2:97:04:db:6d:6c:2b:
         dd:c0:c1:21:9a:55:4f:03:43:49:65:48:5d:b4:43:d4:d1:69:
         c5:c5:69:ce:3d:3c:ad:f6:65:58:7b:f4:57:5b:00:ef:97:a1:
         bc:b0:23:03:11:74:ed:6a:ab:51:50:39:37:08:d8:1d:8a:a1:
         6c:e6:4e:58:87:78:f6:75:39:da:14:57:a1:f4:cb:96:60:e6:
         c4:2c:6f:a5:46:aa:74:8e:5e:96:64:b2:2a:5e:1b:f8:57:ab:
         17:39:db:93:8e:b5:da:b1:9f:e8:16:20:44:7a:27:32:46:d3:
         7d:f2:34:32:6c:db:65:ea:78:c3:d7:dc:aa:58:57:2b:83:0d:
         5d:e4:8a:41:a8:2b:40:bc:67:41:f7:6a:30:38:41:ee:be:d4:
         14:f5:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:37:55 2025 by rpki-client