Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File:                     pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier:          llp/X9yYTFl8DMTNlfN1w4SvDIBPh4J13mF4x19cEgY=
Subject key identifier:   C4:08:BB:6D:9E:5A:47:29:42:BF:40:97:76:8D:01:C3:74:B1:AE:23
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number:          014C
Signing time:             Sat 17 May 2025 03:53:35 +0000
Manifest this update:     Sat 17 May 2025 03:53:35 +0000
Manifest next update:     Sat 24 May 2025 03:53:35 +0000
Files and hashes:         1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: 5m05H0XxxyyBqMdwggG3uD/Qks5hT7ISNWgzYhkVOqk=)
                          2: 966CB516179B11F080B9434CC4F9AE02.roa (hash: R5V6cNUR7QLj7LU1QU6TMYs4Bu+rino6/Kk8saAW2NA=)
                          3: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: kNV7VPtOhVOV5sWtOMUE/oMw0hk3N1NsBatuZRoh3AE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 03:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: May 17 03:53:35 2025 GMT
            Not After : May 24 03:53:35 2025 GMT
        Subject: CN=6828083f-11c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:0f:94:6f:ae:4b:a3:a2:03:17:7a:0c:98:
                    b7:51:9e:24:99:5a:d8:1e:61:93:5a:89:30:36:08:
                    29:6e:c4:60:c8:92:8d:d3:1a:a3:33:a4:eb:4a:1a:
                    c1:2b:57:62:10:a0:4f:cd:2b:df:a9:b1:54:55:a5:
                    a7:61:2e:bc:fa:d9:53:17:df:86:bd:d8:24:71:bb:
                    51:c3:f1:6f:5b:71:07:41:c5:a0:03:2d:ea:f3:37:
                    38:d7:0c:61:f6:94:07:1f:d1:11:cd:0d:fc:64:79:
                    48:fe:ee:d5:3e:87:cb:1f:19:65:1d:60:e2:37:c0:
                    ab:2d:cc:fd:ab:2d:16:6f:ea:44:dc:31:1f:8a:37:
                    1e:14:33:60:55:c2:1a:1e:a0:76:2c:5f:ad:1f:4d:
                    cc:46:6b:ec:f9:5d:9e:31:04:98:a7:02:8c:c7:55:
                    4c:06:58:40:c7:96:af:de:77:d1:88:55:bb:5a:ad:
                    28:28:9f:cb:fc:4b:67:54:c3:2d:7a:ea:1d:3c:72:
                    22:4b:04:97:10:54:70:1a:85:e5:06:8e:da:53:03:
                    15:cd:c7:56:74:35:54:fc:45:d6:95:dc:da:b5:8a:
                    1c:d3:2d:24:8f:81:58:9c:01:51:d5:e4:ab:1b:4d:
                    09:bc:75:65:0c:ac:9d:07:bd:55:d5:64:ac:6b:53:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:BB:6D:9E:5A:47:29:42:BF:40:97:76:8D:01:C3:74:B1:AE:23
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:48:08:9c:1c:08:c2:e6:4d:a2:7c:c5:83:4e:c0:5c:7d:64:
         3c:f5:96:6c:62:ce:11:ca:86:9a:d4:6f:26:46:99:82:32:cb:
         65:cb:ea:cf:bd:ff:65:51:28:c6:26:47:22:a4:c1:c0:da:f6:
         13:40:fb:fb:a1:58:ba:f2:e4:f3:57:90:e0:91:eb:55:f7:52:
         84:e4:ad:fc:19:6b:91:5a:00:41:63:a6:c4:76:3c:c2:6f:96:
         98:f4:1f:c7:46:86:38:dd:4e:a8:0e:af:70:0f:90:5c:a0:5d:
         b2:ce:03:54:49:b3:a9:e0:0c:1d:5b:38:8e:13:43:d9:c4:b2:
         25:1e:0d:cb:d7:fe:05:2e:87:2d:36:6c:01:04:e8:73:87:3f:
         f3:76:f2:1b:01:c8:30:77:0d:cd:91:d7:e3:45:a0:63:be:05:
         e7:04:ad:9b:fb:8b:93:a8:00:93:ed:ad:69:2b:28:dc:e8:85:
         b8:df:9d:f7:ea:f5:71:57:71:ed:ee:a1:dc:e5:3f:a4:ab:4d:
         f0:af:8b:5f:41:50:4e:62:8a:4c:16:bf:84:93:a4:11:da:99:
         53:fb:27:38:7c:24:bd:52:c8:00:20:c0:0f:89:ea:92:6e:1b:
         22:68:9c:cd:3a:56:c9:87:94:08:e4:46:df:0a:1c:0f:42:1f:
         30:b8:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:59 2025 by rpki-client