Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File:                     XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier:          eoXg1DjMEV6JOYfGvjrijtyGXecHmRcz7tbjMvehUSc=
Subject key identifier:   40:FC:6C:0D:89:DD:08:08:3B:19:48:0D:E3:72:3F:A5:B3:4D:41:A8
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer:       /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number:          0265
Signing time:             Wed 07 May 2025 01:35:59 +0000
Manifest this update:     Wed 07 May 2025 01:35:59 +0000
Manifest next update:     Wed 14 May 2025 01:35:59 +0000
Files and hashes:         1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: 74IJ8OAmby6XYIae1GDlqWLdOzGTGHuaxI/LFvmiRbc=)
                          2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: jBBbANmuNZVxVrVIl9nOmJTDHehO/z/tNRNLXj+1oS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
                          rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 23:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
        Validity
            Not Before: May  7 01:35:59 2025 GMT
            Not After : May 14 01:35:59 2025 GMT
        Subject: CN=681ab8ff-1aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:57:23:23:88:60:66:c9:76:62:ab:5a:7c:
                    43:50:03:1b:dd:c3:0b:02:5a:6f:36:0a:7c:df:5a:
                    19:c4:4b:58:b6:c7:39:0f:be:91:84:94:19:76:fc:
                    8b:99:dd:2d:28:5e:69:f1:cf:1d:9f:8f:35:88:3f:
                    11:f4:fa:ea:4e:74:ab:e0:23:41:13:87:49:77:e4:
                    6c:cc:69:b3:b2:8b:16:c0:13:9a:3e:97:a8:9a:43:
                    67:c2:1b:40:5f:f2:54:c3:cd:e8:fd:b7:c1:4f:55:
                    0a:66:3c:40:cb:c4:a6:27:7a:3a:92:5d:b1:27:10:
                    d4:d1:92:a6:30:f6:c4:9e:1e:9d:b8:68:11:87:43:
                    1e:94:f0:51:53:9e:2f:6a:df:b6:9a:4c:ab:8c:d6:
                    8b:9f:2b:bd:f9:62:68:57:44:e1:81:c4:b8:86:99:
                    e6:27:4b:d6:d5:aa:e2:a3:20:25:c4:d8:67:10:44:
                    60:91:44:17:b8:ec:b5:0e:4e:09:65:5c:22:51:ae:
                    58:e0:9f:b1:c3:dd:aa:9d:ac:7b:1a:14:d4:28:6d:
                    bd:44:12:ca:53:18:43:c9:49:da:b6:4e:1b:50:5c:
                    51:af:b9:4c:3d:6a:e9:2f:94:fe:63:58:e9:af:14:
                    12:cc:8b:e7:32:c0:e3:28:98:e1:e0:07:a0:c3:68:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:6C:0D:89:DD:08:08:3B:19:48:0D:E3:72:3F:A5:B3:4D:41:A8
            X509v3 Authority Key Identifier:
                keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:bb:66:9d:8f:18:44:a2:14:d9:47:29:03:f6:af:5c:af:8e:
         aa:b6:63:43:5b:74:2e:0b:84:e8:05:9f:e3:99:83:80:1b:01:
         01:5a:ec:eb:aa:fb:f0:06:68:94:57:2a:6a:f6:c1:68:2f:80:
         75:5a:c3:d1:9f:81:90:df:7a:3f:4c:0c:12:f8:b8:5d:b9:cc:
         44:45:ea:62:77:db:12:f8:9c:a0:66:35:c6:c0:59:5f:32:79:
         b4:b9:49:0b:61:32:2c:a2:f5:ea:b4:a4:39:9b:8c:d9:94:80:
         cf:fe:96:4a:23:84:ae:7a:40:9c:6e:6d:68:1b:aa:14:5b:51:
         00:42:e5:b0:67:21:b0:1c:eb:57:71:af:84:a2:b6:b1:b2:95:
         d2:a4:04:31:cf:ea:18:8a:b1:37:bb:76:7c:bf:6c:fa:c9:eb:
         da:38:85:0b:5e:5e:f9:87:66:1e:81:06:10:c4:c1:ef:ae:5b:
         43:3d:63:45:e0:d4:4e:1a:86:de:01:19:2d:9e:41:e4:43:3c:
         97:b4:3f:8d:dc:05:3b:96:f2:cc:14:5c:5a:ba:fe:dd:21:a4:
         20:2a:f8:02:df:7a:b7:55:27:52:2d:67:c6:71:f8:0a:bd:d5:
         0c:68:53:56:e9:d5:52:d2:c9:3d:7a:35:8c:36:2c:02:88:8c:
         b1:b2:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:33:30 2025 by rpki-client