Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File:                     MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier:          BTZQpIQ6izaDjiNRJSPEhAamFg/D13cU+UVsIt2r1ho=
Subject key identifier:   C2:E9:3F:8D:91:D7:EB:24:17:04:69:D4:BE:01:E0:FA:DA:73:A7:55
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       069E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number:          0683
Signing time:             Wed 14 May 2025 22:24:46 +0000
Manifest this update:     Wed 14 May 2025 22:24:46 +0000
Manifest next update:     Wed 21 May 2025 22:24:46 +0000
Files and hashes:         1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: d1qm+LpKVY1rclVJAPbWI/8OmIRZdrqFcIhZjrfAy+I=)
                          2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Kmy121XzUGh8ewwF3KZSeQZhERtI3ipUIuwTYhIH4NM=)
                          3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: h+i7d4l1n6vcg20ldi1OzleaWsx0vPPuUjmVScWRXXI=)
                          4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: PifTuQf9ETmHsQRTOYGkROLV+pof9sWcOvRDOEXvkJE=)
                          5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9n7ji7mRbxqw5LbmJKOtKEWm7L5OaLEva61LWM3vFFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: May 14 22:24:46 2025 GMT
            Not After : May 21 22:24:46 2025 GMT
        Subject: CN=6825182e-c4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:3b:55:3e:2b:e4:0a:bb:dd:f9:a2:a1:af:
                    c2:f9:b3:26:4d:12:3f:6c:2d:af:67:0d:82:c0:d0:
                    16:79:ed:58:c2:7e:11:e8:0d:5b:b0:ce:76:b5:d0:
                    d8:0b:8b:aa:6c:ce:ee:72:84:e9:d8:ce:04:30:a0:
                    60:43:19:5a:f6:c7:c4:37:b5:49:c8:34:a4:26:27:
                    d2:22:7d:9f:a2:ce:cd:e1:01:18:9f:83:9b:7e:3b:
                    47:72:4b:4a:de:b9:28:2f:d9:d4:98:60:e5:18:ef:
                    f6:7a:86:ac:64:56:20:c0:37:66:24:10:6e:6a:a1:
                    c5:ed:35:9f:6b:34:3e:4f:7c:12:9e:26:ff:db:46:
                    4f:8e:40:49:87:91:ef:2a:c9:85:d8:a2:60:e4:5f:
                    c9:4a:81:90:89:33:1a:c3:6b:6f:34:5c:c5:e0:11:
                    8b:04:70:56:d9:80:d1:35:e0:95:b7:39:35:cb:9c:
                    92:0f:64:cb:c5:6d:fa:8f:90:f9:04:74:b6:1a:57:
                    5b:a2:e8:c2:ce:a0:03:3a:65:b0:78:26:a0:90:bb:
                    08:eb:22:06:5d:77:67:33:b3:46:b9:a5:9f:82:9d:
                    38:5b:3f:ac:6d:9e:04:34:31:f6:c2:04:20:09:05:
                    a7:65:1a:46:e4:2d:41:18:94:f8:ca:00:b9:a5:ee:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:3F:8D:91:D7:EB:24:17:04:69:D4:BE:01:E0:FA:DA:73:A7:55
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:87:d6:7a:7d:ff:12:e5:c4:19:cf:30:71:9d:7a:dd:a7:
         82:09:da:c3:07:b7:3d:5a:8c:c4:d7:0a:c8:12:a6:ed:c5:b2:
         4a:67:ef:3a:34:43:54:0b:e8:24:47:ff:b1:de:95:0d:fa:cf:
         1f:e7:8f:ac:5b:5a:56:e1:ae:27:c0:b2:0a:d1:49:9c:13:3d:
         8f:6b:ca:31:9a:16:35:73:2b:c9:6c:43:e9:95:3e:38:86:16:
         76:b8:e6:fa:ea:15:f6:7c:d7:d0:ad:08:cc:25:f2:d7:7d:4a:
         22:df:87:98:b1:d9:2c:27:5e:fd:f3:e1:58:2d:28:4b:5f:6b:
         87:df:8e:a9:86:a6:ec:26:ff:29:d7:63:df:1f:5a:3c:ae:49:
         6a:dd:0a:7d:3f:45:ee:b8:97:bc:20:54:5e:7e:b1:bf:55:f0:
         c9:c3:27:93:19:d0:cd:15:67:90:bf:cd:4a:3c:11:43:17:93:
         07:02:0c:11:b0:91:06:a7:ae:ac:35:0a:06:3d:60:c6:ea:c6:
         a4:d4:25:05:79:60:06:48:8f:f6:ac:db:2d:7c:72:03:1b:53:
         67:6f:08:58:98:bb:78:d5:b8:34:ea:2a:97:25:bb:e6:96:72:
         7b:15:9b:84:1d:27:d3:c3:24:0f:73:08:0a:78:42:a5:5a:83:
         77:f5:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:08:09 2025 by rpki-client