Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File:                     kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier:          SLvLReWo+wmK6ooMla9rxns2BBp2VFgxru1zEQ2BWlU=
Subject key identifier:   A8:35:E0:75:77:AA:AE:6A:64:02:05:6C:DA:17:39:F3:18:A2:38:1C
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number:          9C
Signing time:             Thu 15 May 2025 05:48:17 +0000
Manifest this update:     Thu 15 May 2025 05:48:16 +0000
Manifest next update:     Thu 22 May 2025 05:48:16 +0000
Files and hashes:         1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: hTHWiZmUIgyTfqGg8DaRUSJFMj+Y1jz6x/Snbivz0+w=)
                          2: AC7759D2135511F092D0090CC4F9AE02.roa (hash: onYsR/Z0zfQbFj+mcD8abagulwJaECFH59WKOVFKUeE=)
                          3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=)
                          4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 05:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: May 15 05:48:16 2025 GMT
            Not After : May 22 05:48:16 2025 GMT
        Subject: CN=68258021-248b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:44:06:4a:98:e8:57:36:53:c2:f8:aa:27:
                    8b:45:56:98:4a:0f:90:c5:cf:d8:97:c6:2f:54:8a:
                    99:8a:3e:79:17:38:bc:46:64:83:82:25:ef:e5:4e:
                    bc:e4:27:7e:f2:08:8c:7e:c0:fa:d7:04:d0:ae:58:
                    c2:c1:a5:40:ac:35:de:82:dc:89:02:89:76:da:96:
                    45:71:42:2b:3c:18:bf:0c:57:34:fa:10:b9:cc:a1:
                    78:b2:cf:23:4f:4d:c2:f8:40:82:24:7f:ac:24:c6:
                    21:01:38:a5:83:31:36:3d:8c:2d:1a:37:2d:04:2b:
                    a2:b6:dd:91:61:02:50:8e:b3:74:c6:40:0b:3b:a0:
                    c6:93:a9:72:c6:6f:a5:1b:a1:fb:11:d7:71:14:96:
                    69:51:6a:e0:63:b5:fc:a4:43:d1:0e:4e:d8:8b:8e:
                    4b:c7:62:80:66:52:1b:de:34:74:43:d9:3f:6b:23:
                    5f:03:24:62:24:95:ab:72:4e:c8:58:cd:3a:bd:2a:
                    8b:42:d3:75:d7:0a:b7:56:b1:5d:ba:d8:8e:8d:fd:
                    8c:0c:a2:0c:d3:54:c9:59:78:25:39:cd:97:2c:0e:
                    1a:d7:fe:65:28:6d:b7:1e:c4:60:c0:2a:3c:cb:38:
                    0f:b1:02:e7:28:93:9d:83:ac:78:44:b6:76:ae:7d:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:35:E0:75:77:AA:AE:6A:64:02:05:6C:DA:17:39:F3:18:A2:38:1C
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:20:96:3b:c1:46:65:8c:21:0c:ac:f5:90:1d:b2:18:0f:
         8f:ad:42:62:0d:ff:a9:f5:95:56:e6:e0:ed:de:e1:ea:ac:ef:
         db:5e:fe:ef:86:ef:d7:11:2e:a6:b5:2a:66:75:b9:be:2c:b6:
         37:76:7f:b9:ee:54:48:bd:59:e3:1d:27:4e:a3:e5:74:4e:c3:
         12:90:75:1f:5a:91:d4:23:32:d9:ef:d8:c3:46:c9:53:1f:7e:
         73:e5:4e:c8:4c:b9:d2:f9:d9:7e:b4:9c:c2:29:3d:01:fc:5b:
         88:f8:cc:63:69:f2:00:06:34:31:c9:34:97:ee:f5:20:a2:63:
         fe:59:82:c3:ff:a7:b6:05:1c:09:b8:da:da:25:24:74:dd:92:
         ab:c9:a3:76:0c:0b:3f:cf:e3:66:1e:2b:7c:e8:62:26:09:19:
         06:7e:c1:d7:cc:09:ba:b3:18:cb:fb:24:45:79:e7:ff:8a:b5:
         87:77:e6:58:c4:37:0f:31:ea:23:cf:f4:a6:b0:dc:5d:24:d1:
         b6:51:6e:18:a6:d2:41:51:c0:ac:35:3f:4b:ca:7a:76:76:09:
         93:52:c6:a7:c4:1c:11:fb:11:de:29:05:45:40:5f:1d:ad:c2:
         9a:37:29:d0:37:e1:95:54:44:9a:66:c4:83:d6:90:42:2b:a5:
         92:b0:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:22:42 2025 by rpki-client