Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
File:                     sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json)
Hash identifier:          a7rDms1xi+EHdhw/ST0SSpJ3sPH7yHmM/9nB1rOvnwI=
Subject key identifier:   7F:77:C0:CB:43:A8:A8:AB:C8:42:76:A6:DA:50:13:59:A1:DA:DE:CC
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Certificate issuer:       /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial:       0B0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
Manifest number:          0AFE
Signing time:             Wed 14 May 2025 19:29:45 +0000
Manifest this update:     Wed 14 May 2025 19:29:44 +0000
Manifest next update:     Wed 21 May 2025 19:29:44 +0000
Files and hashes:         1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: /Ax6fG06JRUbdCXULGwmfj+9EXabrOSQ1I7CnHvJeRI=)
                          2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: ZetAVFLz5a9A9d96t5a3lmM5CeQl7iCEfmN2/6tRSWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
                          rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2827 (0xb0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181259, serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
        Validity
            Not Before: May 14 19:29:44 2025 GMT
            Not After : May 21 19:29:44 2025 GMT
        Subject: CN=6824ef28-df22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:14:41:93:11:61:54:f3:34:62:6f:8d:db:
                    a0:6f:48:67:89:48:9c:60:33:33:20:4d:a1:85:e7:
                    be:a1:7e:4d:1d:77:9d:84:9a:bc:6f:ae:0f:97:fc:
                    e8:37:00:f7:e6:c1:d2:57:a5:42:56:4e:23:da:30:
                    e0:8e:fc:ea:e2:1e:f4:b8:21:39:c3:8e:f3:13:73:
                    c8:7a:dc:34:f0:2a:2d:0d:1c:24:10:0d:ec:b8:00:
                    2c:4b:39:50:a9:4a:bf:9b:a8:6c:ac:63:f2:71:cf:
                    43:59:a1:2e:a1:d8:0d:92:6f:38:1d:4b:ce:ad:f1:
                    35:e4:77:27:cd:db:71:c8:c1:7d:3e:8a:78:bd:38:
                    12:7b:ef:06:e4:a8:55:79:35:b9:f7:f2:f5:6e:d8:
                    12:24:73:3d:51:6b:69:32:5e:5f:2f:d6:6b:dc:cd:
                    22:fa:1a:8c:07:dd:17:18:d4:cb:24:37:13:1f:95:
                    f1:33:f5:59:55:29:dd:7d:1e:d8:ae:ea:ad:10:5c:
                    07:26:01:42:a4:c1:28:c3:04:0b:fc:41:06:ff:3b:
                    5b:46:af:0d:8c:70:63:2e:c3:cb:e5:bd:ab:ce:2f:
                    44:87:0b:07:d4:62:01:10:fb:fd:85:11:8a:76:3f:
                    83:7e:9f:46:82:6e:4b:ea:36:48:b7:e1:79:77:c6:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:77:C0:CB:43:A8:A8:AB:C8:42:76:A6:DA:50:13:59:A1:DA:DE:CC
            X509v3 Authority Key Identifier:
                keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:56:f4:25:79:87:5e:a8:d4:2b:60:ff:93:44:d3:fc:df:9d:
         32:6a:e6:35:4e:84:f6:2e:70:4b:e1:e9:31:e0:0d:34:c7:2b:
         e7:56:bf:62:fb:c0:2e:a0:45:42:1e:79:79:2c:57:ea:fe:8a:
         b3:12:b3:ca:f5:45:a8:ad:a0:b2:91:31:d5:01:ab:8d:99:88:
         0a:6d:72:d5:92:16:41:2e:ed:1a:8f:b8:48:6f:e1:ed:4f:bf:
         3d:a4:ba:63:2d:f0:c3:f3:56:72:71:72:74:e9:ad:cc:d5:35:
         15:b8:b0:f0:84:9d:ae:f8:d2:1b:e0:4b:fa:5e:19:f2:b5:99:
         06:44:7a:9c:2c:15:de:ae:41:23:8d:c1:a5:5b:7c:c7:e9:17:
         a5:84:6f:c0:6a:9f:4e:82:14:67:06:fe:cc:a7:bc:84:4b:df:
         59:9d:9c:d9:00:04:e4:76:aa:b1:73:d3:ec:17:51:ce:02:14:
         aa:fa:3c:f4:47:f7:7a:07:b1:5e:cf:bc:ab:29:b8:91:ac:e7:
         eb:ed:8e:2c:5c:36:60:b3:d6:d3:65:89:fa:d1:bc:db:f7:1a:
         6d:89:43:74:1e:bf:d1:20:f1:04:83:bc:01:66:ec:42:8f:8d:
         6a:e3:61:63:db:d6:41:1b:4e:8d:cc:aa:a3:00:ce:d7:18:f0:
         14:e4:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 21:02:13 2025 by rpki-client