Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          w2l/nUZgolnn7w8fHApZxn2uREjgL1GCyBhGMIsUn4w=
Subject key identifier:   49:38:D4:CE:88:87:97:73:34:FE:3E:2F:FD:F3:CD:1D:5F:85:CA:7C
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       03E3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          03D1
Signing time:             Mon 12 May 2025 23:08:38 +0000
Manifest this update:     Mon 12 May 2025 23:08:38 +0000
Manifest next update:     Mon 19 May 2025 23:08:38 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: kMu5bIj1SzAhbh6TnINJJ7hb4KO1kXrP+8XANoZwGME=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: May 12 23:08:38 2025 GMT
            Not After : May 19 23:08:38 2025 GMT
        Subject: CN=68227f76-80b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:43:5b:4d:30:c9:53:25:7a:03:28:e6:f0:6c:
                    03:3e:15:61:c0:24:43:7d:11:05:f5:35:87:0d:44:
                    5c:41:e6:34:a3:73:f6:1a:d4:21:f9:a3:58:dc:99:
                    30:74:a8:7c:4e:a4:97:7d:7e:2f:bf:b9:91:38:5f:
                    b7:d2:62:ad:3d:29:e6:6c:00:28:ba:79:1a:f3:70:
                    60:a6:84:18:70:a3:e1:4b:77:82:0b:7f:98:67:ec:
                    91:7e:e3:df:b1:55:4c:de:3c:41:79:40:58:0c:97:
                    58:3f:dc:f8:34:0f:4f:1b:4a:20:9e:fe:40:61:bd:
                    07:e7:6c:ad:40:fe:3f:9f:3f:39:f4:00:48:3b:e4:
                    70:76:0d:6c:0a:a1:8b:c0:4d:d6:b1:4b:fe:9f:29:
                    da:b8:39:af:43:0f:2d:06:c1:81:11:00:75:24:1b:
                    b5:e6:07:74:2a:89:b7:86:67:91:1d:b6:b3:02:05:
                    41:40:5c:69:e4:93:29:9b:85:2c:10:da:05:f8:7c:
                    0a:25:51:7c:73:99:dd:42:38:44:7a:53:aa:d9:2b:
                    28:60:95:aa:09:36:8c:67:b1:e0:9a:3a:86:46:3f:
                    48:2e:4b:a7:08:35:22:a4:35:9c:df:d6:3b:ca:0f:
                    97:1f:32:26:47:b8:62:ed:7c:3e:0f:a5:e8:d6:a5:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:38:D4:CE:88:87:97:73:34:FE:3E:2F:FD:F3:CD:1D:5F:85:CA:7C
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:5a:a2:31:62:f3:96:fd:ff:a7:85:92:67:34:5f:06:48:04:
         ca:51:e1:60:ca:23:e7:d3:a7:6f:ae:68:5a:8b:d4:35:a1:8c:
         3c:e8:ad:6a:57:b1:28:2c:a1:3d:39:d1:ee:36:4b:e8:17:03:
         87:35:3f:74:6b:c4:12:58:d8:4d:ab:d7:08:a5:0e:d2:98:66:
         10:63:33:6a:72:30:d9:e6:79:77:06:cc:fb:89:91:da:2c:9b:
         bc:30:ec:dc:b4:5a:0e:86:d9:9e:25:47:7b:30:77:34:fa:d1:
         0f:d3:b1:63:08:21:59:8e:48:30:a2:28:45:e7:c5:f2:a3:47:
         e4:66:d3:9e:f1:d5:57:e8:b9:ad:90:6a:31:bb:18:a3:07:fb:
         d8:66:84:e6:09:17:24:09:85:ac:b7:1f:68:a3:a6:2a:63:e9:
         ce:ab:e6:cb:12:ce:27:f9:e0:43:fd:db:4c:ca:c4:cd:02:1b:
         c9:f6:9e:7a:cd:5b:2a:51:f2:dc:15:7f:40:f3:53:89:60:50:
         15:ec:87:18:71:27:58:3f:60:3f:53:a6:81:b8:9d:ad:cf:f8:
         ba:67:46:c0:53:53:c4:bf:9d:c4:72:1a:de:39:78:8c:d2:08:
         94:95:df:02:20:62:99:29:09:b2:fa:3f:4d:80:f5:bf:ee:40:
         bc:e7:7c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:04:56 2025 by rpki-client