Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
File:                     B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json)
Hash identifier:          ykTkwEoa0KHO+f1oPEcOnJk1s6WgceArrey7J+onetk=
Subject key identifier:   56:B6:87:57:A3:87:32:4D:EE:05:12:DF:39:F0:BE:3A:07:4D:6B:44
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Certificate issuer:       /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial:       04B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
Manifest number:          0497
Signing time:             Mon 12 May 2025 23:53:30 +0000
Manifest this update:     Mon 12 May 2025 23:53:30 +0000
Manifest next update:     Mon 19 May 2025 23:53:30 +0000
Files and hashes:         1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: kfBDAMM++m94F12iCIJmQmVNciIY8f2pdevD0C/kbjE=)
                          2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: aI/sq9frDUa4oxfrwH2vEYRuVBCHaeAM/ywxuno+wUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
                          rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B443, serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
        Validity
            Not Before: May 12 23:53:30 2025 GMT
            Not After : May 19 23:53:30 2025 GMT
        Subject: CN=682289fa-3e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:9d:22:08:f6:65:ef:84:aa:ec:30:06:32:
                    50:be:6d:5d:b0:be:e0:e1:ec:5c:d1:50:a9:34:8f:
                    9c:d7:73:d5:a2:45:50:6b:60:4b:da:84:88:eb:25:
                    b8:bf:0a:d8:8a:29:d1:90:af:57:b8:3f:52:9c:9f:
                    eb:91:19:aa:a2:75:75:da:9c:08:06:93:5e:eb:f6:
                    bc:b4:c1:77:23:97:f6:70:88:1c:d9:ea:bc:87:12:
                    fd:e4:4f:88:f9:fa:ac:bb:ba:6f:d1:64:f7:db:e8:
                    6e:b9:16:e9:0b:b8:b5:83:5c:ac:9d:6a:d4:e9:c7:
                    fd:1a:11:a0:0c:bc:f4:f0:cd:ab:ab:dd:d3:ef:5e:
                    8d:48:64:35:24:91:98:ee:e9:95:dc:bd:fb:30:c8:
                    1e:8a:6a:e6:db:d6:46:80:7e:da:f3:f5:a6:2e:1c:
                    24:67:ed:54:36:b0:00:b8:6f:e3:0b:9a:21:5b:52:
                    ab:eb:04:66:97:f5:c7:ee:d3:b3:80:6d:0c:5e:78:
                    f5:27:ef:ed:0a:f1:d8:55:ca:10:57:96:58:62:d7:
                    50:b3:5b:17:88:75:ed:43:ac:93:01:61:36:79:92:
                    a3:84:08:b3:f5:39:32:c9:d7:91:35:12:5a:6a:39:
                    ae:df:1e:54:b3:58:da:fc:01:20:fe:c9:cb:f9:b2:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:87:57:A3:87:32:4D:EE:05:12:DF:39:F0:BE:3A:07:4D:6B:44
            X509v3 Authority Key Identifier:
                keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:0f:b9:86:9d:e7:bc:85:88:06:06:41:3d:74:5b:b7:98:
         a7:b8:99:2e:b4:3b:13:2b:07:dc:69:81:9e:21:ab:fb:47:7b:
         77:73:1a:6e:bc:6b:54:d1:51:a9:f2:64:9a:bc:af:f1:b0:88:
         a0:6e:9f:a8:69:9d:a3:70:9c:79:10:95:5f:c6:bf:2d:ab:aa:
         e3:00:e1:ec:c4:63:aa:a3:c4:bb:e9:5e:ae:1e:c1:7b:80:80:
         c3:0e:12:6a:2c:6b:9f:55:e0:ec:a4:a3:37:52:33:f4:b3:ec:
         13:cb:b9:67:24:22:d9:7c:f0:7b:48:9b:d7:5a:44:6d:74:c8:
         2c:71:96:fb:1b:63:86:20:b3:88:57:70:ec:1b:86:c2:8c:ef:
         e9:a2:7f:98:67:e4:c5:8d:2b:8c:11:a3:75:4b:41:e6:73:c1:
         a0:74:2f:8a:49:33:57:e4:48:96:d0:7d:ce:de:4d:38:66:5d:
         0d:7e:05:39:ee:2a:20:47:f6:29:c3:6d:96:49:90:8a:87:a4:
         14:68:ad:07:cd:72:ae:75:80:cf:b9:e4:cc:44:8a:ec:32:e2:
         9a:04:3c:32:c3:77:9f:70:17:56:70:19:52:c8:9d:9b:fe:58:
         86:fa:b0:c7:39:3b:b1:3a:b8:5c:cf:4b:4e:46:12:e2:7c:27:
         92:b8:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:28:34 2025 by rpki-client