Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File:                     PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier:          CaB8bRJEnxEXWjZr5F8cDf8bbWzLYf2i02wwJlVVMH8=
Subject key identifier:   6C:92:C3:5F:2D:BD:85:D1:81:B0:7A:2E:04:7D:FF:52:C9:93:BC:A8
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer:       /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial:       06F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number:          06E8
Signing time:             Sat 10 May 2025 21:37:34 +0000
Manifest this update:     Sat 10 May 2025 21:37:32 +0000
Manifest next update:     Sat 17 May 2025 21:37:32 +0000
Files and hashes:         1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: s9UG4/l+iu0fWiIn0FcMIicS2QlHltr79CSSIeV3sO4=)
                          2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=)
                          3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
                          rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 21:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
        Validity
            Not Before: May 10 21:37:32 2025 GMT
            Not After : May 17 21:37:32 2025 GMT
        Subject: CN=681fc71d-ea74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:d2:7b:4c:9b:e4:c9:a3:88:ba:21:c1:1a:
                    d5:39:43:8b:fd:80:75:40:ea:b4:f8:c2:fa:f1:dc:
                    42:b1:07:ae:9b:0a:c7:8f:be:a0:15:eb:84:71:22:
                    81:60:a5:98:9d:51:54:8d:ae:04:02:af:52:75:a4:
                    bf:b7:24:6e:c8:b8:01:4c:fa:19:53:87:8b:99:11:
                    96:aa:02:32:92:07:1d:e6:7b:1e:87:03:31:d3:9f:
                    13:58:5c:6c:b2:86:5e:c2:85:8f:3b:64:70:a7:4b:
                    66:ad:c7:47:76:80:9b:9e:b8:0e:9d:e0:eb:f2:b4:
                    ba:88:26:e9:8b:9b:c8:b0:89:21:14:21:0e:54:67:
                    85:0b:9b:5a:93:53:10:af:35:9b:f3:69:9a:e4:cf:
                    3d:99:37:76:9c:05:09:45:1f:d8:ef:be:f0:bd:fc:
                    51:e5:3d:8e:e4:5c:df:ec:c9:eb:56:03:ed:3c:88:
                    c6:83:ba:d4:ed:ef:c8:82:8b:62:98:f7:b0:48:9d:
                    d0:0a:0f:b9:2e:5e:e2:0a:7a:60:2f:45:2e:ec:7d:
                    a2:bf:35:c6:aa:b5:25:42:5a:d5:f1:bc:58:76:90:
                    91:f4:50:0a:de:f6:b6:52:93:66:13:2d:10:75:10:
                    f6:e8:d2:23:dd:74:38:d0:b1:77:f3:f5:a8:17:a3:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:C3:5F:2D:BD:85:D1:81:B0:7A:2E:04:7D:FF:52:C9:93:BC:A8
            X509v3 Authority Key Identifier:
                keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:a6:ca:72:9d:28:a9:dc:0d:a1:46:8c:e3:28:55:12:75:
         7e:29:ab:0d:c8:96:dc:62:b1:0c:bb:c7:b0:98:d1:12:4f:b8:
         4a:d4:92:d1:de:a3:85:f4:10:e6:b9:c5:c0:d5:62:99:09:87:
         4e:d4:cf:95:51:0d:c2:2a:2f:26:7c:0a:aa:2e:47:5b:1c:de:
         c7:4e:05:4e:3a:da:ce:47:0f:02:ac:5f:24:d6:74:b8:41:3e:
         38:ef:74:03:c4:5f:79:2c:75:1c:c5:5d:62:a1:30:40:62:93:
         bc:a8:c1:2c:ae:3b:fc:ca:c0:48:55:54:eb:f0:ed:53:de:01:
         93:da:a1:fc:7e:7b:fb:99:1e:6d:f0:4f:50:00:26:4b:9d:b9:
         42:b5:51:74:af:d2:b3:ab:47:9f:3a:de:1a:db:d2:05:1a:04:
         23:97:87:0b:42:74:1b:c4:2c:7e:32:58:76:eb:cb:21:90:9c:
         eb:91:6d:48:91:dd:3e:ce:72:17:56:37:71:8f:54:96:65:4c:
         ae:6c:47:6c:30:0a:58:53:1e:bb:f8:d7:3a:90:71:b2:ed:51:
         ee:f3:1a:e5:f5:87:79:28:50:16:f8:4d:84:db:3f:57:43:87:
         53:d1:3e:44:93:83:f5:17:ac:b9:59:0d:49:1a:7a:b0:d5:1a:
         0d:6f:b6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:11:57 2025 by rpki-client