Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
File:                     rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft (raw, json)
Hash identifier:          0ATKp+2pdH3NCdsoHQlE3f9LskQvPA15HvHDZFqwBd0=
Subject key identifier:   3A:DF:8F:15:04:A5:E0:47:30:3F:63:15:65:24:AE:84:AC:C7:C9:36
Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
Certificate issuer:       /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
Manifest number:          0177
Signing time:             Tue 13 May 2025 03:01:02 +0000
Manifest this update:     Tue 13 May 2025 03:01:01 +0000
Manifest next update:     Tue 20 May 2025 03:01:01 +0000
Files and hashes:         1: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl (hash: WeJMK0cM/o5ZuvkEH/Vvxbyg9osgiK3WLPvIlJd+FF0=)
                          2: 1EE23948F8F411ED96463014C4F9AE02.roa (hash: P12MNrI/Sv3x/5WhhR/xkFqPpUABisLPf88NE6poKHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl
                          rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190057, serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
        Validity
            Not Before: May 13 03:01:01 2025 GMT
            Not After : May 20 03:01:01 2025 GMT
        Subject: CN=6822b5ed-b8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:93:6e:66:ce:50:84:18:45:60:08:6f:80:
                    d3:3e:ba:63:40:af:b1:91:90:e7:6a:ac:d1:a8:9e:
                    00:7d:4f:d9:94:8a:90:5d:f5:f3:57:a6:05:4e:74:
                    54:82:a1:c9:16:6a:17:9b:9f:be:54:74:64:9a:ea:
                    59:0e:b1:df:12:46:0e:82:58:ff:37:a3:0e:68:13:
                    20:28:bb:5a:10:66:ed:e9:85:bf:19:8d:5a:f6:c7:
                    85:fd:61:8c:15:3d:4e:9f:69:8c:c1:66:c5:21:da:
                    3b:53:b1:f3:42:3d:14:2c:dc:e5:43:d0:f6:f6:d3:
                    ae:e5:b4:61:e9:9d:4b:c3:bf:86:c8:30:ed:60:6b:
                    d5:4e:d1:82:ac:63:f5:61:e8:e5:00:0c:0c:09:ca:
                    92:88:ce:17:fa:4d:20:d0:d3:fc:2d:e7:b3:a5:71:
                    1f:34:42:da:9d:72:87:55:7b:ef:91:69:9b:14:ff:
                    73:61:77:97:e9:47:bd:81:ab:a7:90:ba:9f:0d:f8:
                    5b:d8:b2:96:83:b9:49:09:99:5d:e4:dd:e2:18:98:
                    9b:b0:d6:1e:95:6a:06:57:6e:6d:e0:fa:58:61:7f:
                    7f:fb:0f:73:e4:c7:0c:37:c0:90:19:85:8a:93:84:
                    33:b3:3e:6f:9c:7a:5d:50:ed:71:54:38:1b:04:be:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DF:8F:15:04:A5:E0:47:30:3F:63:15:65:24:AE:84:AC:C7:C9:36
            X509v3 Authority Key Identifier:
                keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cb:c5:e1:c1:a4:ba:72:1d:8b:96:27:23:b3:49:db:c5:71:
         bf:cf:4d:35:c5:74:40:05:b8:d0:d5:0a:78:6d:e4:6b:39:b6:
         27:ba:51:b9:dc:ae:06:cc:10:97:9f:e4:b4:78:59:a0:08:83:
         69:39:a6:b7:02:55:ba:0e:44:99:e6:91:07:7e:59:b0:c6:29:
         6f:31:02:a9:8e:ab:50:09:8e:24:bc:8c:39:d1:2c:a9:46:28:
         02:53:94:91:0d:18:09:c0:1c:68:ec:0e:14:c0:54:84:e6:de:
         3a:e4:97:f7:aa:65:41:69:28:2a:2e:34:0f:e8:55:7f:87:ed:
         ba:61:54:de:cf:45:a8:ee:18:50:93:b7:71:7e:28:02:ed:1f:
         83:4f:7f:0f:d7:10:43:53:04:46:58:91:e5:8a:07:c7:c0:b5:
         e0:82:2c:8d:fb:11:74:ff:66:5c:14:4a:a0:6b:15:04:13:6e:
         8d:89:a1:55:c5:b3:48:fd:53:d6:de:08:39:54:4b:81:59:bb:
         aa:3d:23:de:e9:3b:9b:76:2c:13:9f:b1:cb:a0:91:45:81:46:
         10:b7:4b:33:56:a2:d2:1f:d9:33:89:20:f3:ed:9a:f5:2d:58:
         02:5b:77:4c:d8:e6:31:b8:11:1f:7f:08:54:76:35:68:6e:09:
         82:73:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:19:21 2025 by rpki-client