Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File:                     _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier:          bjhn8Np0Z2+7V6TyBa8fX6Mry+2MShv28L26tCU7HHs=
Subject key identifier:   E1:CB:2E:55:98:41:56:71:A6:12:3D:F3:DF:CD:9D:68:95:A3:87:1F
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer:       /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number:          0103
Signing time:             Tue 13 May 2025 04:16:21 +0000
Manifest this update:     Tue 13 May 2025 04:16:20 +0000
Manifest next update:     Tue 20 May 2025 04:16:20 +0000
Files and hashes:         1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: PYz0CQRaG7p45Ja6gDezcdS/X2Sjx/JazI4u6+lQ3gE=)
                          2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
                          rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
        Validity
            Not Before: May 13 04:16:20 2025 GMT
            Not After : May 20 04:16:20 2025 GMT
        Subject: CN=6822c795-bc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:a8:57:1c:cf:86:14:38:41:07:4e:14:fc:
                    96:0e:ae:19:cd:96:19:e1:e8:71:0d:64:dd:43:1b:
                    77:8b:4e:c5:91:a9:6a:ec:44:a5:cb:c3:0d:cb:12:
                    25:b7:ba:81:13:b2:03:f1:12:4b:75:13:3f:11:60:
                    19:ed:ab:24:c0:50:0d:59:a7:29:10:00:77:38:01:
                    34:1b:0c:d8:df:3a:96:99:6d:2b:ac:75:13:b4:29:
                    8d:d7:01:fa:fe:23:b9:c8:c8:98:c1:82:a4:73:83:
                    b4:77:e0:f0:20:52:aa:20:43:f8:87:e9:c7:70:93:
                    d6:a4:79:96:3d:65:e7:a6:48:fd:81:f9:c1:69:e7:
                    a5:cf:20:1e:76:21:fe:f9:16:02:70:16:b2:8f:e5:
                    56:7c:f7:bb:be:f2:c9:87:76:0d:71:a6:a3:88:7c:
                    a9:0a:00:af:ca:1a:e6:4c:fb:ed:80:97:45:1a:53:
                    5a:59:11:e6:76:a8:ed:2b:b1:20:d2:82:72:49:3e:
                    3c:a5:06:eb:e5:a8:b7:58:9d:7d:c8:0c:c4:07:d8:
                    db:cb:89:1b:2d:b0:4f:45:6c:36:9b:87:98:1c:7c:
                    cc:9d:43:0a:61:c2:1c:61:50:56:63:18:3c:77:ea:
                    6b:6d:93:64:6f:f6:c8:1c:4d:fd:af:0e:07:40:9f:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CB:2E:55:98:41:56:71:A6:12:3D:F3:DF:CD:9D:68:95:A3:87:1F
            X509v3 Authority Key Identifier:
                keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:04:f1:8c:4b:f1:b7:a3:39:61:df:92:fb:c3:bf:5e:d6:3c:
         70:d7:bb:1b:06:ce:ab:96:d9:78:30:fa:23:9c:c5:b0:6e:a7:
         4b:6f:1e:5e:a6:18:34:f0:f2:ac:5b:77:e5:13:d7:06:5e:03:
         2f:28:e4:cd:87:a0:92:95:90:ca:a0:8f:d0:03:3e:65:53:a2:
         4f:3f:e3:6b:4f:d5:aa:4b:99:d5:d1:f8:25:46:00:c0:d2:35:
         1f:4e:e4:c3:98:bb:c4:7c:90:a4:38:a4:02:bb:0b:26:c1:09:
         4d:14:6f:72:5f:95:fd:41:80:94:8a:74:0e:72:a2:56:b1:51:
         a2:87:d3:f3:ea:bf:6b:62:0b:19:0b:3c:48:13:4b:a7:7b:7b:
         06:87:4d:a8:e4:63:93:9f:eb:be:19:03:91:92:01:db:eb:28:
         25:7a:ac:59:88:55:8c:cb:41:c2:ff:7f:b1:b8:ee:39:43:ea:
         22:99:0c:c1:9b:ae:f4:85:9b:ea:29:17:e0:f6:65:26:8e:fe:
         4b:89:e3:07:64:39:ce:b5:d3:b2:50:68:c3:c7:91:d5:75:82:
         79:ab:03:90:e7:06:10:73:40:ea:50:d0:8c:d9:e2:06:12:52:
         d9:df:34:e1:ac:55:e5:ec:ab:cb:57:53:a6:ee:e9:00:33:93:
         f0:83:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:04:45 2025 by rpki-client