Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File:                     pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier:          zM02EgCg71QlfpO5baQMmIYMF17++W364sdwhmELH8c=
Subject key identifier:   16:37:17:7C:40:27:61:0D:6E:DC:FF:BC:7B:DD:ED:02:4C:2C:97:C7
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer:       /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number:          6C
Signing time:             Thu 15 May 2025 06:12:31 +0000
Manifest this update:     Thu 15 May 2025 06:12:31 +0000
Manifest next update:     Thu 22 May 2025 06:12:31 +0000
Files and hashes:         1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: YnUPU9n+PM+ERQ9A2iq7cFd2gORvWzvO2/adc1OWR28=)
                          2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
                          rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
        Validity
            Not Before: May 15 06:12:31 2025 GMT
            Not After : May 22 06:12:31 2025 GMT
        Subject: CN=682585cf-1522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:da:65:f9:a5:f4:0e:a5:b5:6b:67:40:d6:
                    39:ad:82:10:01:72:00:4f:fb:0f:8e:73:12:38:2f:
                    48:5b:33:f1:a5:64:68:d9:15:aa:af:cb:83:81:ed:
                    43:d2:c4:a5:36:c6:ce:7c:16:77:d8:ec:fa:eb:4a:
                    78:d2:c9:4a:c8:3f:94:8d:4b:33:99:9f:a6:71:9f:
                    e2:13:67:fe:9b:7d:a0:41:b8:ab:fd:60:03:e2:09:
                    4e:a4:ea:59:47:19:02:51:9e:dc:a3:51:a9:54:03:
                    52:62:d3:97:d2:b1:3f:79:f0:77:44:df:e8:d3:14:
                    4c:c1:8d:39:6b:07:a8:a3:aa:a8:c5:a7:48:8e:2b:
                    4e:8b:fc:c1:a2:81:f2:53:95:54:f8:b2:fa:d1:7d:
                    ee:b1:07:8a:80:9f:e5:b7:78:fd:fb:91:ca:9e:51:
                    bb:cb:bf:69:2a:93:f8:cd:a9:43:94:0f:8b:8b:b7:
                    e0:91:39:81:9c:47:ef:07:54:35:2c:36:d1:aa:15:
                    26:f7:d0:f6:f4:23:3a:ba:b4:24:8e:c4:77:94:c2:
                    5d:94:6e:cb:1e:03:46:be:dc:e9:2b:4e:3e:d1:20:
                    0c:d6:85:f9:cb:5e:0d:e2:00:f7:8e:2b:7d:5b:e2:
                    f2:f3:af:6d:68:f5:6f:9b:a7:63:0a:bd:c2:bc:dc:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:17:7C:40:27:61:0D:6E:DC:FF:BC:7B:DD:ED:02:4C:2C:97:C7
            X509v3 Authority Key Identifier:
                keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:72:e0:0e:fc:ed:16:ed:7b:57:eb:32:9d:d6:73:fe:11:f6:
         80:52:86:ec:1b:1a:db:3c:44:e5:ef:41:d3:db:cb:ee:5a:5d:
         bc:1f:4b:d8:1b:4c:c8:15:a4:12:14:b7:5a:af:eb:e6:7b:1b:
         d3:8a:8e:e4:be:81:71:84:2c:a1:e9:7c:3b:89:fd:04:35:f0:
         53:62:80:05:c8:42:21:68:c8:2c:bd:59:72:0b:61:8b:05:15:
         24:9c:35:d0:b5:13:22:03:3c:17:e8:14:74:21:fd:8b:98:00:
         77:83:53:f2:7d:4d:5d:fa:65:45:77:aa:74:97:87:83:d7:37:
         bd:1b:eb:a7:34:bc:40:d8:d4:6e:52:35:f0:ad:6c:73:17:6a:
         84:3d:20:2b:76:ab:5f:7e:ca:d1:eb:26:83:a1:e9:31:25:8f:
         19:3d:b8:46:af:6e:18:11:8d:1f:c9:e9:8e:43:b2:a3:65:e2:
         21:fb:86:44:df:6c:49:8c:0b:82:03:f0:f2:16:6d:0d:2e:7b:
         04:ad:14:eb:42:f0:6c:82:b6:13:c3:fa:dc:74:4b:44:23:b1:
         0b:25:3e:fc:48:02:82:6b:a8:82:11:dd:b9:64:0c:1d:f5:3f:
         57:01:16:c1:51:6f:fa:c1:09:a3:e4:67:9f:14:d7:e1:5a:6c:
         0e:6f:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:30:35 2025 by rpki-client