Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          CSg9Rp6/cYSvkVOOh3Ynd6Etmb+MRN8jjdG5SLKryDg=
Subject key identifier:   37:9B:D6:A6:C2:23:33:29:EE:CF:35:88:F7:A8:30:EB:B0:41:D7:52
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       089C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          083E
Signing time:             Wed 14 May 2025 21:11:22 +0000
Manifest this update:     Wed 14 May 2025 21:11:21 +0000
Manifest next update:     Wed 21 May 2025 21:11:21 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: tsdm6VFWdgLYOYPAha+G2DpaqmrD45LO90pHB8GYFeI=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: fAr1enb5w/370RjL/x8r/ZzPE+PyrRrXS5WPT3O+CnA=)
                          3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: 7nhlkenTW8+xvmT1j5rdicJEKIXjxqwvtJaZOI4Twq8=)
                          4: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: hEWt+XscoSIRvNspgT17O6QA8xkXvwSyDLinflFHJWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: May 14 21:11:21 2025 GMT
            Not After : May 21 21:11:21 2025 GMT
        Subject: CN=682506fa-d71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:df:2b:3b:4a:e0:9a:1c:e6:0e:c1:3c:50:
                    cd:5d:3d:db:9e:cd:b0:c0:45:19:fc:60:f3:87:b3:
                    d0:ff:11:f2:bc:ae:79:04:67:9a:14:3f:19:12:45:
                    7b:0b:f6:8e:96:41:48:bc:3c:91:96:fb:10:22:7e:
                    a3:51:97:0a:7d:37:61:14:1a:d0:82:9d:e4:62:2e:
                    a4:82:27:a4:92:87:85:d5:0d:99:b4:f2:93:fe:d8:
                    49:fb:47:21:07:2f:9a:20:5f:60:32:0e:28:ad:49:
                    9d:27:0c:62:b6:d1:7c:26:63:4f:cd:e1:3b:e1:33:
                    ef:cb:02:70:90:63:72:88:fe:dc:36:d4:75:33:ba:
                    bf:5b:85:b0:16:ec:8a:25:8d:be:41:43:40:dc:90:
                    a9:4d:ec:e4:48:fb:56:73:2d:d7:78:05:eb:4a:da:
                    d4:1b:1e:d3:53:bc:dd:5b:32:c7:13:27:da:90:46:
                    c8:3b:6e:2a:39:ef:ae:1f:d8:83:d7:71:85:2e:77:
                    ba:07:a9:d1:1a:17:d4:87:27:f4:13:b3:d7:7e:31:
                    71:44:2c:98:aa:c7:d1:5e:73:8c:b8:c9:02:64:59:
                    21:b0:3a:8e:7f:b2:1a:3c:f6:bd:b6:27:40:a1:44:
                    4b:80:bf:6b:46:30:96:d5:fd:4d:f3:f1:6d:c0:2c:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9B:D6:A6:C2:23:33:29:EE:CF:35:88:F7:A8:30:EB:B0:41:D7:52
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:67:8f:f5:ac:79:bb:e3:cb:7f:69:2b:93:e3:93:3f:0f:94:
         3d:d2:35:09:09:19:c5:bf:92:dd:e8:f4:09:4d:29:68:c9:ba:
         f6:0b:6c:36:65:c7:87:ed:81:59:ec:52:11:18:f4:0e:ee:c4:
         af:06:cc:a4:76:f7:f5:36:07:d0:cf:34:d0:e6:3e:d8:52:d1:
         37:3f:9b:b2:b0:88:56:ef:e0:a9:c5:f7:07:6c:a5:30:80:00:
         68:19:0f:ca:77:0f:01:49:b2:00:bf:96:37:e7:ef:71:57:0b:
         3b:55:6a:49:6a:10:a4:a1:d4:db:42:6a:c7:34:07:5e:4e:47:
         02:fe:4d:6f:78:0f:e4:1f:a1:cf:28:13:ed:84:ee:d9:5b:01:
         a8:08:b8:93:68:ef:0d:25:fd:87:57:e9:36:46:e3:b8:a1:58:
         f8:22:5a:48:47:e3:a6:45:aa:2e:91:33:9f:30:de:3b:86:12:
         99:06:e4:99:71:50:01:c3:04:5c:29:55:f6:87:85:08:26:b1:
         e6:88:6c:86:71:65:bf:a5:8d:cf:ed:3a:f1:c0:f6:a9:36:2a:
         94:48:87:c8:dd:aa:81:1c:7c:d7:6f:a6:4c:09:b1:ce:40:63:
         47:f1:c0:23:1a:ec:a7:af:0c:b7:40:3e:79:b3:57:e4:14:0b:
         78:ed:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:32:02 2025 by rpki-client