Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File:                     1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier:          c1Dh1u91k7Oqj4Qh4NlitevdNVAaMEalFSBUsA0MWoM=
Subject key identifier:   1B:4D:BA:9C:EA:DB:B0:E8:DA:4F:8D:15:4C:EA:2F:1E:FB:09:E2:40
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer:       /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number:          B0
Signing time:             Tue 13 May 2025 05:15:27 +0000
Manifest this update:     Tue 13 May 2025 05:15:27 +0000
Manifest next update:     Tue 20 May 2025 05:15:27 +0000
Files and hashes:         1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: QKLVCChbXge0C2UI9fldMVLp4LRCgxOsaOTUIexamiw=)
                          2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=)
                          3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: THvSuu89zBwF6bcGi2lQr5DOft4c27TPpxpcQHdJvh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
        Validity
            Not Before: May 13 05:15:27 2025 GMT
            Not After : May 20 05:15:27 2025 GMT
        Subject: CN=6822d56f-7217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:f8:0b:05:1d:d0:3c:86:bd:51:83:e5:bf:
                    33:f8:01:70:3e:02:7d:43:77:57:b5:e8:e1:c6:ca:
                    1a:4b:d5:d6:c4:05:19:d6:cb:1b:af:40:29:dd:7f:
                    29:ed:42:23:b5:d4:bd:b3:15:a0:e7:71:32:da:99:
                    73:0e:a1:e3:29:33:9c:42:a1:0a:92:df:4c:f1:59:
                    b5:47:09:57:ad:21:84:82:95:e1:cc:82:48:51:f8:
                    36:68:fb:04:bc:68:c8:1b:09:40:7d:13:28:39:02:
                    9c:cd:d3:4a:04:55:02:01:e4:ab:ff:07:39:89:64:
                    a0:d1:95:0b:dc:ea:47:5c:6b:d5:35:ee:eb:83:31:
                    5a:09:ec:f6:b2:6c:e8:3f:2c:b2:fe:23:1d:4e:de:
                    8f:9b:97:74:51:03:e1:b7:34:62:2b:c4:37:43:03:
                    9b:67:95:29:b4:bd:d9:86:bc:5b:eb:d3:21:73:a7:
                    64:1f:f2:37:69:f6:cf:55:f1:53:5b:af:21:15:05:
                    a8:68:2f:f0:ac:97:00:8e:0d:19:56:22:32:43:8d:
                    2a:42:ee:c7:b9:c5:5c:d6:92:b7:49:9f:be:c0:40:
                    36:76:8c:3d:8c:11:41:fa:78:30:55:42:ea:8f:e1:
                    77:82:12:13:fd:47:3d:dc:bd:b6:7f:9a:b2:45:fd:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:BA:9C:EA:DB:B0:E8:DA:4F:8D:15:4C:EA:2F:1E:FB:09:E2:40
            X509v3 Authority Key Identifier:
                keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:04:28:07:cb:32:2c:31:5e:a5:54:54:fd:19:b9:96:6b:
         b8:d1:f6:d2:cd:9f:ba:75:f4:74:04:ba:10:a2:f3:94:76:14:
         1c:a0:e8:56:4d:01:58:62:31:50:e5:4b:31:b3:e6:62:1f:1a:
         bb:30:34:af:40:3b:52:66:10:96:48:06:73:0e:f1:bf:60:c5:
         a2:f9:6a:55:22:1f:e6:ac:87:82:39:c7:50:ba:69:2a:04:6b:
         af:42:39:60:b5:a6:cf:65:c0:48:68:dd:fc:cb:38:44:54:e2:
         2c:2d:3b:09:9a:3d:72:97:f5:06:40:21:1b:d6:1e:56:b9:bf:
         bd:ec:4b:c7:28:1f:78:72:a9:70:3e:02:29:ee:8b:5f:0d:7e:
         1a:60:6d:57:fa:b7:f5:44:f2:5f:d8:f5:a6:c3:e9:44:40:e4:
         c9:05:29:1f:d8:ab:36:42:62:4c:8a:9b:bb:77:38:fd:7a:a9:
         45:9b:1b:0d:a1:b1:13:c5:a4:c1:0f:30:bb:a8:26:37:e1:98:
         a9:4f:3e:99:e1:a2:11:1e:39:5a:06:2e:9a:97:f7:50:d8:3d:
         3e:de:f9:34:94:4d:8d:5f:a0:f6:81:fc:74:73:f7:40:31:73:
         a1:6a:fb:33:a0:78:e7:a8:4e:7d:cc:2f:91:ec:67:97:1f:e4:
         ec:84:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:07:46 2025 by rpki-client