Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File:                     pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier:          +PIH5LVz9QMwAaWgVK6Qa9WHwd/j9Zjp/ckMfe4YriM=
Subject key identifier:   E4:6B:38:F1:3D:D8:06:1D:C5:85:AC:C9:DD:56:64:F6:19:88:B1:C9
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer:       /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number:          9F
Signing time:             Wed 07 May 2025 05:23:09 +0000
Manifest this update:     Wed 07 May 2025 05:23:08 +0000
Manifest next update:     Wed 14 May 2025 05:23:08 +0000
Files and hashes:         1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: T2xHtj8vaxa7BywDkHuudBeP54vbDJLZOKbrra8m9y4=)
                          2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: UvG+rrdQc4qonfWzAVMV6XBgR9R1iSghae9lnt9yKqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 23:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
        Validity
            Not Before: May  7 05:23:08 2025 GMT
            Not After : May 14 05:23:08 2025 GMT
        Subject: CN=681aee3c-4807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:a4:f1:0e:63:b2:e7:b0:ff:12:78:30:33:
                    26:e3:af:22:7e:33:2f:98:74:50:19:f7:0c:03:b3:
                    12:e6:6f:ba:22:d8:bb:78:0d:20:c2:2f:96:93:ed:
                    ab:bd:b2:a8:31:ca:a5:87:e0:66:21:f0:ad:c8:f3:
                    24:a6:d4:37:4f:7a:49:d7:53:63:ca:ca:53:cb:37:
                    69:66:1e:a2:3b:9a:71:14:4d:73:76:29:db:01:d8:
                    dd:7c:af:26:c6:09:3d:cb:c3:09:6b:c1:2b:f2:ad:
                    32:c5:17:69:76:35:11:47:f4:f9:0f:49:50:dc:15:
                    73:ee:cc:28:08:3b:7f:38:71:69:b1:9b:76:e8:f1:
                    74:95:40:03:c3:5c:a6:07:40:ee:ce:ec:7c:60:1a:
                    d9:ca:37:f6:d9:d5:87:b7:ca:8b:0a:7d:a0:b9:98:
                    22:31:28:6a:c4:17:b1:6e:91:25:75:bf:67:13:5c:
                    21:32:64:5f:cf:7e:66:eb:85:84:e5:e5:58:12:7e:
                    bd:cf:4d:bc:0a:3a:79:8d:aa:f6:66:17:bb:e3:e2:
                    64:56:e2:f0:19:f1:4e:dc:e6:03:6d:ae:eb:5b:5b:
                    e9:2e:b2:c7:41:4c:ee:f5:bc:51:09:a3:3d:67:44:
                    fb:51:40:0e:dc:d6:9f:7d:68:2d:7b:16:e6:34:1b:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:38:F1:3D:D8:06:1D:C5:85:AC:C9:DD:56:64:F6:19:88:B1:C9
            X509v3 Authority Key Identifier:
                keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:be:86:c6:3b:3f:1c:f2:e7:e7:aa:bc:53:3d:f0:3d:0c:
         74:ae:ef:e7:f5:22:e5:f6:63:20:ff:2d:35:be:20:c8:84:a3:
         69:7b:01:65:c6:04:62:c1:51:22:9f:91:c2:9b:52:e6:5f:87:
         48:e6:51:2b:92:6e:03:94:40:82:06:b1:c1:2a:30:34:a4:ad:
         ff:17:95:17:e3:a5:f5:e8:f2:6b:2c:20:15:a9:ea:c6:8f:7c:
         1f:af:75:8d:8b:a2:8c:a0:d4:58:a5:ec:ad:a6:fd:10:99:17:
         42:33:f0:c4:46:3a:74:fc:ca:f8:d9:18:87:62:36:aa:d8:13:
         67:d7:95:00:a5:7e:55:49:6a:ce:50:ab:c5:7d:95:08:95:21:
         04:7a:c3:f4:a5:25:98:97:6d:58:24:7c:43:0d:f2:c9:69:e0:
         ef:8d:15:52:ad:ff:c0:a0:ea:02:2f:74:2f:4a:6b:3e:5c:71:
         27:5b:81:3b:39:31:c0:8d:84:24:0b:28:87:85:0f:89:83:05:
         a7:51:95:eb:aa:e2:dd:ba:c8:9d:c7:59:ba:ac:7c:d2:ad:ca:
         70:af:8c:70:7a:ad:02:b0:f4:cf:a2:59:21:e6:a8:d8:52:dc:
         a1:d8:10:a8:3e:c8:5c:0a:91:3b:33:0c:18:9a:1b:18:c0:05:
         0b:86:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:45:11 2025 by rpki-client