Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File:                     tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier:          Gs+VGb3qjGXNZxwVuo1eODeFT78wrnwUa+L+i/wVS/A=
Subject key identifier:   0E:1B:CA:26:04:68:1E:F0:0C:02:42:5F:E5:17:E9:37:88:79:66:54
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer:       /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial:       0A6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number:          0A5C
Signing time:             Wed 14 May 2025 19:49:00 +0000
Manifest this update:     Wed 14 May 2025 19:49:00 +0000
Manifest next update:     Wed 21 May 2025 19:49:00 +0000
Files and hashes:         1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: +3/jJh43/AwCuDiSB5/fKP8dn09O0cS384Wr9FOTJT0=)
                          2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: yEtb/oBRu+Pt3DfxSeSuNm69CyCHMTAD09+IpcdOyrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
                          rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
        Validity
            Not Before: May 14 19:49:00 2025 GMT
            Not After : May 21 19:49:00 2025 GMT
        Subject: CN=6824f3ac-1c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:f1:95:c0:ea:ff:ef:25:cf:d6:b2:4c:0b:
                    ec:dd:9a:dc:54:e0:7a:32:bf:1c:98:73:4b:01:9b:
                    87:22:d9:7f:23:1c:c5:dc:44:b8:cf:89:f7:8f:76:
                    8e:7c:53:5f:e9:12:9c:5a:53:90:c3:5d:44:5d:b8:
                    bd:c8:0a:2f:f4:74:2a:82:69:fa:42:89:f7:0f:c6:
                    3a:11:65:06:06:c8:65:80:03:90:8f:e5:97:32:4e:
                    da:1a:69:a4:04:16:7c:9c:c4:a5:80:4c:4a:9a:9d:
                    e9:42:a6:7a:4d:29:3f:bd:67:23:5f:19:94:cf:62:
                    4c:0f:f2:a1:2f:d7:54:7a:1a:db:95:72:2f:0b:9d:
                    b6:08:ad:77:c0:ff:b2:ec:12:7d:a3:35:77:d1:6a:
                    a2:cb:02:47:1d:6c:a0:23:3f:e0:f6:02:58:f2:67:
                    fc:28:36:dd:c6:ee:81:00:b7:6d:2b:00:8d:8c:67:
                    4e:1a:17:0a:fe:ce:ec:3f:1e:ec:19:24:83:cb:0e:
                    07:bc:c6:0c:99:b9:35:57:fc:4b:fb:6f:3a:34:0b:
                    ff:65:2d:a3:e4:71:97:36:6c:9e:72:24:79:e0:8a:
                    f6:0e:95:88:cc:c7:6a:33:f5:61:f2:7f:86:fd:7d:
                    b1:ec:0d:16:8b:a1:27:c3:67:d3:0e:cd:32:7d:94:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1B:CA:26:04:68:1E:F0:0C:02:42:5F:E5:17:E9:37:88:79:66:54
            X509v3 Authority Key Identifier:
                keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b5:b6:5d:99:cd:55:30:f6:ea:fa:14:61:51:61:cc:7d:26:
         97:76:1c:d8:41:44:1d:2e:b8:4e:f8:17:e2:5e:c5:17:07:87:
         1a:bd:6b:00:c9:7a:28:95:73:e7:8d:d1:fa:83:4e:ab:7e:83:
         c1:be:b5:26:3c:ac:b0:5e:dc:be:26:61:b5:b5:4a:ef:0c:29:
         5d:2a:1e:7d:91:c4:77:ff:52:65:eb:f6:98:36:76:ad:b0:3c:
         14:2d:fd:4b:8a:b7:68:e6:59:14:46:12:34:c4:7c:f3:3d:31:
         57:f8:66:39:1d:13:6b:0d:53:12:9d:57:a2:f5:aa:36:91:8e:
         b0:78:48:7d:1c:47:12:55:70:05:0a:ad:42:84:a3:70:dd:e8:
         85:6a:c4:ab:ca:14:79:00:d7:83:dd:1c:eb:47:5b:39:9f:49:
         f3:37:dd:a6:3f:4f:0e:82:2f:cb:e0:64:d7:b0:e0:9f:75:b9:
         82:7d:a3:ab:ec:ec:eb:da:0a:20:d4:14:01:cb:ee:2d:75:02:
         6d:e7:a8:74:16:83:d5:a1:bf:97:60:18:5c:1b:67:8c:70:6e:
         e9:f6:d4:56:65:e3:b6:df:cf:99:45:de:d5:02:c7:b7:18:4a:
         4a:e2:a5:06:71:e2:22:3a:8d:04:91:55:0c:fc:36:ef:ca:c4:
         1e:ce:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:32:10 2025 by rpki-client