Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
File:                     TeFRsMiiGEElxljjJzHNoaojRwA.mft (raw, json)
Hash identifier:          UcDEYono7tiFvSJcfOKULmXZCAtm5yUnijpPzSx9Vyc=
Subject key identifier:   0A:F9:D4:66:A3:10:1B:E2:38:E2:26:D2:C2:F1:B1:36:7A:86:22:1D
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       03BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
Manifest number:          03AA
Signing time:             Sun 11 May 2025 00:18:09 +0000
Manifest this update:     Sun 11 May 2025 00:18:09 +0000
Manifest next update:     Sun 18 May 2025 00:18:09 +0000
Files and hashes:         1: TeFRsMiiGEElxljjJzHNoaojRwA.crl (hash: r7armrxWXr+lHstgMLbDubByb6XdHP5pbPBMKvfGRpk=)
                          2: 50A8AF54A1C311EC960A4D2BC4F9AE02.roa (hash: 2KtkkHGjYM6B4NJArJW7J81dwWOAgC3BbrS1q16b7zA=)
                          3: 4FED5C22A1C311EC960A4D2BC4F9AE02.roa (hash: o/h9t6dto3RR9iUYCBWuwk5m/sVDjVA7sDNry2jRXMM=)
                          4: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (hash: 23pzBzVb/LUnDvjs9zEX9C14poyur9Xh61CsW7xpwuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 00:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: May 11 00:18:09 2025 GMT
            Not After : May 18 00:18:09 2025 GMT
        Subject: CN=681fecc1-8e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:50:14:4d:98:da:a5:9b:cd:a7:bd:e8:af:
                    ee:f3:2a:3d:87:85:0b:49:1c:aa:6f:72:a7:31:8a:
                    91:3b:66:18:b5:0f:65:e1:fa:2d:7f:0b:8f:34:cc:
                    ff:33:c6:a6:60:b7:aa:00:9f:a6:80:94:54:79:54:
                    9e:a4:2c:a0:4b:73:fc:19:6e:23:20:26:a1:ad:e6:
                    f4:37:56:e9:1d:11:5e:d0:60:55:03:a7:3e:bc:d2:
                    db:f7:81:a5:8c:d3:39:d7:5d:bb:8a:39:09:bd:3f:
                    61:0a:94:f9:88:0e:3d:fc:15:12:5d:4e:4e:57:be:
                    b3:d7:5a:5c:2d:ea:8a:d9:7b:5b:06:c1:6c:e1:11:
                    60:8f:5b:4d:99:89:61:e9:7f:20:f9:90:04:98:38:
                    2f:bd:81:8c:b2:25:42:51:c5:b2:fb:b5:07:cb:09:
                    54:26:b9:db:db:75:cf:f4:84:5f:37:92:5d:1b:74:
                    21:aa:d1:ce:89:aa:da:a5:67:b0:3b:6d:a5:55:97:
                    73:e8:6a:78:e9:74:f3:a2:0d:4b:99:59:c4:00:60:
                    b0:6c:b8:ac:0e:9a:dc:ed:3d:28:4f:09:7c:f5:6a:
                    a4:b9:92:75:ec:89:00:14:97:a5:53:de:7d:7c:10:
                    7c:fd:a3:e9:63:9d:01:8c:1a:c7:53:cd:b1:44:ac:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F9:D4:66:A3:10:1B:E2:38:E2:26:D2:C2:F1:B1:36:7A:86:22:1D
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:63:59:b9:93:49:d5:00:1d:7e:be:1c:3d:0c:f4:7a:6f:f4:
         52:24:52:c6:bd:b3:4f:9a:6d:36:82:1b:12:bb:6a:c6:49:10:
         b9:d4:e8:4c:43:2c:45:b4:e7:16:1e:2d:59:a6:43:3b:f3:22:
         ac:bf:98:7d:91:43:75:df:c5:09:ab:6d:82:ca:20:18:81:05:
         5a:b8:94:98:6a:1d:21:be:a0:d8:80:4d:b2:14:7e:5f:51:01:
         22:5c:5b:36:a7:84:b0:4d:1e:bc:73:54:18:73:3c:8f:7f:ae:
         3e:0c:c3:c1:74:17:55:70:99:89:31:84:14:67:3b:e7:5d:a0:
         6a:7c:b4:20:3e:ac:4d:73:58:84:fe:9b:b0:03:d2:66:c1:32:
         80:67:75:14:7d:33:49:f0:c4:ad:b9:91:2b:52:cb:9f:60:ab:
         29:4a:3e:a8:ed:32:24:1a:ec:c8:2f:f5:90:99:7f:d7:82:22:
         5b:c8:17:1c:b1:e1:56:5a:02:13:d1:14:e8:b0:15:89:54:aa:
         ed:4a:32:74:19:7d:2c:be:fa:ce:c1:f4:58:de:51:58:a8:86:
         a2:2a:2f:52:eb:10:25:7c:77:25:85:1c:06:dd:21:fd:79:31:
         14:de:0a:c5:d5:09:bf:2a:da:45:d1:f0:70:7e:e9:92:9b:70:
         82:cf:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:27:45 2025 by rpki-client