Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft
File:                     ePv82NUyv7urfXnFGnc46klMJrc.mft (raw, json)
Hash identifier:          8C9tOjLVT5qkJjC1obNbuoql8l7Fum82BANiIdwx9qo=
Subject key identifier:   F1:B7:F0:89:43:A3:27:90:D2:4C:5C:18:2F:33:61:DD:3A:45:F2:51
Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7
Certificate issuer:       /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft
Manifest number:          A8
Signing time:             Thu 15 May 2025 05:25:11 +0000
Manifest this update:     Thu 15 May 2025 05:25:10 +0000
Manifest next update:     Thu 22 May 2025 05:25:10 +0000
Files and hashes:         1: ePv82NUyv7urfXnFGnc46klMJrc.crl (hash: triGowTH8uyc3IyifA11pSJp3JyzBcUNePbdOyISA9I=)
                          2: 8862654086CF11EF901ED838C4F9AE02.roa (hash: FfPgO3eeUl8IdKgqCPYYQsbKqty7XuG6xdX4tJjDBxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 05:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
        Validity
            Not Before: May 15 05:25:10 2025 GMT
            Not After : May 22 05:25:10 2025 GMT
        Subject: CN=68257ab6-cc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:ff:8f:cb:d0:b0:72:bc:ff:a5:d4:1c:5b:
                    96:b0:f5:6a:92:17:c1:3d:ec:5b:b9:8e:19:af:52:
                    6c:26:b0:4d:04:62:da:a9:44:29:91:0e:71:43:c5:
                    66:b3:93:19:4f:bd:79:67:06:86:14:b4:7f:a6:a3:
                    58:0c:9f:60:95:cb:45:09:ab:2e:b2:10:d7:86:2a:
                    12:a4:ff:2e:2a:69:50:7a:df:62:22:d1:02:3d:ef:
                    28:ca:1b:d8:3f:ff:a4:3c:8e:ba:2c:ec:1f:0c:ee:
                    fa:4e:30:6b:03:d5:ac:16:70:4f:7a:db:79:a0:32:
                    b3:64:9f:48:d2:3f:29:f6:3c:0e:4d:3a:1f:ee:f0:
                    10:e1:a0:d9:21:9a:3a:ca:b1:64:55:dc:07:7e:ed:
                    b5:c6:b4:0a:1a:f6:6f:1c:74:f3:95:3c:c6:6f:90:
                    2a:b9:8c:30:2e:25:48:51:eb:86:a8:93:57:5a:d2:
                    ea:31:04:24:8c:20:34:8a:da:2a:67:73:60:f4:7a:
                    ea:f9:8b:1d:e0:5d:d3:4f:1f:2f:db:e3:44:0a:61:
                    26:f1:82:4c:be:57:e9:ab:15:a2:74:6c:f4:83:33:
                    4a:bc:8d:c9:3a:ad:1f:c5:cf:2f:78:88:7a:94:70:
                    dc:6b:e2:ef:25:43:e9:51:d6:b6:81:72:78:7a:ab:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:F0:89:43:A3:27:90:D2:4C:5C:18:2F:33:61:DD:3A:45:F2:51
            X509v3 Authority Key Identifier:
                keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:34:bb:97:b6:ff:63:d3:bf:d5:1f:f0:a4:4e:df:05:fa:
         6e:f9:e0:50:85:01:e5:ec:dd:83:a5:62:a4:21:8a:00:8a:f3:
         4c:a4:8a:1b:24:76:ae:79:fb:d8:41:a8:72:36:8e:ce:5b:e7:
         ec:f5:18:1f:d6:86:a9:6b:4f:4a:14:32:4b:81:37:cd:ac:12:
         48:77:f6:34:c7:22:44:a2:47:81:df:3f:e4:89:de:bf:5d:ab:
         53:5b:b8:6a:f1:bb:2f:cb:85:15:5a:86:93:d6:49:6d:eb:d4:
         ae:d9:14:8b:46:fa:75:c0:0d:e6:b4:23:98:df:84:d2:13:89:
         4e:c0:4a:28:4e:30:5f:29:07:37:53:25:a4:e4:48:1b:11:c9:
         dd:86:f6:de:49:c9:b9:8a:2d:93:13:56:e6:8d:0f:10:17:5d:
         63:42:89:53:fe:9e:26:28:a5:f9:48:bc:42:52:8a:5c:a4:58:
         52:c2:21:34:36:87:01:46:07:92:18:57:4a:df:ad:bd:47:62:
         6c:55:8e:2d:04:71:26:20:49:d7:d4:1b:1e:4f:30:fe:da:c6:
         e9:8f:43:42:ac:e0:f9:66:c8:bf:9a:94:d6:20:21:8b:7c:01:
         ca:9b:eb:e5:d2:a0:a1:34:fc:c3:56:c6:0b:af:1c:39:88:88:
         7d:a5:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:27:00 2025 by rpki-client