Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
File:                     5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json)
Hash identifier:          eUwuo6T+WGolPkoRpk6IvLQ8z5NhcRFJ+QJQ0fp7QWo=
Subject key identifier:   7F:4E:04:C3:D4:A3:75:C9:BB:ED:3B:0E:47:27:0C:79:1A:E2:71:68
Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Certificate issuer:       /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
Manifest number:          0123
Signing time:             Thu 15 May 2025 04:05:21 +0000
Manifest this update:     Thu 15 May 2025 04:05:21 +0000
Manifest next update:     Thu 22 May 2025 04:05:21 +0000
Files and hashes:         1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: izt3HteH2obOnSZFkfOFGzSq8XIBcH+dOFZjWW7N7l0=)
                          2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: VIpTaiDF//T8jK4C9n6iwAX2TMSKtXEtM34C7KtsS6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
                          rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
        Validity
            Not Before: May 15 04:05:21 2025 GMT
            Not After : May 22 04:05:21 2025 GMT
        Subject: CN=68256801-03b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:e0:7a:49:02:34:25:bb:23:1f:48:ec:bb:
                    b3:27:08:16:f1:a0:0a:1d:86:1a:ce:fb:7a:41:89:
                    19:09:1d:d9:e2:5a:ec:69:f4:f3:27:9f:06:df:93:
                    c7:b7:0a:52:0e:8f:64:d1:9f:0b:67:41:17:20:a6:
                    e8:e1:ee:2d:9b:13:8c:07:91:6c:50:27:83:2f:61:
                    9a:20:a5:a4:df:3c:5a:fd:e5:22:ca:83:d8:6e:81:
                    c1:96:63:b5:0e:19:fe:48:c5:7f:05:f0:78:c1:f0:
                    6c:af:0f:0c:44:80:f4:1a:2f:0b:a2:e2:71:69:ca:
                    5b:ae:14:dd:ca:9e:ca:91:c5:9d:b3:8c:bf:81:a4:
                    94:2a:d7:67:2e:77:e2:e5:c1:51:cb:1a:c2:aa:5c:
                    b8:07:1b:6c:f5:35:30:88:c8:d0:b7:20:88:e5:70:
                    9d:4d:1e:0f:cd:f8:ae:71:40:82:cd:6e:cb:0a:c6:
                    54:da:52:dd:8e:6c:61:8d:c2:0a:c5:60:1c:0f:42:
                    05:ba:4b:1a:92:fb:e1:36:bb:e8:8b:76:8d:3c:41:
                    63:ac:e7:9c:fd:fb:f3:83:5a:74:a9:1c:59:76:1a:
                    f5:cb:a6:1a:1e:33:51:7a:23:1b:4b:03:1b:c8:be:
                    cc:21:ae:93:f9:2e:d8:e6:c0:d6:cb:28:ae:c4:ec:
                    ed:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4E:04:C3:D4:A3:75:C9:BB:ED:3B:0E:47:27:0C:79:1A:E2:71:68
            X509v3 Authority Key Identifier:
                keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:83:89:3f:0e:91:0a:7f:9e:58:c4:f7:64:40:f6:e5:6f:
         13:7b:dc:b0:a6:1a:7d:eb:60:2b:60:ff:e8:98:e2:0d:5e:16:
         cc:ed:6f:16:1c:6a:49:3f:39:1b:6e:b9:45:58:67:e4:74:84:
         ff:c8:cf:86:35:40:b1:52:df:96:af:c1:4c:f1:90:70:7c:2a:
         41:f3:92:d6:4c:fc:f4:41:87:49:6f:2a:f3:37:30:b4:ab:40:
         00:db:c4:2e:6b:93:76:4c:7b:e9:75:08:ac:0a:28:38:26:d2:
         35:f5:72:80:de:0f:ae:59:ed:ca:49:f4:16:8b:b2:75:84:da:
         9d:14:29:a7:ee:7d:59:b3:ff:2a:b3:6a:28:ee:0c:3b:6d:71:
         4e:03:95:b2:f7:1d:f5:02:a4:79:d2:87:41:91:52:88:2f:4e:
         ac:7b:a9:aa:dc:85:fe:10:b5:fa:b7:ab:fd:62:8a:61:a7:4b:
         7e:77:d3:85:0f:62:6d:05:78:7e:df:49:b2:b6:5d:8c:d8:e9:
         1b:74:a5:a3:b1:fe:a0:e6:ba:8c:ac:85:7a:7a:97:e2:84:23:
         c1:5b:92:76:ac:d2:43:90:34:e6:bc:59:25:58:14:64:49:44:
         f8:69:cf:de:4d:2c:53:cd:e9:25:77:70:63:67:6f:a2:b4:b6:
         6a:6a:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:20:01 2025 by rpki-client