Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File:                     XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier:          MccrdfUtTiBBqWE5N5wnDKElObs6yZLvbMFd8RNuUOw=
Subject key identifier:   F1:7B:01:B3:19:10:98:18:F0:1F:87:E5:4F:79:E0:B1:5C:05:A5:E5
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer:       /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number:          0274
Signing time:             Sat 17 May 2025 01:55:46 +0000
Manifest this update:     Sat 17 May 2025 01:55:45 +0000
Manifest next update:     Sat 24 May 2025 01:55:45 +0000
Files and hashes:         1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: 5KQ7rqBKxl0+Iio6CttoBj3fs99RPusTtzIaNxvUHNo=)
                          2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: 7VxNMjQG1zgfT4tsEQfcFuOpbFyf2w1++cKzRTPQB1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
                          rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 01:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
        Validity
            Not Before: May 17 01:55:45 2025 GMT
            Not After : May 24 01:55:45 2025 GMT
        Subject: CN=6827eca2-d4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:56:ea:da:d3:4c:45:27:73:c1:35:52:b4:
                    03:16:7a:3c:27:5e:be:d2:28:8e:bc:f0:e2:c9:81:
                    e8:dc:fb:06:5e:07:0a:5b:fc:07:67:27:b1:b9:77:
                    e7:3a:3c:fc:e9:30:a3:7b:22:1e:f3:2e:6b:a2:1d:
                    e6:9c:9d:2c:04:6b:de:47:eb:b7:2a:9c:25:48:80:
                    1f:86:47:ea:7d:f8:e3:c4:fc:1b:4e:c9:cc:cf:13:
                    b9:58:ed:06:e4:32:c9:d4:55:e4:9c:5d:c6:c9:c1:
                    48:49:26:6d:60:06:ba:69:3c:2f:c9:69:52:29:bd:
                    75:35:61:da:b3:7c:76:96:22:83:c0:b9:14:a2:e7:
                    43:55:68:36:08:46:a0:aa:30:89:0c:d4:2b:a1:fb:
                    70:7c:56:12:96:cf:0c:74:4b:46:ce:c3:73:4f:db:
                    2b:19:1f:70:fa:af:e9:b6:55:8b:53:22:a6:95:e6:
                    a7:8a:50:f1:21:8e:e1:5f:f7:8b:14:74:2e:7d:85:
                    a2:5f:3e:a3:96:70:46:4b:e2:30:8b:1a:13:1f:34:
                    5d:f2:bb:e7:ac:7a:1d:41:52:09:32:d6:cc:27:49:
                    34:82:14:9d:96:fb:83:09:30:23:74:6f:7a:2c:22:
                    79:34:fd:3f:6a:62:e2:1a:f0:db:be:42:eb:4d:60:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7B:01:B3:19:10:98:18:F0:1F:87:E5:4F:79:E0:B1:5C:05:A5:E5
            X509v3 Authority Key Identifier:
                keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:e1:16:ad:e3:b1:47:a6:3c:9e:d9:a9:cb:f7:f5:4e:28:
         32:d1:2a:01:de:e2:d8:02:11:1b:1f:d1:a6:9a:77:28:39:55:
         df:a3:29:85:38:b5:5a:f1:a6:7e:e4:21:02:90:13:33:f9:0f:
         3f:23:14:fa:96:97:77:fc:c0:76:c3:3d:12:85:8b:97:19:bb:
         db:e0:94:4d:12:20:6d:d4:f8:08:b6:97:70:06:5a:c5:12:8a:
         5f:ec:d5:c9:29:c9:13:40:28:84:d3:50:dc:4a:1e:c2:e8:53:
         4a:64:e7:d7:8f:df:a5:56:c2:ad:a5:2f:a5:09:56:b0:65:33:
         3a:d5:65:87:ca:1b:48:72:08:65:e4:3a:a3:2d:a5:e8:c9:ae:
         21:e8:e8:92:fe:0c:2d:5a:0f:74:9c:cb:d9:90:cf:3a:f4:bb:
         ab:86:22:7d:d9:9a:8f:13:ad:8e:13:d0:8f:c7:39:83:d3:ad:
         dd:07:c0:b1:4c:bd:de:24:db:ed:d5:d8:c9:bb:77:43:5e:db:
         2c:03:6f:28:42:9c:97:fa:5f:30:0b:7d:8c:7b:85:bb:7c:ee:
         d9:78:b4:bc:cc:9a:2b:27:ed:c3:2e:a4:03:70:5e:69:f8:89:
         f0:1a:60:06:36:10:bd:6d:b8:c2:ef:c6:96:6c:e6:e3:60:cc:
         23:bb:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:19:12 2025 by rpki-client