Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File:                     xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier:          Jk/uhgK5lLeqbuyRcCgG6g0het3ze8a42V+WZJsfG1c=
Subject key identifier:   6A:5D:88:20:C0:76:1F:30:85:78:9D:6D:9D:5A:EB:AA:71:60:49:14
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer:       /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number:          04A6
Signing time:             Sat 10 May 2025 23:36:59 +0000
Manifest this update:     Sat 10 May 2025 23:36:58 +0000
Manifest next update:     Sat 17 May 2025 23:36:58 +0000
Files and hashes:         1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: tmhf0YlcvvyOua3ztun9xAIxESS9M39e40dvPnTGenY=)
                          2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: 1C34cm2EkOQCZ4JCIngq0S5UUVGOvkcAMgGxSVETRwg=)
                          3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: 8tjvkR4DoTk7UtvsWE0jDhrG+DVKY6Vhv3UaWUDUXuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
                          rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
        Validity
            Not Before: May 10 23:36:58 2025 GMT
            Not After : May 17 23:36:58 2025 GMT
        Subject: CN=681fe31a-4249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:93:cd:c1:c5:0e:0f:2f:b2:f1:70:8e:53:
                    da:cb:78:f4:49:a7:50:db:d4:27:d3:e2:c4:e2:18:
                    29:24:2a:c2:24:48:e7:39:64:af:66:87:8e:f5:4c:
                    59:72:9e:cd:6f:21:d4:d4:d5:43:78:6c:44:df:ec:
                    3a:10:2f:29:04:54:9a:fb:f5:f5:f0:af:ad:fa:47:
                    a0:2c:97:cd:e8:c8:d2:55:53:81:dc:52:fb:4e:28:
                    79:8b:55:75:1e:10:41:9f:15:bd:16:91:80:eb:2b:
                    1f:04:09:a7:75:88:72:ae:11:da:e3:a8:62:06:15:
                    a2:68:45:e3:14:39:52:9f:83:1e:7c:19:08:42:a5:
                    2c:c2:33:cf:5c:a9:bd:b3:03:a3:31:43:98:1b:f6:
                    2b:15:63:a9:3d:bb:51:b2:af:7b:4f:c2:c3:a7:95:
                    2b:9c:88:09:46:34:fd:e4:66:df:44:43:1b:c4:6e:
                    07:02:5d:e0:5a:c1:28:08:92:f0:26:57:b7:e3:3f:
                    23:74:50:70:2d:2d:55:d7:0d:09:6f:c9:19:d9:4b:
                    fc:21:e0:93:db:3f:2e:0c:75:c3:07:7c:a3:6d:be:
                    c9:c0:c5:c4:57:02:dd:4f:a8:d5:38:e2:43:c1:92:
                    4a:d4:37:53:00:d2:4d:8b:c7:78:00:eb:3b:84:57:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5D:88:20:C0:76:1F:30:85:78:9D:6D:9D:5A:EB:AA:71:60:49:14
            X509v3 Authority Key Identifier:
                keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:08:47:f9:52:e7:8f:02:95:bd:ff:ab:a4:dd:b4:94:1a:dc:
         24:c3:52:86:8b:93:20:8e:9a:d0:05:ed:ea:07:c7:e4:3c:02:
         44:33:32:dd:f1:57:93:af:4f:d1:da:bf:bd:68:1c:bb:72:85:
         99:32:40:1f:67:fd:a6:99:49:2a:0f:8a:2a:ed:54:a4:0c:5c:
         07:43:e8:d9:62:eb:e8:63:70:80:f5:34:22:f4:94:51:3f:e1:
         2a:df:3d:4f:b6:69:3c:06:59:ce:82:57:08:27:29:de:11:33:
         be:61:05:a9:bb:71:52:3d:f4:ff:4f:e1:54:f3:f8:e3:8a:a9:
         c6:51:ba:b8:92:08:32:b2:1d:ef:50:7e:09:8c:6f:0f:1c:ab:
         07:d2:66:e4:a7:66:b9:cd:bb:52:81:48:11:a6:2d:aa:67:d1:
         5a:71:79:62:19:14:04:b3:a5:78:5b:05:8c:03:33:88:5c:db:
         57:63:69:4a:4e:74:e4:c9:10:da:76:9d:e8:1e:e7:8d:51:35:
         24:fb:32:6b:46:4a:50:10:8e:7b:e8:6c:f1:32:9f:4f:ef:49:
         64:2e:f2:7b:ab:d6:78:07:68:dd:b6:73:a8:9b:0b:74:6c:19:
         24:1b:c5:1f:d6:da:36:42:9a:5d:5a:0c:c9:89:94:f1:20:4d:
         2d:54:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:55:38 2025 by rpki-client