Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File:                     Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier:          8I8J5uaNSznpHa7HRfFSwMNj3PBxQPtJnt2WaXETBUU=
Subject key identifier:   5C:C7:75:4F:0C:84:F3:48:4B:F4:D3:51:BD:2A:82:C8:A1:57:EC:16
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer:       /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial:       34FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number:          34C0
Signing time:             Sat 10 May 2025 14:15:38 +0000
Manifest this update:     Sat 10 May 2025 14:15:37 +0000
Manifest next update:     Sat 17 May 2025 14:15:37 +0000
Files and hashes:         1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: KromoW9Ox7kod8wtAvxZIXmR+DaohWNzcTlLhWAq+Q0=)
                          2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=)
                          3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
                          rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 14:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13563 (0x34fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
        Validity
            Not Before: May 10 14:15:37 2025 GMT
            Not After : May 17 14:15:37 2025 GMT
        Subject: CN=681f5f8a-6303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:0f:2b:a3:3e:fc:c6:ee:bd:60:6b:34:e0:
                    b7:92:be:7c:88:f3:9d:6a:d1:60:df:c7:e4:23:9a:
                    01:71:cb:37:fa:87:02:b7:74:cb:b2:89:2c:9b:93:
                    5b:87:42:95:3d:c9:39:fc:7b:75:8a:16:87:00:5a:
                    7d:a6:2f:d7:1c:fa:cc:53:a5:09:42:b6:1f:ab:56:
                    15:54:8c:b1:61:79:92:b7:d3:36:b0:df:cf:0f:56:
                    c7:5b:b8:26:15:99:86:0f:06:8d:25:cb:5b:07:42:
                    fc:20:3c:4d:48:92:cc:5b:c5:16:09:d7:70:0c:97:
                    ef:06:de:01:0c:2f:91:79:b8:16:a6:5c:f2:18:bc:
                    df:3e:81:9f:c2:6e:2d:7d:13:ec:f7:32:c4:59:99:
                    41:6d:d9:a8:a5:4e:64:00:8b:1e:c6:90:c8:36:55:
                    ea:25:71:38:98:2a:28:bf:0a:51:b9:34:6c:6b:6e:
                    8c:a6:a7:d8:15:7d:cf:70:30:22:1b:e5:66:d0:f1:
                    a9:28:3e:38:0f:78:5a:13:3f:f0:03:e8:92:3c:73:
                    d3:22:16:13:1e:86:a3:4d:28:86:eb:7a:f0:59:27:
                    4d:bd:ef:43:cd:a8:a0:9f:b1:d9:2e:27:ff:76:6f:
                    da:5e:ce:31:dd:c9:e8:ac:1e:b3:a9:e2:26:60:02:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C7:75:4F:0C:84:F3:48:4B:F4:D3:51:BD:2A:82:C8:A1:57:EC:16
            X509v3 Authority Key Identifier:
                keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:be:d8:ca:49:2c:fd:62:47:fa:da:37:7d:c2:86:ec:f0:7f:
         7e:33:5f:13:73:4e:49:bd:44:7c:d1:5b:10:b7:6c:df:92:9e:
         73:2b:4a:d7:74:e8:8d:eb:1f:1c:c2:98:89:08:66:87:5a:c4:
         92:bc:8f:b5:99:47:52:df:f9:de:6a:e6:3a:e8:f2:50:df:87:
         9e:12:b6:eb:92:45:ff:5e:1c:1f:b1:8c:28:32:da:84:9c:89:
         73:58:83:6c:79:75:68:ad:b6:a5:e1:84:a0:ce:4a:a0:75:61:
         87:9d:79:fb:d3:06:7f:91:79:c8:63:22:b8:40:31:4b:99:ac:
         35:99:e7:1e:96:f1:19:f8:c5:7a:76:c8:a4:88:84:47:2a:4e:
         b9:cd:81:b5:8f:c7:38:01:eb:6a:b7:67:8e:91:c4:b0:86:83:
         93:04:b5:22:ae:07:b3:ba:4b:0e:0b:29:53:90:69:4d:d3:d8:
         b9:71:61:1a:2d:12:f2:6a:0d:4d:15:29:4c:b2:ca:11:e8:56:
         df:dd:15:45:02:a2:be:07:e4:8b:8d:51:be:0e:5b:c7:da:b6:
         37:b6:4e:cc:46:7c:4b:3b:5e:6d:08:da:40:32:05:c6:c9:4c:
         85:cf:f8:bb:a3:d2:3a:b9:6c:c7:9d:a9:67:e2:c0:be:9d:77:
         25:10:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:24:36 2025 by rpki-client