Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File:                     J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier:          Dm9smp7RalENkUM5p7P05tTp7f8r8TXmPo50YgJ909Q=
Subject key identifier:   3F:46:70:10:D3:6E:FD:9F:D0:B4:31:74:A5:3D:4E:55:EB:4F:E8:6A
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0B68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number:          0B5C
Signing time:             Wed 14 May 2025 19:12:40 +0000
Manifest this update:     Wed 14 May 2025 19:12:39 +0000
Manifest next update:     Wed 21 May 2025 19:12:39 +0000
Files and hashes:         1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: mdvNPQ4KJ0IRty2T1k111TUfLYU36Q4irv45YNcPX6I=)
                          2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=)
                          3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2920 (0xb68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: May 14 19:12:39 2025 GMT
            Not After : May 21 19:12:39 2025 GMT
        Subject: CN=6824eb28-18eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:18:2f:3a:d9:66:fb:6b:02:2c:59:9d:f0:0b:
                    0e:be:30:31:a1:ac:54:16:a6:f1:0a:5b:af:b7:2b:
                    3a:27:51:92:94:12:68:62:ae:9f:2a:26:e7:75:c0:
                    1d:97:16:79:61:0b:21:05:a3:f9:d4:09:1a:c0:9b:
                    f5:10:f2:f9:a5:76:82:9e:fe:08:1e:3a:87:48:e3:
                    4a:6a:83:21:58:32:48:9e:97:bb:a6:e0:a7:87:e7:
                    fd:3e:c7:be:c5:d6:a1:67:27:78:a3:cf:c4:aa:9f:
                    ce:69:36:08:23:38:9a:0d:16:ad:e8:b6:01:51:50:
                    0c:29:e7:2f:be:53:4e:0c:ee:9f:57:7c:6c:b3:81:
                    62:9e:0f:8d:2f:2a:8e:00:21:da:c5:ae:39:5f:d7:
                    88:d5:83:73:64:e1:a5:bb:52:8f:6c:e7:d3:f4:82:
                    f6:c8:1d:47:92:7c:ce:6a:4a:aa:a5:80:48:36:b3:
                    30:58:75:c8:cd:84:f0:bb:bf:50:34:d2:35:02:2e:
                    7c:ec:67:3a:17:ac:30:66:23:e3:15:40:a1:d1:cb:
                    50:1f:40:c0:a9:6f:06:a5:21:ba:72:14:5d:9f:f0:
                    c6:69:d0:63:69:34:df:14:ca:eb:cd:fc:95:98:00:
                    32:ae:b7:47:f4:72:f8:64:e7:22:3a:0b:b3:e0:aa:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:70:10:D3:6E:FD:9F:D0:B4:31:74:A5:3D:4E:55:EB:4F:E8:6A
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:e8:c1:35:79:ca:e2:09:96:43:f6:51:ce:93:16:95:5a:
         d0:b4:f0:34:84:29:40:38:47:52:ee:32:d2:02:42:ff:e1:eb:
         26:2e:69:91:e8:c5:0e:ff:a3:0b:2c:6e:7c:83:bb:72:b7:c9:
         96:67:40:5d:02:65:3a:92:6b:63:1e:fb:9f:2a:3a:bf:56:4b:
         1f:9d:33:26:1d:94:2e:c2:25:29:88:5e:ff:7b:22:c1:7d:de:
         64:b5:a3:4d:a9:99:e9:37:2a:7b:fd:e0:23:cd:5c:1b:07:14:
         1f:ea:85:27:b9:dc:bc:5c:97:2b:18:81:85:ef:70:2a:d7:7a:
         2b:93:98:d6:54:f8:df:39:92:cc:aa:57:08:3d:24:26:6a:d4:
         a5:86:f7:77:24:96:8c:42:67:00:62:f3:82:04:c8:ad:b0:54:
         ae:0e:f1:74:7e:51:f8:85:9b:63:af:6f:19:94:0a:e4:21:ba:
         c6:ef:b2:91:e5:a4:7d:a8:47:28:28:eb:61:e9:7a:14:de:40:
         57:58:25:81:ca:9a:99:65:46:aa:b4:12:c5:db:9d:38:e6:2f:
         25:1b:b9:60:85:08:aa:95:c2:44:25:27:cc:0a:41:fe:5a:d7:
         71:1a:31:af:16:77:0c:80:5b:3f:1d:88:db:30:2e:7b:dc:c5:
         97:52:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:02:30 2025 by rpki-client