Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
File:                     u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json)
Hash identifier:          3ZFxJI2u29aL7HStwwZfi6lzSo+tnSiqm7sZYHl7Q18=
Subject key identifier:   10:B0:90:F4:72:69:39:76:DF:70:14:A2:ED:81:05:51:A2:A6:D5:01
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Certificate issuer:       /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial:       07D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
Manifest number:          07C1
Signing time:             Fri 16 May 2025 21:34:21 +0000
Manifest this update:     Fri 16 May 2025 21:34:20 +0000
Manifest next update:     Fri 23 May 2025 21:34:20 +0000
Files and hashes:         1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: MMCO5xSKGIaakQgbVVfqf6c16Nmp36uIJz5fPJXr9mE=)
                          2: 862720F4031611EB9086351AC4F9AE02.roa (hash: lkJxtaVPjdnJa9ZoCbg5uh78Ub/B4Qmik4f9BZRI1zA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
                          rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 21:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007 (0x7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
        Validity
            Not Before: May 16 21:34:20 2025 GMT
            Not After : May 23 21:34:20 2025 GMT
        Subject: CN=6827af5d-88bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:67:15:43:53:cb:32:ef:44:9a:53:6e:80:
                    e8:f4:d3:90:16:80:2e:c6:39:40:84:6e:1e:2f:36:
                    a2:3d:ec:51:c5:51:76:ee:0d:21:78:16:01:74:ec:
                    32:32:7d:b7:45:af:9f:f9:d6:40:ea:a3:a7:9b:ed:
                    06:75:65:27:56:32:e3:f6:74:5d:3e:82:66:e5:02:
                    bb:7e:87:70:95:cd:08:8d:ac:20:93:87:42:22:9b:
                    52:64:c4:c4:69:4f:85:a0:d9:3f:37:e1:19:7c:10:
                    bc:81:fe:a7:55:22:07:f9:98:04:45:22:a7:7b:29:
                    82:ce:2d:2a:44:57:3b:64:30:10:b6:70:58:e4:92:
                    bb:b7:7e:da:a5:36:7d:54:14:de:d6:56:f5:17:c3:
                    bf:e4:8f:03:9a:a6:83:2e:3b:65:3d:d1:57:64:9e:
                    19:99:5e:50:f1:39:bc:09:2e:3e:6b:ca:23:c6:8e:
                    63:8f:a9:b0:ba:06:dc:55:e8:90:0e:fa:1e:04:a1:
                    64:2a:0d:1b:cf:55:0c:4f:23:90:90:01:92:73:da:
                    fa:47:1a:0b:87:39:88:8e:b1:69:cf:ce:19:4a:4c:
                    cf:51:7e:67:8a:4e:b0:70:6b:67:21:c6:13:63:20:
                    f2:bc:b9:78:32:5c:0f:8c:5f:49:48:e9:dc:fc:da:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:90:F4:72:69:39:76:DF:70:14:A2:ED:81:05:51:A2:A6:D5:01
            X509v3 Authority Key Identifier:
                keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:91:fb:3c:ae:45:cb:f1:1f:c6:22:2a:9a:a6:e9:fa:5e:32:
         0f:d1:55:23:c5:94:56:ce:56:e0:1f:38:2a:2f:56:18:e0:a1:
         16:5e:df:69:89:52:97:a7:86:14:a1:ad:1f:8d:89:8c:61:06:
         74:76:79:45:04:4f:ee:d1:0d:d2:84:e9:a1:b2:74:55:ca:b3:
         c4:fb:b7:42:d5:8c:37:8c:4f:3d:9f:72:48:89:7b:76:eb:b5:
         36:22:c7:0b:c6:44:e1:96:0a:b8:44:2f:64:d9:81:1e:00:42:
         53:db:d1:86:1f:5f:a5:12:ef:79:81:94:0a:90:54:0e:b4:97:
         9a:a6:4d:52:59:55:f0:80:b0:ca:3c:87:cc:06:eb:00:8b:0e:
         e2:87:40:a1:75:d0:23:a6:a4:43:9d:f5:14:3b:6c:d9:63:f7:
         d9:75:c2:14:f3:33:c4:9c:8b:5b:5f:46:42:65:5d:9a:bc:0e:
         78:41:2e:dc:61:c3:a3:ce:d1:70:72:1c:8d:7f:7e:f1:14:3f:
         93:ab:6d:87:72:47:f1:ba:38:e2:9f:17:80:a0:7d:9e:dc:50:
         c6:2f:98:5c:d5:bc:f7:17:74:b6:10:28:25:42:38:1a:09:6a:
         1a:61:35:ef:9d:49:a7:3c:10:66:a2:13:08:31:c0:55:c8:f1:
         a2:e1:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:28:07 2025 by rpki-client