Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
File:                     XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json)
Hash identifier:          Fvpe8pxYwt7PzcLbsHGDBeqJgXn+mX1sSreS65Z0wno=
Subject key identifier:   C1:79:5B:68:E1:7B:1B:19:0D:F8:95:ED:7F:02:8E:B2:81:46:B9:BB
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
Manifest number:          01E5
Signing time:             Sun 11 May 2025 01:56:02 +0000
Manifest this update:     Sun 11 May 2025 01:56:01 +0000
Manifest next update:     Sun 18 May 2025 01:56:01 +0000
Files and hashes:         1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: Bi0zwuhEP1gMurFDm/5t+frtgLVI/vQtSJcy7wnTbzU=)
                          2: 29FFF260669111EE8D5C864EC4F9AE02.roa (hash: 3pHN2fqKLyseaZ6WyOFdERsAWtwGnuD8JCF2gN634Ws=)
                          3: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: pPi15z/Whv1VOzdwch9x1UduIv6zmo0v/XxtgZH7i/0=)
                          4: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: 5lEL9eS9yJhHrkaY87CyfNgKHrW5Wh6Msg6SUfVkO2Q=)
                          5: CD152404495B11EF93EA3757C4F9AE02.roa (hash: 4cq9yG51A0O6Vq8JFh6wKZKMWZPp3grbIJj2LCtHk+0=)
                          6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: qM0AwU6iF9zfpDGKy2SZ3RCibpnSgHxUctYX3hAWago=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 01:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: May 11 01:56:01 2025 GMT
            Not After : May 18 01:56:01 2025 GMT
        Subject: CN=682003b1-3e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:43:5c:dc:65:7e:18:4a:b8:5a:70:f1:3e:
                    f1:06:3a:dd:3a:9a:17:45:45:6c:68:d0:20:cc:53:
                    81:42:34:bd:ce:f3:a5:c7:da:a4:99:09:df:4a:82:
                    64:cb:e1:8c:f0:10:4a:12:ec:c1:b2:a3:cf:d3:31:
                    4a:30:75:5a:4f:15:96:ce:ab:d7:64:16:c3:88:a4:
                    f8:9d:ad:d4:a2:cd:4d:71:9f:44:55:29:da:60:cb:
                    78:68:1f:03:52:c2:fa:b0:d2:51:02:b4:1a:e6:a0:
                    3e:71:5a:c4:d4:a2:c1:ff:de:f1:1b:da:c4:cc:f9:
                    ff:f2:5c:51:f7:b3:2d:08:f2:5d:bc:5d:12:b8:93:
                    18:1b:f9:ac:e2:6d:49:72:f9:5c:db:b7:85:eb:8f:
                    7d:57:03:d6:12:77:9d:d4:5e:48:7e:69:d8:cb:91:
                    51:1a:a4:0e:38:7a:a4:ab:bc:85:bd:44:ce:70:a1:
                    15:85:c1:79:3a:07:29:61:b2:ab:7b:70:c9:53:0f:
                    35:d8:a4:ad:79:ee:ee:08:65:d2:eb:09:8e:3b:a2:
                    ec:60:70:97:60:45:03:17:14:5c:bc:af:e2:a0:4c:
                    81:96:e9:cc:43:bf:e3:cc:1c:ae:07:93:6c:54:ca:
                    9e:b8:31:da:91:c3:cd:e6:b4:2f:d1:8f:f6:22:97:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:79:5B:68:E1:7B:1B:19:0D:F8:95:ED:7F:02:8E:B2:81:46:B9:BB
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:25:50:64:28:73:62:93:78:8b:2b:c1:de:8f:6e:b5:97:d2:
         4d:7c:ba:91:d6:c8:25:30:3f:17:6f:3e:4f:ae:16:4d:ff:cd:
         7d:c2:20:08:6b:19:9b:95:8f:70:04:73:ec:50:aa:e3:be:f6:
         f6:d2:9d:2f:54:38:86:e9:ec:e4:8c:86:f7:01:82:78:e6:12:
         18:b9:4b:dd:4b:ec:1b:0f:a0:62:95:e4:1b:11:73:b8:08:a7:
         c3:ed:b1:67:f3:3b:40:60:4c:49:4c:b9:a7:97:78:19:4e:a3:
         fb:2a:63:eb:4f:ae:29:c0:48:5f:c1:18:77:84:2a:4b:75:29:
         27:40:d7:7a:3d:76:81:56:7d:cd:28:33:42:6f:fa:ce:4f:86:
         97:ef:f6:1e:db:e5:96:bd:98:c8:36:a8:4c:b9:94:e3:47:a7:
         d1:0f:e6:80:29:51:5d:97:15:d6:a3:81:ab:5e:69:c9:b3:25:
         27:b7:fc:9e:2a:f6:27:cb:b3:d0:f7:c6:e9:5d:12:d1:31:35:
         05:97:0a:0d:10:c9:4a:15:e9:ef:9a:0b:f0:ea:5a:f8:60:1e:
         da:e4:1c:ef:0f:a7:10:e1:d7:5d:f6:52:0d:a3:85:26:e6:f5:
         38:2c:d1:f4:0b:ef:5f:94:0b:64:42:12:27:ef:29:61:66:3f:
         ef:97:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:51:56 2025 by rpki-client