Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File:                     eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier:          qWU7QsS9SdVyzJpT4ZaLoVQEpdqbXyt7E0zq7DpYBaI=
Subject key identifier:   4F:61:33:AF:59:BC:19:EB:10:7F:E7:D0:8B:43:15:D3:60:B0:C4:C8
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer:       /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number:          5F
Signing time:             Thu 15 May 2025 06:24:00 +0000
Manifest this update:     Thu 15 May 2025 06:23:59 +0000
Manifest next update:     Thu 22 May 2025 06:23:59 +0000
Files and hashes:         1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: ZaXLn+M0zVr/SNi2/MXeygdkhr06z/rfxa3NyY9XA/c=)
                          2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: Gw+0qN7nHcP5/UJQ2iKvlQ13obyIJUpO0k6xHzRKL2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
                          rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
        Validity
            Not Before: May 15 06:23:59 2025 GMT
            Not After : May 22 06:23:59 2025 GMT
        Subject: CN=6825887f-61f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:59:ba:2a:ec:11:95:1c:82:fe:8b:53:e4:
                    6b:71:0f:17:0e:54:b0:0c:77:ec:0b:64:f4:34:63:
                    62:dc:4d:05:79:9b:c1:90:9d:26:0a:10:b8:fb:e3:
                    cb:8f:93:5f:96:3c:6c:e9:72:77:f9:39:3e:4f:bb:
                    4f:86:96:16:b8:e9:c1:a5:64:23:70:37:2d:ad:0c:
                    e8:da:38:47:95:79:56:82:dd:07:ed:e9:ad:e3:19:
                    67:bd:e3:6a:03:40:90:bb:10:20:b2:0e:d4:42:21:
                    77:99:61:fc:97:c5:2d:8f:4f:bb:11:02:2a:1d:e0:
                    2c:85:b8:9c:40:30:b5:47:81:a1:7b:a2:51:02:70:
                    d1:cb:f0:da:33:4b:91:9f:dc:12:10:8e:55:7c:06:
                    c0:48:24:39:da:d1:35:59:12:7f:84:29:79:9d:1a:
                    08:f1:92:db:6d:e2:82:2e:7f:02:19:1e:75:e4:58:
                    b6:f6:1d:31:0e:28:bd:dd:49:ae:07:dd:88:af:c8:
                    5b:3d:c9:48:f5:4a:bc:e1:6a:24:e0:62:3c:c2:fa:
                    3a:67:b5:5c:f8:98:da:4c:63:3c:bd:6d:b5:2b:11:
                    6e:35:b4:41:36:55:5b:bd:eb:de:92:17:dc:1c:26:
                    f0:bf:c7:fe:cb:e6:2d:45:20:9f:df:30:c6:d7:92:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:61:33:AF:59:BC:19:EB:10:7F:E7:D0:8B:43:15:D3:60:B0:C4:C8
            X509v3 Authority Key Identifier:
                keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:45:3e:96:2a:1f:8c:32:7b:d3:53:3f:c0:bf:b5:43:b9:
         7d:08:31:a0:1a:25:18:f9:82:20:bd:c1:60:13:de:14:0a:c5:
         bb:cb:f8:e5:af:4c:4b:45:6f:f0:85:5d:27:26:6e:fb:01:4f:
         a7:7a:36:31:5c:6a:4c:a5:f0:7c:ca:0d:55:2a:01:4b:0e:e5:
         a7:23:fb:87:b1:4c:aa:6f:b3:6d:3c:d3:5f:be:6f:e8:5a:f9:
         06:3c:15:96:b9:ed:87:61:d2:36:2a:ed:ae:2e:da:14:39:94:
         96:83:23:13:9a:ba:c6:e6:3d:b4:00:da:57:47:e5:8f:81:51:
         4f:28:f6:92:50:22:69:3c:2b:10:4e:df:51:ee:13:91:ff:9d:
         0f:c7:6f:1e:f1:b0:58:d6:3a:a7:0e:d8:44:db:4b:bb:8a:4b:
         38:0d:47:d4:9c:c4:2d:e9:68:1f:56:12:b3:49:11:f0:03:b4:
         4c:7c:be:5a:e6:c6:5b:8d:54:f5:4d:b9:61:69:5d:34:7d:96:
         10:b0:06:83:65:f3:37:66:e5:63:a9:8d:66:3a:7c:75:bc:d0:
         d6:4e:6a:c2:03:e4:43:f5:63:fa:09:d3:74:38:c6:e3:b5:d1:
         2d:79:2a:8d:15:45:70:c6:2c:c2:1d:6f:2a:c7:f7:2b:44:35:
         c0:43:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:03:07 2025 by rpki-client