Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          HLMRwEwbDskIsf+thKgAuuk9JLuQnEmovaENvu6BoE0=
Subject key identifier:   54:04:29:8B:E3:6B:91:15:C5:0D:5E:FA:8A:D1:A3:3E:53:14:9A:CA
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          055A
Signing time:             Wed 14 May 2025 23:35:08 +0000
Manifest this update:     Wed 14 May 2025 23:35:07 +0000
Manifest next update:     Wed 21 May 2025 23:35:07 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: cnelA+FLiSJL8TImXaA3Ouj+2TaGkGioOtd47khfVeg=)
                          2: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: +FHx1Rcmiw2Cfk5r6pkki5E5DN80dE1EMz6qZ6ArXQ8=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: azztU6jGWGkJ9XE0wv+vwlMZ1OuwZlxTMNo/JPXSCFM=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: KiUHl6uGGniLvYgVccNgvCIPRBq7X96S1xDDUjJ+aSw=)
                          5: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: FPSQ8p1kwZ3vXAQbffUHxGVHKyRBni/t9uDlhC1ac7I=)
                          6: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: DXFu7/3s3dZZufQfCR7FXNUXUWGkobLBbIzZTN9Mp7k=)
                          7: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: pI7ua1FostnjJb7ZIqAIfoEGZMv41AhlErmhbZ8SW+0=)
                          8: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: zOp+pmoPEmD9FqhHLLTWspA0hasdoDJWm9XMS78WorI=)
                          9: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: fV3NIiz/nP1VFmLUqpUHxb/qO3YbAJnR1/hn6cqYalA=)
                          10: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: /5vaFU/movPiNcrsjCj3H2p31M+BSywFDXfC27bwtzs=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: Rtj2YZUzcKfkgTDcvh/sESq8bL/Thyrlj4Jg24VeLAs=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: xyrw8EmHYaazvYNSzHgYLMsIR2DQgj7hYHdBqp8rGQY=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: KQ2TYskB2nSpw60IPgL8Z4Nfyg1ScKRjQgnaDOmmNJY=)
                          14: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: zujVYZo1Gy2knnWLbno31U8SLXqyX16vRQYdNEeh8/g=)
                          15: 3B398B8A178411EC83735974C4F9AE02.roa (hash: SksUcxMguSSsYgsTOlV2nGlosz5GcrNGDJ2VSXMrlE0=)
                          16: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: B82Un+DU6B7NyuhVj1V9v///1zPVJ3rXRY6EcEaq0ew=)
                          17: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: P9HR6alaLKKcvAvinbQN/9aMjtdjm5ZAoDIUPrfljRg=)
                          18: 3BE907D6178411EC83735974C4F9AE02.roa (hash: ceitiXpUr0OmO04261kMJXcBcKDZSuQ6TyY/na8WY3c=)
                          19: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: QcEFCbKzSrsMklkI1eWiqnxmw/ZSSPLydpwjTEuoR+k=)
                          20: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: MQyExLb7Mr7D0TumhjujEz9GIqRyF/YS1SDy3bPilrg=)
                          21: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: PT9TyyH2chY28D7xFpiGeKe73ZXXzfI6IzydINCCygw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 23:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: May 14 23:35:07 2025 GMT
            Not After : May 21 23:35:07 2025 GMT
        Subject: CN=682528ab-1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:28:77:66:8a:47:f5:42:74:bd:60:a6:37:
                    8f:98:8e:17:68:eb:42:fa:4c:19:b8:af:28:91:48:
                    2d:6b:17:42:48:d9:67:c2:37:6c:d5:56:8d:f3:7e:
                    7a:58:5d:db:40:86:a4:a3:a4:f9:35:10:2b:0d:18:
                    c0:86:56:1c:d9:b7:33:6e:12:74:5e:cc:7a:5c:18:
                    c1:bf:5c:64:3e:e1:08:8f:c5:cd:b3:51:3a:29:4c:
                    9e:af:c9:4e:da:0e:de:d3:cd:37:ba:95:dd:6a:8c:
                    2f:7f:8e:d8:41:34:f7:b1:c7:62:2f:61:f5:de:43:
                    2d:59:17:42:49:85:bf:5f:6d:12:8f:11:08:e0:9f:
                    37:8e:cc:c8:90:3b:73:7c:9b:b2:e3:db:bd:c4:c0:
                    9c:98:18:59:65:c0:6c:7e:67:ad:67:11:31:c8:ae:
                    37:53:54:97:ff:a3:7d:57:d0:78:73:e2:6c:cb:a4:
                    89:4d:56:ed:c2:1a:52:82:72:ed:37:a0:ac:7d:de:
                    e7:20:6e:ee:96:00:c2:9b:42:f4:6c:98:87:26:32:
                    17:75:46:72:f5:bf:fe:72:5a:d8:14:97:69:b0:f1:
                    d9:d5:0a:67:93:c1:f5:fe:1f:5a:f5:63:a4:a2:f0:
                    97:9f:11:6e:3b:b3:3a:aa:76:90:af:47:51:10:31:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:04:29:8B:E3:6B:91:15:C5:0D:5E:FA:8A:D1:A3:3E:53:14:9A:CA
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:4b:f1:50:f9:db:e1:56:fa:95:3a:2a:1d:81:5d:a9:dd:
         f5:80:ea:68:d1:57:da:dd:a8:8b:41:86:fb:70:7c:eb:41:31:
         53:9a:dc:7d:06:94:41:bb:53:ff:a8:02:42:95:16:ee:2f:bd:
         e3:e1:99:a8:92:aa:a7:0b:8c:c9:00:40:27:35:a3:60:ae:88:
         f7:15:cc:37:9c:5c:81:a8:2b:48:3a:44:9c:9a:9a:d2:cb:b1:
         09:48:e6:2c:19:cc:9a:60:c8:5f:5c:10:06:62:54:10:98:6d:
         ba:4f:86:4f:fd:33:94:24:81:c9:46:22:3d:df:87:11:ef:0e:
         45:6d:2e:3a:08:8c:37:8b:90:da:e2:00:69:0e:70:07:2a:d3:
         b4:c8:e1:79:40:06:14:1f:05:eb:12:90:d0:a1:d2:de:85:b1:
         a0:76:61:f6:45:b6:04:70:ab:7c:a0:ac:e7:e1:08:0a:e8:5a:
         a8:3b:e3:20:7a:3e:3b:c3:44:dd:93:01:3a:56:26:b3:50:b7:
         f2:f3:e1:53:86:df:17:63:ef:5b:a0:28:3b:db:eb:ef:71:0f:
         62:89:46:38:b7:96:45:09:c2:0b:55:37:ba:ca:a3:ed:d6:0d:
         ae:d5:0c:45:07:5a:41:91:d0:1b:b2:05:e6:a8:3a:37:2d:57:
         7a:d0:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:22:40 2025 by rpki-client