Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          5NMMJVLWcgxtdtZykXXepexbfrfMFdFaXOrOYwM1Jfk=
Subject key identifier:   3D:81:99:48:46:15:1F:BC:D5:B5:89:E2:94:1B:D0:29:5A:C7:13:7C
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0341
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          031E
Signing time:             Tue 13 May 2025 01:04:20 +0000
Manifest this update:     Tue 13 May 2025 01:04:20 +0000
Manifest next update:     Tue 20 May 2025 01:04:20 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: 4Lm4HSTCKC7a5ZVa6DB0L1/ii83Xr0xmOIGuWmTknuI=)
                          2: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: BKZDdCu5I5Bny2FjLb1mBVpCgzMTIVhQtDH+2UKX5kU=)
                          3: EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (hash: HyDmzwiWOExy2YJsgokVPHZS5Evkr13x2XepJOzvoNk=)
                          4: 748FD068C11011EFB6161F67C4F9AE02.roa (hash: 1JpkCoiTyutFLV6xbj39GXkCqodZPTBI6jWeSNGeps8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: May 13 01:04:20 2025 GMT
            Not After : May 20 01:04:20 2025 GMT
        Subject: CN=68229a94-be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2d:48:4b:b1:51:2f:42:03:ce:3f:ce:a4:e3:
                    46:66:11:74:0a:12:b2:ae:4b:5e:4f:c7:d5:89:45:
                    ea:ee:49:3a:f7:dc:cc:2e:e9:a0:b7:bf:eb:ac:09:
                    15:77:3c:f3:c4:71:c6:62:5f:c4:be:31:7b:c4:91:
                    17:de:3c:59:cc:9c:34:b1:5a:a5:b1:cf:09:5d:7f:
                    73:4a:d1:b1:65:cd:5d:0b:a2:10:50:e9:e6:47:84:
                    83:1d:e8:50:d0:d4:55:d9:95:9c:45:2b:c8:bc:71:
                    97:f6:ac:5d:02:77:14:65:78:70:d9:6b:28:fe:9b:
                    39:40:2a:c5:16:5a:b6:a7:2e:8b:6a:d0:1e:4d:67:
                    93:fa:7b:37:26:c9:6c:7a:23:1c:62:34:ea:8b:3c:
                    a0:db:c9:9e:05:3c:ed:cd:80:05:73:1f:56:5d:1e:
                    6c:db:91:8e:ad:a9:72:28:36:4b:6f:e5:af:93:a9:
                    d8:e6:2a:fd:98:b7:11:09:54:30:ef:27:9e:80:37:
                    e2:d0:1d:ce:64:28:2f:35:f2:82:6b:be:e8:d7:38:
                    6a:3c:cc:fe:a8:ed:31:ba:63:66:35:b9:75:bf:27:
                    bd:15:2e:21:c3:49:bd:6a:d3:57:23:fa:b9:26:de:
                    4b:e7:38:ff:62:ce:86:6c:d6:c6:c9:bd:57:11:64:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:81:99:48:46:15:1F:BC:D5:B5:89:E2:94:1B:D0:29:5A:C7:13:7C
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:ba:5f:d4:61:80:2a:10:09:ee:5b:1f:45:ac:84:27:62:
         26:f0:66:4d:37:0d:e5:5c:1c:0a:06:3e:7f:27:76:bb:34:8b:
         6c:f3:35:f3:3a:d9:5e:cf:a3:3b:2d:a1:ff:6a:1c:5e:a3:ba:
         f6:1a:80:f9:41:d2:54:05:4a:e3:ce:3d:a6:bf:9b:ae:33:f6:
         95:e2:3a:fa:71:fb:2e:0c:8e:5d:d1:88:33:8a:44:8f:34:a2:
         a1:e7:4f:a4:fc:7f:f5:dd:86:bd:c6:86:77:b9:c4:3a:f0:92:
         42:e4:cf:07:7a:27:91:8d:f2:27:15:18:28:15:26:00:f3:ec:
         06:3f:b8:7f:1d:22:49:9a:bb:36:eb:e4:c8:7e:64:2a:1d:29:
         6e:c9:51:85:be:04:61:82:37:ec:98:32:95:5a:21:f7:c4:b1:
         76:e6:cd:5c:0b:ff:0b:11:db:c3:71:af:9c:b2:39:6d:9a:64:
         dc:29:d8:35:c1:0a:f4:e1:70:55:e3:a6:a5:59:d6:44:79:af:
         b0:55:4b:46:eb:05:29:9e:dc:7e:a4:b9:ed:e5:86:26:c6:c7:
         98:dc:f4:ca:30:51:46:14:01:f5:dc:eb:df:d6:75:49:f7:2e:
         87:43:35:d6:3d:64:d2:06:32:97:f9:9e:43:25:8e:42:a1:8f:
         4f:3a:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:33:31 2025 by rpki-client