Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File:                     CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier:          R1sjyReZCcpFq+UA75pRGVlzqy4YLLz1G5IrpjWGFBw=
Subject key identifier:   2A:4D:24:8F:A4:B3:A9:0F:F3:7A:9A:61:4A:38:07:99:66:0F:AC:88
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       061E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number:          05BD
Signing time:             Wed 14 May 2025 23:26:12 +0000
Manifest this update:     Wed 14 May 2025 23:26:11 +0000
Manifest next update:     Wed 21 May 2025 23:26:11 +0000
Files and hashes:         1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: bE+d9DTTIoJGyU4I8ieXj0SfRXquIcaYv0bgbf168GM=)
                          2: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=)
                          3: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=)
                          4: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=)
                          5: 3A826C8CED9311EFB3825372C4F9AE02.roa (hash: AIcPcPwO0MC9ukAjdNsCx6XwtejcpEw/imMkdJauIwo=)
                          6: 5BCDBECC9D6311EE8C1C2B7AC4F9AE02.roa (hash: Pe3y0RLjR0FIZwfwi6WYTekm/kM3adNSrKJHDrzMHQ0=)
                          7: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=)
                          8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=)
                          9: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=)
                          10: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=)
                          11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 23:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: May 14 23:26:11 2025 GMT
            Not After : May 21 23:26:11 2025 GMT
        Subject: CN=68252694-ea9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:39:ec:32:2d:1d:12:34:02:2b:f0:96:c7:
                    55:b5:1f:ba:43:9e:67:4d:f9:1f:a2:86:c4:51:a7:
                    81:14:15:d8:fe:a5:a4:24:2d:43:37:66:b8:42:c9:
                    ce:3c:3a:e6:f6:0e:75:72:9a:1c:68:6c:44:02:37:
                    e0:e1:13:90:d6:08:74:27:a6:4a:bc:d2:c0:09:bf:
                    39:6c:43:60:b0:8e:46:34:46:a2:0f:b5:fc:c9:00:
                    dd:ed:57:b4:66:13:5b:b3:d6:53:7d:bb:06:b2:bf:
                    73:fb:51:37:89:33:e2:61:92:71:b0:e6:6c:c2:cc:
                    48:a1:15:90:ce:61:91:2e:59:48:b4:d4:83:87:57:
                    53:7f:09:55:46:95:87:41:3a:b8:b3:2b:9c:3b:b4:
                    00:d5:dd:e3:be:be:2f:8c:f8:8d:ad:98:dc:e3:95:
                    1c:78:a4:d4:43:ca:46:27:69:c1:7a:51:7e:4c:26:
                    dc:1a:ec:b2:3c:cd:51:b1:75:01:bb:3d:3d:b7:dd:
                    f8:4b:0c:79:90:19:03:0b:4c:05:8e:52:82:46:e1:
                    89:39:1b:b9:ac:76:2b:fe:52:85:11:54:0a:ec:54:
                    31:df:d2:bf:f2:b3:39:c2:c8:1f:a8:fc:bc:0e:8b:
                    ad:d6:8c:11:6a:4b:76:35:2d:29:e9:36:d3:87:86:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:24:8F:A4:B3:A9:0F:F3:7A:9A:61:4A:38:07:99:66:0F:AC:88
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:fb:a9:24:13:9e:8f:83:b5:ed:43:6a:12:34:e8:5e:57:
         8e:2a:6f:bd:79:77:48:35:29:9d:cf:3e:f2:22:e2:c3:e8:13:
         f6:5e:c3:91:8d:28:50:8f:6b:d7:3d:ce:5a:6f:fb:be:49:61:
         42:e1:2d:4e:72:61:5a:55:5c:77:da:f0:e3:f9:43:82:f3:85:
         cf:e2:ed:d3:a4:5b:6f:86:3a:37:f2:0c:03:1b:7c:5b:1d:1f:
         23:27:e5:11:01:30:80:03:7d:25:a5:5a:ef:03:fc:11:95:6f:
         80:be:97:26:3c:18:84:32:f8:ee:52:3f:82:23:ae:11:8f:bb:
         cb:b7:3a:98:90:1e:b6:34:e1:99:96:4b:77:ff:71:f7:da:df:
         6b:88:18:91:24:59:22:5e:d1:22:86:d3:6f:fe:82:fb:0a:64:
         b9:a1:d1:5b:84:c9:73:25:03:0e:c3:1e:1c:b1:40:8a:bb:55:
         68:b7:34:26:42:30:a4:30:49:68:d7:c7:dd:19:96:f2:61:30:
         07:d8:9c:34:97:95:3d:d4:67:d0:73:8f:d6:67:da:e2:a6:75:
         1f:e0:4a:33:50:a3:8a:e0:a8:f1:e1:96:8c:b1:62:76:d7:28:
         c3:0f:64:2e:18:4d:1e:10:eb:1c:74:d9:2b:64:36:0f:de:94:
         7d:bc:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:08:49 2025 by rpki-client