Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
File:                     55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json)
Hash identifier:          hcyyH5gHUz3aiXH0GpEj6tGaouIgQw9DMHj1cEwZ6JM=
Subject key identifier:   2E:49:3C:94:13:EF:A9:A0:E3:00:0F:B0:E1:CC:2A:A3:87:C2:A1:D2
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Certificate issuer:       /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
Manifest number:          0134
Signing time:             Sat 05 Jul 2025 04:49:47 +0000
Manifest this update:     Sat 05 Jul 2025 04:49:46 +0000
Manifest next update:     Sat 12 Jul 2025 04:49:46 +0000
Files and hashes:         1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: 8ROmw4GpZf8FrfJLdYjpzYZgcjByXTKLjBg+7QnYSqE=)
                          2: 54692EB02FB111EFAD1C6322C4F9AE02.roa (hash: keI95qCS2k4Lve5N7wDY/bHgpp8mJTarNaBOO1lqZJQ=)
                          3: 53F6AEC62FB111EFAD1C6322C4F9AE02.roa (hash: B6FxffQfLCkDnb0AjYYHgyj86lwe6hNFxc5bjeq/NIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
                          rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
        Validity
            Not Before: Jul  5 04:49:46 2025 GMT
            Not After : Jul 12 04:49:46 2025 GMT
        Subject: CN=6868aeeb-7ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:3d:09:80:12:a1:82:65:88:32:7a:bb:0b:
                    5b:06:b2:73:8f:d0:e8:0a:62:aa:3f:d1:53:41:35:
                    ca:2e:61:d0:fa:33:f3:d6:6c:6c:85:75:99:02:fa:
                    75:05:89:43:ba:3c:0f:84:10:f6:2d:f7:f2:fe:7d:
                    3e:64:e3:50:0a:8d:4f:17:f8:13:09:1e:7f:12:26:
                    6f:87:22:7b:59:48:bb:98:63:db:58:71:51:5a:4d:
                    30:ed:11:ff:4b:a5:f6:08:23:da:3c:e7:f3:f5:f8:
                    9d:57:40:51:4c:36:ad:27:0d:e5:56:f5:e0:a9:98:
                    34:9c:67:92:26:c7:3c:a9:83:b1:91:9e:ae:c5:ba:
                    99:30:67:57:7a:42:30:ae:5c:4a:cb:23:e4:63:00:
                    6b:b0:0c:1b:ff:21:16:7f:78:23:f3:08:01:33:ac:
                    47:b2:b8:16:33:14:ff:66:38:7a:1d:da:76:0b:b3:
                    0a:af:a7:0d:7d:3e:21:8f:fc:57:7a:3e:b2:f4:cb:
                    70:41:3d:14:7d:8b:80:c8:ca:65:43:c2:9e:79:50:
                    ff:29:c5:5f:d6:9a:ea:3a:7d:18:a9:e0:60:fb:b0:
                    ea:d2:7e:2b:34:68:4c:11:2b:d9:60:6c:4f:4d:b2:
                    22:51:5b:cc:82:07:34:27:c4:19:c7:98:2c:e7:43:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:49:3C:94:13:EF:A9:A0:E3:00:0F:B0:E1:CC:2A:A3:87:C2:A1:D2
            X509v3 Authority Key Identifier:
                keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:61:54:d8:2b:17:dc:8d:c3:f7:3e:e5:90:80:5c:18:2c:
         3a:9c:af:86:4a:ee:f0:b3:4e:4d:f0:a5:81:43:06:b1:3e:00:
         0a:21:e0:d7:71:78:17:73:b1:fc:03:68:56:24:40:31:bf:a1:
         80:c8:1a:af:50:26:b9:38:23:b7:60:2e:82:ef:76:94:c3:f5:
         89:31:ad:f7:52:3d:4c:b9:0d:ca:56:1b:bd:72:c8:c4:70:4e:
         f2:76:01:7c:31:2a:b1:3b:7e:61:c9:12:0b:8f:80:8e:cc:6d:
         d5:fd:ad:ed:16:06:fa:13:a3:13:2d:64:7c:e0:bc:54:ac:b7:
         03:6e:d9:5c:d0:6d:17:eb:dd:ab:f7:34:56:bf:89:33:67:6a:
         27:df:6e:61:10:d5:f7:d3:86:86:df:02:30:26:3a:00:94:34:
         39:5a:3c:16:a9:8a:48:19:0d:12:c4:05:0c:41:27:b0:df:53:
         d5:b6:e6:f4:84:ed:31:c1:7e:c4:02:1f:3a:57:33:b0:b4:e3:
         f5:dd:9f:99:a4:75:41:b7:cb:4d:36:be:4b:f6:dc:dc:40:5b:
         60:70:6a:1e:2a:f2:57:ab:37:66:d9:71:7f:68:7e:8b:c3:93:
         dd:c0:78:40:ad:d4:4e:75:7b:35:32:08:b9:0e:b1:e3:ed:18:
         e9:91:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 18:53:39 2025 by rpki-client