Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
File:                     Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft (raw, json)
Hash identifier:          hRKxi+J8RmMtO728san6e1stflEzibSgG5JQIu46Lg0=
Subject key identifier:   68:F4:1D:51:8C:4C:EA:87:00:33:D4:1A:F9:95:E0:C1:02:EC:5D:20
Authority key identifier: 49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Certificate issuer:       /CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
Manifest number:          0684
Signing time:             Wed 02 Jul 2025 22:34:21 +0000
Manifest this update:     Wed 02 Jul 2025 22:34:21 +0000
Manifest next update:     Wed 09 Jul 2025 22:34:21 +0000
Files and hashes:         1: Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl (hash: EHChPAnlxGZljJofdFw3aGEbXsCtKXROzsztUSwnK28=)
                          2: BD8A42B27CA411EB847F0B83C4F9AE02.roa (hash: rF+D6zPDIJwry6qHScwbtKwBOHZvfUdrhdX6D6Fqdog=)
                          3: FFD6E656DB1E11EB91006D71C4F9AE02.roa (hash: K61xoWut3SAgEuN5+1k0dXQON0k0l7TUwfM2kslJEm4=)
                          4: 006626AEDB1F11EB91006D71C4F9AE02.roa (hash: 20i7SUN+ILtvpk7iV/YzHa7IC6zBka4WdUDNuP/C6/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl
                          rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736B7, serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
        Validity
            Not Before: Jul  2 22:34:21 2025 GMT
            Not After : Jul  9 22:34:21 2025 GMT
        Subject: CN=6865b3ed-2342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:c8:5d:0d:7b:4e:2a:8a:62:9d:54:18:c9:
                    ff:9e:51:7f:1b:f2:47:54:83:48:83:fd:36:6e:93:
                    72:06:cc:52:02:7e:f6:e3:ae:52:bf:0b:a7:c6:73:
                    68:ec:a2:4d:d3:24:c6:d6:1f:94:98:06:14:02:22:
                    68:b8:9d:81:b4:12:dd:f9:d2:7a:34:24:d2:95:68:
                    21:34:47:c2:bc:ce:90:18:ae:d5:8f:cd:fc:57:06:
                    63:30:4e:2e:74:20:b4:3c:2c:d6:98:cf:3c:82:39:
                    bf:08:c2:11:3e:54:69:b4:80:23:55:09:30:27:f8:
                    25:94:3c:3d:5e:e5:c8:88:09:01:73:38:91:a6:1f:
                    9a:b7:55:61:aa:3f:05:79:b2:f6:d5:2b:08:f4:b4:
                    d9:0b:ee:3f:8d:a1:9a:41:bc:df:e5:50:08:7e:a3:
                    b4:be:ef:de:ef:0d:f6:10:78:e0:59:b7:2f:79:75:
                    21:cd:1c:1e:31:30:9b:08:ac:53:d6:75:4e:e4:c4:
                    c3:8a:07:60:3c:ab:b3:98:69:1d:98:e0:0c:1f:18:
                    e5:d0:b9:df:58:56:3b:b2:3b:22:04:4a:6a:fb:36:
                    81:89:98:59:a7:a7:55:ba:18:9e:ef:28:11:e1:d7:
                    28:0c:9f:3d:ec:4c:67:f2:27:42:44:0d:ab:cc:1d:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F4:1D:51:8C:4C:EA:87:00:33:D4:1A:F9:95:E0:C1:02:EC:5D:20
            X509v3 Authority Key Identifier:
                keyid:49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:4f:7e:1d:bb:38:7e:f7:d9:78:c9:ab:3d:d7:f6:aa:12:
         54:bd:2c:f0:11:6c:0d:04:fa:c7:59:0b:d7:95:64:3f:ef:9b:
         73:76:3d:91:99:6c:3e:97:f4:bf:15:f4:ae:eb:fe:22:14:e8:
         0a:66:c5:63:c2:02:01:6b:49:3e:cb:4b:62:1b:82:d5:37:7b:
         35:66:60:0f:e2:fe:ad:a0:0f:8d:79:5c:8e:87:33:17:8f:88:
         bc:37:e5:67:7b:a4:63:36:cc:02:7a:43:a7:14:96:e4:0c:7b:
         11:cc:0d:44:a4:6f:02:97:3e:6a:d9:ce:12:b9:b5:7a:50:19:
         77:e0:73:4e:31:6c:64:1b:1a:63:82:12:0c:34:b0:5d:15:02:
         e6:fb:3d:93:34:e4:16:ab:bb:b2:c3:1e:ea:8d:e7:f6:a0:ea:
         dc:ff:01:f3:ed:22:00:05:97:5e:09:25:ad:9f:d6:eb:8b:55:
         f2:c0:e2:97:a7:b3:17:ba:24:b6:37:01:80:9e:24:22:2b:d9:
         52:88:c8:91:64:08:ab:7e:50:fb:50:61:43:4a:c2:e8:95:8c:
         d0:cf:b5:cd:68:da:69:0e:3b:45:23:b6:68:e1:99:68:46:5e:
         9d:7a:a4:9e:42:37:25:32:e1:e1:9c:fa:6f:6f:67:38:ad:ab:
         c3:5b:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:53:08 2025 by rpki-client