Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
File:                     5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json)
Hash identifier:          EjQlmgrMUdPoa6A0YOCajI09Jn6w1uwrqkYUPUlANzw=
Subject key identifier:   BB:91:24:20:05:49:C7:EB:69:ED:E9:8A:12:BE:42:9E:E1:44:39:66
Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
Certificate issuer:       /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
Manifest number:          0149
Signing time:             Thu 03 Jul 2025 04:21:09 +0000
Manifest this update:     Thu 03 Jul 2025 04:21:09 +0000
Manifest next update:     Thu 10 Jul 2025 04:21:09 +0000
Files and hashes:         1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: O8mjhIfVcsUsxHALvqFRX4lF83EXyidjRYpVxQtfUZw=)
                          2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: nKra6kgkDLZMACl29cue2PgvN/WmZ6IhO1y9ruMhiD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
                          rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
        Validity
            Not Before: Jul  3 04:21:09 2025 GMT
            Not After : Jul 10 04:21:09 2025 GMT
        Subject: CN=68660535-0ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:9b:33:a0:e1:c1:5c:31:01:4c:c4:51:2c:
                    0b:d9:d8:12:c6:74:f1:ad:b2:e3:22:e4:2b:27:d5:
                    6d:dc:3f:77:39:1e:4b:23:4b:e1:e9:a2:15:cb:86:
                    b4:12:4c:7e:99:12:c1:59:47:8a:55:3f:47:15:92:
                    b6:0c:d2:85:d7:61:24:f8:c1:a7:7b:60:c9:4a:ed:
                    2f:a1:8a:84:57:91:dc:55:f8:1b:93:06:e2:b8:28:
                    e1:58:7f:98:ea:5a:d6:31:ac:6b:76:4b:91:35:a7:
                    ae:46:d5:cd:ea:45:c3:ae:34:c1:43:7c:69:4a:98:
                    a2:80:3f:54:9c:ad:c4:e4:25:28:a8:d4:f6:4d:22:
                    ab:87:36:57:9c:4d:05:b5:02:0c:28:9b:09:79:cb:
                    b8:e7:1a:3f:c6:e6:ec:e2:07:1c:28:9f:b0:12:04:
                    1b:6d:8c:88:88:24:57:7b:fa:4b:8a:a1:25:54:64:
                    81:2c:22:29:9f:ca:5b:60:27:de:d6:9c:63:61:c0:
                    dc:0d:94:c3:e2:53:f0:ad:c6:b8:ae:66:6b:10:a0:
                    ec:cb:20:a0:c2:88:20:53:cf:6e:2f:67:bb:f9:2e:
                    14:1a:23:2f:00:bf:98:10:d9:3a:51:f1:fa:be:72:
                    17:0a:21:c7:66:4b:6a:df:cc:99:5c:42:cf:61:17:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:24:20:05:49:C7:EB:69:ED:E9:8A:12:BE:42:9E:E1:44:39:66
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e8:1f:19:1f:33:7c:f8:90:8c:51:e1:5b:42:07:76:fa:1c:
         14:c3:90:01:cf:2e:8d:c1:d3:9d:98:bf:00:8d:62:74:01:f0:
         51:74:9a:35:c9:cf:6c:6a:59:15:57:a9:c7:06:b7:b5:96:d9:
         46:72:3f:9a:7f:64:f8:17:2e:18:52:a4:e3:9e:bc:ac:18:68:
         32:c6:5e:1c:92:59:fe:62:28:a6:9f:25:2e:05:89:15:dd:4d:
         22:47:0e:04:71:b9:5d:e4:3f:c8:59:ae:d9:fe:eb:c0:b4:f7:
         a2:2f:fd:8f:9d:0e:54:56:86:7d:be:1d:38:64:b5:24:dd:cc:
         dd:2b:49:cb:17:2c:7e:1c:f2:11:7d:fe:3b:d7:18:ed:23:d8:
         f8:b2:d4:a5:87:6d:43:c9:86:ec:c3:76:0b:cb:bb:3e:01:eb:
         72:c6:c4:eb:e3:72:1e:1c:1b:11:b7:52:cb:ea:1c:ed:a7:1e:
         54:76:75:6e:ea:c0:bf:cf:1b:df:2c:e2:7c:68:b5:49:55:af:
         b9:87:92:05:30:35:b9:e8:a0:21:d4:30:97:cb:63:b3:36:7b:
         06:46:1e:db:f8:54:f2:36:6c:07:a1:59:53:15:24:93:08:af:
         2d:c6:04:31:4f:45:f3:fe:37:55:53:64:bf:5f:d9:da:70:d0:
         ee:82:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:29:25 2025 by rpki-client