Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          6NfxIsXNapYPcz6SPzzV0FxL0REMw0Xxdt7/rtzZHdo=
Subject key identifier:   AD:D0:51:27:04:FC:7F:36:75:82:33:76:3E:F9:C8:31:BF:61:2D:A7
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1959
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          193D
Signing time:             Mon 12 May 2025 16:21:43 +0000
Manifest this update:     Mon 12 May 2025 16:21:43 +0000
Manifest next update:     Mon 19 May 2025 16:21:43 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: b6gXdynBZCpAEQsuyRizpXn+nCtKiJEALZP3dd+CyrM=)
                          2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: VHhU4T6PraaYgh0OKYxnF9YbskELwSN55WdyN/nVdKY=)
                          3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: y3ghXyFRCacdpqDozL1dHnRn5VnIW5O8UMNzKQMsfws=)
                          4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: MvSNDQCHIjbtKn6qI3pyzYR56RR/J9dUO091dvxUIn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 16:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6489 (0x1959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: May 12 16:21:43 2025 GMT
            Not After : May 19 16:21:43 2025 GMT
        Subject: CN=68222017-6a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:95:ca:0e:33:e1:39:dd:31:71:21:ac:16:
                    af:b7:ef:93:80:66:ac:c2:6b:46:bd:4b:15:69:68:
                    91:46:eb:21:f1:86:9d:ed:9f:02:42:7e:84:5a:a5:
                    90:0e:d2:2a:17:a0:0e:98:3a:2f:86:23:38:77:d1:
                    28:55:c4:57:ea:a2:58:37:c5:04:d9:53:70:01:9a:
                    76:e9:05:83:c8:05:ed:74:a6:f8:84:ca:6d:5e:ab:
                    ad:80:48:81:14:7d:da:f9:eb:54:7b:25:68:4c:dd:
                    cf:dd:32:0b:b7:a2:0b:0b:0c:34:e8:80:b8:4d:18:
                    56:98:e8:04:f7:dd:68:c8:f2:62:29:e0:82:18:cf:
                    2a:7d:b7:52:50:bd:b3:b9:9b:4d:ac:90:c9:17:98:
                    f2:a3:67:d9:a0:81:f8:70:41:c8:81:f1:9e:b4:d2:
                    89:f4:af:5e:73:ce:21:24:d5:12:89:23:ae:47:37:
                    3b:c3:03:59:8f:be:6b:f7:b5:77:09:bf:be:a2:91:
                    2f:b8:ca:74:f3:9d:6d:a2:56:db:13:f4:d9:0e:8a:
                    b6:96:c3:d3:13:65:f4:3b:fb:31:9e:54:fb:9b:48:
                    d1:67:a9:50:7c:7b:c1:15:dc:bb:87:be:97:63:cf:
                    81:3f:6d:c8:bd:b3:48:b9:a2:f0:0f:a3:1d:48:36:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:51:27:04:FC:7F:36:75:82:33:76:3E:F9:C8:31:BF:61:2D:A7
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:38:39:b0:63:5e:91:31:a2:27:e1:f0:a8:83:62:85:42:c8:
         a5:1f:b4:ca:48:a2:46:29:c1:23:35:29:b7:3d:4c:09:02:e4:
         5f:04:4f:cf:02:33:44:1c:5e:7f:3f:94:79:6d:d9:57:13:2f:
         b2:fd:12:a8:dd:60:d4:a4:e9:80:42:08:7f:1d:14:c1:cf:28:
         6f:2f:a5:7f:32:a5:ad:cd:79:dd:74:c9:e6:95:0e:8a:9e:82:
         a1:19:29:15:fe:83:d7:09:4c:cf:1b:27:5b:1d:3a:f4:cc:8d:
         fe:96:2f:10:fa:9e:5a:0d:df:3b:0d:b3:b4:86:a4:f9:ad:87:
         22:f4:6f:d6:31:0e:ed:dd:d8:73:16:d3:a8:4c:0b:15:92:41:
         82:23:44:09:6f:fd:4a:d6:60:5e:23:8b:e2:5f:c5:8f:28:ad:
         41:78:14:9b:fa:16:b8:68:64:ab:ee:2a:ee:0b:d6:26:61:01:
         46:7f:30:35:81:6f:ba:47:89:a5:8f:00:12:73:3a:53:68:3d:
         a5:4a:01:a2:55:f2:9b:26:6e:f4:e5:5d:d0:e7:5a:7c:05:78:
         b2:5e:02:8d:b4:fb:fd:a4:48:13:41:69:e6:6e:f1:53:dd:12:
         81:bd:ab:91:95:df:1e:a8:2c:0e:3a:35:98:e4:ad:d6:03:06:
         4a:0d:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:48:26 2025 by rpki-client