Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          HjGJ6ffYndIVB3bnQ63H/cVBQ1AoLfi11UdB9k7jsa8=
Subject key identifier:   94:76:77:FD:1A:FB:78:11:8F:B5:64:15:8F:F9:6C:6E:05:F1:C4:20
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       0724
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          0719
Signing time:             Wed 14 May 2025 21:54:58 +0000
Manifest this update:     Wed 14 May 2025 21:54:57 +0000
Manifest next update:     Wed 21 May 2025 21:54:57 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: 5GTBxBANIeF/56qlwGcjMRMU8AfpOzAPCHYoFqeYTCE=)
                          2: FA93793637C011EB97405947C4F9AE02.roa (hash: mkvl6eYOBUcYWRwYiBwVS0K1wVeK5CC5TdYufIA/AfQ=)
                          3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 1+jxf6thWYfAYYLkfgmBPO3HMtuISkV6ufCHk+IUOxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: May 14 21:54:57 2025 GMT
            Not After : May 21 21:54:57 2025 GMT
        Subject: CN=68251132-6abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:e8:19:06:69:08:9f:4e:40:3f:c6:8b:37:
                    24:87:71:02:62:47:02:3e:d0:8a:68:37:6a:6e:34:
                    34:06:42:72:7c:71:a0:48:cc:6a:7d:bc:ab:98:b5:
                    af:54:dd:f4:6e:10:16:1d:44:89:fa:cc:4c:10:5b:
                    da:da:e5:f5:dc:de:68:2b:47:8f:00:79:2b:91:f6:
                    56:bc:08:ee:be:9f:fa:70:7a:51:ba:94:94:b2:b5:
                    09:6e:74:88:7b:73:68:05:f1:12:f7:d0:e5:cc:4d:
                    09:dd:fb:65:f2:60:4d:94:f4:5b:59:45:a7:d6:7a:
                    d8:94:0e:ad:ab:7e:21:21:d8:57:7a:b3:5f:44:23:
                    28:d2:ae:3c:df:29:4d:00:60:dc:a2:5d:0f:db:a7:
                    d8:c4:a5:0e:e1:4b:f5:6a:84:b6:3d:9d:4a:17:2f:
                    0c:2b:c9:e5:c0:c6:cf:23:9a:eb:3b:9b:eb:68:94:
                    dc:62:ff:d6:57:fe:16:61:e7:d9:c7:25:0c:60:d7:
                    96:c4:bb:dc:e7:24:3c:89:4b:06:4f:1b:a9:41:05:
                    00:31:ec:9e:84:85:ab:e9:d3:14:58:51:93:9d:3d:
                    8b:23:2c:ed:51:c9:d3:67:cc:54:f7:1f:68:55:20:
                    78:91:be:ad:64:1f:91:84:ed:ec:b5:bf:71:17:81:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:76:77:FD:1A:FB:78:11:8F:B5:64:15:8F:F9:6C:6E:05:F1:C4:20
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:18:37:5e:de:f9:36:c2:ae:55:32:c4:e6:24:85:15:d1:bc:
         61:d7:d8:15:62:98:cb:95:f7:31:4a:a2:11:0c:d3:40:b2:99:
         6f:e5:39:5e:aa:f8:33:40:96:64:5b:49:3e:ec:61:6a:9f:be:
         7d:e2:e1:b4:5e:fc:a4:98:06:d9:ff:89:6a:38:6c:a2:8c:d6:
         e1:b8:7f:45:68:48:db:15:e0:e5:56:ae:7a:1c:22:82:30:97:
         14:8b:f4:b9:e9:0e:ae:b5:cc:68:16:a6:52:cf:cb:ab:0c:4b:
         51:0b:6c:a4:db:fd:75:f0:6b:43:fe:d3:14:3d:f7:47:bc:e8:
         b8:6c:b2:ca:de:6f:1b:ed:56:9c:50:30:0b:04:d4:88:3a:c7:
         fe:4d:e2:3d:82:f1:f4:eb:a9:9c:fa:e7:4e:14:91:a3:74:3e:
         dd:6f:13:74:8d:45:ae:91:e6:d1:5a:05:c3:f9:7b:f3:65:6c:
         00:62:34:23:bd:a9:0a:15:09:29:49:5e:6a:01:d1:ae:99:19:
         e8:05:9d:e2:fd:35:f9:03:0d:bd:5d:bd:28:ec:ee:48:12:6f:
         d5:84:05:fa:18:3e:1d:96:13:4b:dd:af:45:c1:f1:59:15:06:
         e1:6a:7f:51:80:af:f5:b5:3f:9c:75:75:00:d8:42:69:1b:8e:
         76:bf:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:17:59 2025 by rpki-client