Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File:                     vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier:          kpemGIewtuL5u05zH26DE60cnqaYoiQnM/izA5fksE8=
Subject key identifier:   39:B3:15:6F:40:29:EF:FB:41:A4:07:8D:50:57:32:FC:2F:6C:04:CC
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer:       /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number:          CF
Signing time:             Sun 11 May 2025 04:39:35 +0000
Manifest this update:     Sun 11 May 2025 04:39:35 +0000
Manifest next update:     Sun 18 May 2025 04:39:35 +0000
Files and hashes:         1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: df6fvvbdCGY8vZPmfb5X+NIdaH9zMyCwxT8hClEN6ew=)
                          2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: nV0vvomgUuYAvIzu+zUsDjepnjclen17WArrRDCOOcE=)
                          3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: 8Rz14qqnLJzTDtmQhY87UU9ZmhRFExlX0EXdINFDVKA=)
                          4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: pMueZdZNVsSO9dkMJ6HNJEYyNaRswTRPg4jNaq1x/N8=)
                          5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: kU3sDSAugxDvj2jONja3ZA3jP5BMAHMZw6R2ums+q7s=)
                          6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: Oc+7IC+W0+Xbte63+cuJ+plpWgmKJWGeEg9BO4bYTrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
                          rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
        Validity
            Not Before: May 11 04:39:35 2025 GMT
            Not After : May 18 04:39:35 2025 GMT
        Subject: CN=68202a07-a0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:e0:3e:14:1b:80:63:95:7a:06:dc:39:8d:
                    ae:61:9d:05:89:fe:92:2e:0b:de:3f:90:66:d3:1c:
                    70:e7:fe:25:64:e8:4c:f2:66:51:f8:76:c0:dc:92:
                    4f:e2:cb:ab:95:13:50:65:22:39:6f:a9:bc:66:98:
                    59:b7:e2:67:fc:2e:e2:69:21:d4:18:70:0f:e9:48:
                    9b:d3:04:72:70:d4:b7:72:f7:a3:7d:6d:7a:f4:5d:
                    72:96:57:1e:0a:54:bd:da:35:27:34:8c:a1:34:5d:
                    57:60:b9:cb:d7:0a:1f:cd:21:2d:80:f5:e2:40:94:
                    b9:a4:75:ef:76:cc:a2:df:5e:61:d0:b0:a3:f7:97:
                    b3:1f:48:a6:c6:ad:39:71:a6:5a:e1:fd:66:8e:a2:
                    90:2e:a0:3f:93:f6:67:57:8d:2e:55:1f:c7:45:d5:
                    3b:6c:2d:6f:ff:d3:c4:9e:46:23:ad:0f:8c:3c:56:
                    45:fd:54:19:4c:93:15:32:57:06:96:52:e6:d1:e4:
                    24:7d:76:db:41:0e:93:d3:85:4b:3c:d6:8c:47:9b:
                    8d:15:3e:1e:3d:ad:bd:71:42:32:0e:23:9b:2e:71:
                    53:8c:74:88:ea:8e:6b:22:37:72:e4:18:2d:ea:2a:
                    dd:38:18:3d:4a:d6:92:10:80:01:47:9a:43:60:fc:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B3:15:6F:40:29:EF:FB:41:A4:07:8D:50:57:32:FC:2F:6C:04:CC
            X509v3 Authority Key Identifier:
                keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:64:80:95:94:94:7d:22:e8:b5:51:e7:dd:af:df:a9:02:
         67:4b:29:e6:0e:e4:5f:cc:9a:aa:38:09:b8:2f:3d:84:0f:fe:
         7c:d5:e3:df:51:41:da:a1:43:a4:3a:4a:87:be:18:e1:48:5f:
         10:cf:31:33:47:ca:f5:f4:c8:69:89:e5:71:76:f0:86:55:29:
         6b:8a:57:96:db:da:42:a3:2f:b9:fb:d1:d5:28:91:50:bc:1e:
         f8:c1:5a:03:b0:a3:4d:09:88:b1:4d:01:a6:60:8e:d5:bb:9b:
         7a:fe:5c:65:54:f8:2e:e2:07:38:77:c4:87:a3:b6:55:5b:98:
         e8:22:c9:89:fb:5c:fe:d4:25:9f:55:78:de:ea:03:b7:e7:ce:
         85:20:f9:91:00:18:69:90:02:25:a4:c7:70:fd:eb:3c:fd:cb:
         49:58:b6:19:23:41:a8:bc:36:a8:23:9a:50:21:d3:07:1e:90:
         3a:d2:ef:9f:ca:ef:ff:6a:8e:97:54:ae:9c:e1:b6:4f:51:d7:
         41:dd:e6:13:f7:19:b2:5d:7e:77:de:a4:cb:5b:08:50:fa:c9:
         e4:12:8d:38:9a:d6:d1:54:85:4e:c2:5b:b3:06:cb:e7:7b:6a:
         3e:7a:f5:a9:72:3f:de:a4:0e:6e:cc:a3:2d:d7:0e:ce:e4:88:
         0d:bd:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:34:08 2025 by rpki-client