Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
File:                     Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json)
Hash identifier:          ZJyw/JwnWEsKOfcmM9Rtz3ciZhFuiZRCuM6pdZfYxhk=
Subject key identifier:   BA:92:CD:43:BC:5C:53:65:13:31:F8:8E:78:71:8B:81:75:84:2E:9D
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Certificate issuer:       /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
Manifest number:          0734
Signing time:             Sat 10 May 2025 21:25:54 +0000
Manifest this update:     Sat 10 May 2025 21:25:53 +0000
Manifest next update:     Sat 17 May 2025 21:25:53 +0000
Files and hashes:         1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: b+7bVDMaWEBxQcfT2qm0vkO5zSjp+ByQqNvppMXxC24=)
                          2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A679F, serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
        Validity
            Not Before: May 10 21:25:53 2025 GMT
            Not After : May 17 21:25:53 2025 GMT
        Subject: CN=681fc461-a5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:9e:58:86:f5:4a:85:17:8e:fd:0c:7b:4e:
                    0c:40:e5:fb:24:2a:ef:96:71:31:93:5c:2b:ce:9d:
                    fe:f5:36:a3:67:8b:7d:10:c0:db:cd:24:6b:16:85:
                    14:d9:d0:ff:fb:c0:d3:aa:9e:23:2b:d6:5d:2f:ab:
                    fe:6c:55:2c:73:4d:8e:fc:de:f5:45:c1:c3:1d:1c:
                    e2:3a:08:35:62:92:cc:d9:2b:21:45:9c:ac:77:a7:
                    83:c2:f3:a5:00:9c:f6:d8:0c:b7:06:9c:47:00:29:
                    18:12:84:0e:df:a3:06:a2:5e:c1:ad:12:3f:8c:f7:
                    ed:a1:7c:52:c2:48:1f:97:93:3d:85:37:42:b8:b4:
                    25:99:70:8e:1b:cb:04:71:2c:8b:77:7d:24:66:88:
                    1c:f3:28:a2:77:7f:5d:b7:68:53:0f:3e:e0:4f:db:
                    5b:49:a4:75:27:95:c2:39:10:62:f6:39:7e:8f:94:
                    cf:e8:9f:f8:bd:0a:5a:6d:db:0c:a3:33:f6:0d:3b:
                    f2:58:76:49:f4:4f:f0:40:20:ad:15:f2:0f:74:8a:
                    58:ff:bd:43:0e:2f:31:3c:02:93:80:06:05:dc:6f:
                    51:c3:49:9b:3f:08:b4:a0:45:23:83:c6:45:d0:6d:
                    0b:f2:fc:d9:7c:24:c0:cf:8a:af:a0:56:72:b7:39:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:92:CD:43:BC:5C:53:65:13:31:F8:8E:78:71:8B:81:75:84:2E:9D
            X509v3 Authority Key Identifier:
                keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:55:90:3f:de:98:99:62:f5:4f:a7:34:0d:b3:01:ff:3b:2d:
         86:96:f0:22:25:60:8d:4b:9b:73:c5:2f:3f:a3:75:28:5b:a4:
         85:b8:b1:7c:27:05:6a:ba:43:5d:18:1a:72:0b:46:34:6d:95:
         ac:4c:f4:8a:70:14:ee:1e:f9:aa:4d:0a:0f:f1:ad:be:87:d7:
         98:2f:76:e9:ce:23:60:15:c0:fd:8c:1f:85:11:79:aa:76:97:
         f8:03:3f:81:90:88:a4:d1:46:4e:6f:33:00:5c:bd:03:76:d3:
         92:99:9b:1e:5b:8d:c8:ba:ac:3c:9c:c6:90:f8:7f:94:06:20:
         da:64:49:cc:45:23:b7:f7:ae:d3:ba:4c:ac:7c:85:5e:b8:17:
         79:0a:f8:a7:02:1c:21:15:76:6a:62:db:e3:ee:dd:07:b9:9e:
         e7:5e:49:82:b1:cc:b5:76:99:53:23:85:5a:d1:3b:dc:bf:53:
         71:53:41:84:31:fc:55:9f:d9:fe:24:bb:c3:8f:49:04:53:dc:
         02:9c:7e:83:c3:9b:48:4a:01:50:09:07:fb:2a:77:a8:62:0b:
         cc:fd:19:f7:ba:5b:9e:03:37:00:17:41:9f:bb:8f:be:b9:4c:
         21:89:bd:77:e9:18:f8:8b:3c:a8:84:9b:27:48:c0:26:00:95:
         98:8f:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:25:35 2025 by rpki-client