Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          h1A1Tz7t8IWCs+dxX595ysXzkoSeEwjZn/p+o42ZzOU=
Subject key identifier:   5F:95:CB:9F:1D:15:8B:F1:44:94:DE:4D:8B:B7:C1:BD:19:EE:40:F0
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          0101
Signing time:             Thu 15 May 2025 04:27:12 +0000
Manifest this update:     Thu 15 May 2025 04:27:11 +0000
Manifest next update:     Thu 22 May 2025 04:27:11 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: ZG6u+IrExhDaXTNrrZ0Dj8T1OA3H80yaF+i9uaz3nEw=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: May 15 04:27:11 2025 GMT
            Not After : May 22 04:27:11 2025 GMT
        Subject: CN=68256d1f-8061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:9a:d6:76:f0:dd:e9:9e:05:be:24:02:3b:
                    7d:5e:a1:0f:fd:aa:69:88:3b:ee:c7:f9:e6:e2:37:
                    eb:59:fb:21:61:d4:03:c6:55:37:59:6e:c3:47:04:
                    9f:af:24:29:6f:a4:08:81:3b:0b:0c:09:ee:d4:ac:
                    fc:da:9e:54:62:a5:f2:59:68:bc:3b:de:5c:45:d1:
                    d3:80:49:65:af:17:67:0e:38:2a:72:f4:97:f5:85:
                    f8:19:ea:4c:b8:ab:58:83:b3:3d:69:e0:fd:6f:25:
                    27:30:a0:73:84:cd:63:ed:2c:4c:c9:cc:54:b3:fe:
                    e3:5a:b3:30:ee:ce:1e:94:1c:a0:96:09:f9:a6:ad:
                    6c:de:cd:26:15:d1:23:18:5f:fc:5f:8e:7e:2a:94:
                    6e:ce:0a:39:03:86:ef:95:17:00:73:75:ee:67:66:
                    e8:b4:0d:76:18:f5:c2:2b:c9:a8:32:3c:c3:88:36:
                    a9:1b:fc:58:78:b9:e5:25:b5:e2:b9:64:34:67:75:
                    37:0c:e0:fe:dd:8d:d5:cf:5b:9b:28:96:68:4c:da:
                    4a:68:37:f9:b8:eb:e4:fa:ee:b7:4e:a8:c7:ff:e3:
                    6a:0f:86:67:66:95:7b:67:c5:5c:48:e2:f3:df:ad:
                    2c:65:78:c7:53:8f:24:bf:ae:37:01:4e:59:dd:5d:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:CB:9F:1D:15:8B:F1:44:94:DE:4D:8B:B7:C1:BD:19:EE:40:F0
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:96:e5:06:6c:cc:09:e1:14:74:39:12:59:f8:59:39:0d:b8:
         91:c5:7a:06:0a:98:63:39:4e:72:c5:0f:60:5d:df:4e:ac:ca:
         00:3a:db:6e:80:7b:e3:bb:2c:63:f8:8d:e4:eb:5d:19:39:df:
         81:d3:5b:19:3e:2c:2c:23:67:27:7c:e5:9e:17:ba:be:30:09:
         63:16:32:81:72:0e:a3:0a:43:5f:5b:73:fc:38:8d:91:c0:36:
         39:e7:9e:32:2d:e1:55:2f:42:d2:c1:f6:46:d8:72:27:e1:94:
         34:4d:c7:38:ba:e5:01:09:b0:e3:61:a5:f1:d1:8f:9f:f3:a4:
         1e:1c:97:71:04:a9:49:7c:83:10:d9:ac:ed:6e:0f:9d:67:e0:
         d7:7b:97:dc:95:4a:07:b8:b5:dd:f3:95:ca:bd:b7:e2:a1:d0:
         f9:62:6d:45:70:34:4e:eb:24:a6:42:ae:1c:e5:a3:8f:81:9b:
         4b:7b:1b:89:0e:05:73:39:28:1e:64:89:8e:f2:e4:71:0b:dd:
         0c:c2:a7:db:e9:a6:d2:98:40:ce:ae:a4:a0:7f:9f:03:2f:72:
         3f:d2:3f:53:32:73:62:ed:f4:04:03:69:f3:24:05:f2:0f:42:
         3e:bb:b9:9f:a5:38:3c:ab:b8:c1:24:9b:1f:47:24:30:85:d8:
         ee:6f:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:43:03 2025 by rpki-client