Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft
File:                     b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json)
Hash identifier:          X95OIjnuOlxAd/LpGltDusJSLOAnbRTYPlCBJaBAusQ=
Subject key identifier:   06:85:C5:4E:AD:B7:43:B2:31:46:58:CE:F8:32:9C:11:71:41:AE:A1
Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8
Certificate issuer:       /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8
Certificate serial:       04B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft
Manifest number:          04AC
Signing time:             Mon 12 May 2025 23:43:02 +0000
Manifest this update:     Mon 12 May 2025 23:43:01 +0000
Manifest next update:     Mon 19 May 2025 23:43:01 +0000
Files and hashes:         1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: U+9ukkoKX54BoOmwCQZPtYkufyBFKINx0sY8gsWfwsw=)
                          2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl
                          rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205 (0x4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8
        Validity
            Not Before: May 12 23:43:01 2025 GMT
            Not After : May 19 23:43:01 2025 GMT
        Subject: CN=68228785-2089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:14:fc:cf:97:58:24:2b:b5:df:6b:99:50:37:
                    d8:07:9c:c9:e8:b9:7a:3d:99:c4:23:92:c8:e2:bb:
                    65:18:8d:84:8d:2a:ec:45:bc:26:87:91:dc:19:ad:
                    b1:88:ce:b8:ee:c3:48:28:b8:fd:5e:42:58:19:af:
                    e8:98:13:f9:c3:6d:1a:ca:6e:3b:50:86:43:f9:8a:
                    85:af:e6:ff:5e:15:b5:77:88:8c:e1:3d:8c:64:36:
                    1d:07:bc:11:a8:8e:0c:ec:18:29:a7:bc:79:0d:79:
                    c0:53:c0:55:78:34:b4:ab:87:ba:f2:e6:6a:2a:41:
                    1d:62:7a:8a:d6:e2:09:c1:86:0c:5f:9d:e7:bd:2b:
                    d6:db:0e:2e:da:6a:b4:03:4c:79:07:80:a6:5b:ba:
                    3b:08:85:44:f4:27:7e:ca:0a:b7:ba:36:11:35:f1:
                    29:59:bb:9f:51:07:92:a0:78:33:19:6c:d9:03:d8:
                    91:9b:11:13:8d:5e:1a:9f:4a:c7:a4:05:63:8c:c6:
                    b9:d7:5e:4f:93:96:3d:f3:eb:39:df:09:56:89:81:
                    f8:3c:68:dd:6b:69:74:35:eb:5c:e3:5b:bf:35:25:
                    38:1a:e3:f6:25:1e:35:d5:d9:99:f4:c3:92:6d:c2:
                    cf:c8:86:9a:06:55:6b:81:93:50:1a:e5:2b:8f:54:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:85:C5:4E:AD:B7:43:B2:31:46:58:CE:F8:32:9C:11:71:41:AE:A1
            X509v3 Authority Key Identifier:
                keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:44:14:ad:03:53:31:f8:f9:65:18:1e:6d:1e:8b:f3:13:89:
         c7:54:79:33:95:9b:7c:8f:27:80:55:ae:ba:d6:8c:72:0c:0a:
         d9:85:dc:1f:2b:1b:75:54:d3:d2:fd:d1:16:17:4a:c9:e7:e7:
         09:f5:62:89:42:94:51:db:9f:d6:4f:3e:ec:6b:9f:3e:ee:4c:
         4e:a7:99:2d:7d:ab:c2:63:56:e4:4d:21:c6:15:2e:10:b6:28:
         30:96:c8:05:eb:e9:00:df:d3:ce:8f:b8:dc:9d:86:87:b6:d3:
         f5:d2:80:fa:ff:b3:17:06:d2:a5:eb:24:5f:41:64:e6:46:17:
         db:53:47:dc:aa:af:be:c5:66:b2:08:f4:99:1c:5b:3a:4d:8f:
         05:c9:1c:ba:01:2c:86:6e:45:53:0e:3f:a0:ed:90:46:4f:fe:
         7b:b4:0c:eb:d7:61:b5:d7:e5:34:73:0c:e9:49:31:b2:e7:71:
         81:84:dd:d1:c9:2c:cb:75:17:9f:84:2e:74:30:f7:c9:fb:4a:
         21:d4:4f:b2:84:52:76:7e:d9:3a:5f:a1:af:8b:01:79:b9:07:
         2e:d7:bd:07:bc:dc:85:7a:03:15:fc:4d:2e:e7:a6:62:0a:8a:
         dd:df:04:1c:28:d7:c4:bc:7c:69:aa:11:7e:40:e9:89:b4:4b:
         b3:58:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:35:53 2025 by rpki-client