Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
File:                     byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json)
Hash identifier:          DUWvynjeoUIBXFPcMwGUxuTWoT1vn72qEPLnGznE8ow=
Subject key identifier:   D8:1F:6F:D0:2C:AC:70:49:B9:62:15:33:4A:0E:34:63:E2:5F:E2:CE
Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C
Certificate issuer:       /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
Certificate serial:       0409
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
Manifest number:          03E9
Signing time:             Fri 09 May 2025 00:20:47 +0000
Manifest this update:     Fri 09 May 2025 00:20:46 +0000
Manifest next update:     Fri 16 May 2025 00:20:46 +0000
Files and hashes:         1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: eUOk5sm/4RCmha4ut8ZH24KtyKYvW2gLED7N4eLtRz0=)
                          2: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: hfhgYw3LQAm38USWum4YWAZ6gIly4M1LyEp15dh2XTA=)
                          3: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: 3MDrKz+RefMI5j73wYkUuNy3Oa/4hoC/hS0v0G3eEHg=)
                          4: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: DfRsMdJEDtch+C5Yk6n2+rHqExZkbfMsESmjI6z6r5c=)
                          5: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: GJiUmX3/HTWKDyD6ZSjgX6IZE0JTW/U81xlvCFIWxoU=)
                          6: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: D3Mr1RF7NLA+SlRnm9qkHlBkKJAhwvA5FpODqeYJRmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 00:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C
        Validity
            Not Before: May  9 00:20:46 2025 GMT
            Not After : May 16 00:20:46 2025 GMT
        Subject: CN=681d4a5e-ac73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:b7:3f:36:62:9e:74:e5:54:71:93:96:d6:
                    eb:be:56:9e:97:94:48:9a:ca:8b:64:7f:33:eb:58:
                    eb:17:73:15:1f:bf:85:46:3b:8b:90:85:d7:47:ff:
                    79:93:a1:ac:9f:f5:e7:2a:10:df:21:f8:ce:f6:3a:
                    81:55:75:f8:fa:92:00:b7:b9:9f:cc:ed:4a:a3:c2:
                    35:e5:ef:44:51:ec:15:e0:2b:71:c3:7d:d8:d7:07:
                    71:94:e4:41:62:48:fa:0a:45:8d:33:bf:eb:24:70:
                    ec:50:65:d9:5e:50:a7:4f:ee:2e:7c:fe:ad:28:55:
                    d7:9d:52:a4:b2:ca:45:57:05:1e:ea:7f:0e:41:8d:
                    42:56:f0:7f:cb:79:3b:c9:2d:ea:a1:29:ba:dd:e8:
                    cb:e9:f2:5a:55:67:90:1a:fc:ea:ac:4f:cf:b9:24:
                    0a:24:29:ec:b3:be:0f:62:b1:ae:6b:77:7f:d2:28:
                    a0:1e:80:2e:4f:20:c4:80:94:d8:cb:04:53:a1:6d:
                    f7:c4:87:7a:59:66:99:7a:6f:39:a0:3f:d1:52:e8:
                    f2:10:4e:d6:d7:c3:9c:6e:89:fe:46:f1:d2:5f:8e:
                    ee:44:ec:31:42:28:a7:ba:75:69:80:74:d2:35:23:
                    82:4f:d7:9c:b4:bd:0c:d7:86:34:5a:ba:78:c8:5f:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:6F:D0:2C:AC:70:49:B9:62:15:33:4A:0E:34:63:E2:5F:E2:CE
            X509v3 Authority Key Identifier:
                keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:9b:33:b4:94:cb:f8:b6:56:28:14:c4:7e:7a:1b:b1:83:
         ca:85:bd:3c:3e:1e:f2:bf:ce:fb:aa:14:b5:d8:bb:76:96:fd:
         d6:61:28:e8:f1:a1:c5:4f:d4:5b:f2:62:15:df:20:eb:0b:0c:
         1b:a1:26:ea:11:6d:a9:0f:02:b3:09:b4:5a:2e:e0:30:37:6a:
         4a:cd:64:24:c9:b6:c6:26:b6:2b:bf:fd:11:9a:3f:cd:83:60:
         cb:b1:04:f1:08:66:44:c4:12:54:c6:49:0c:e8:0d:4f:fb:77:
         b2:ad:dd:20:a6:a3:5a:77:96:d4:ca:56:b6:fb:5c:6d:7b:4b:
         e6:54:c4:b3:fa:97:ef:a0:f6:c6:ca:aa:8d:3b:1a:ea:4d:63:
         4d:96:01:0c:59:0c:c3:e4:e7:6e:aa:40:93:2c:b5:25:49:32:
         d1:91:f6:12:f8:bb:96:7f:b6:31:1a:f7:00:44:da:51:4e:9b:
         5f:1b:a7:db:42:d9:c5:93:2e:88:73:7c:9e:5b:69:50:7d:f4:
         34:e1:36:93:78:ea:c7:2a:10:72:bb:09:f2:8f:fe:b4:00:f4:
         e7:64:07:cc:53:fd:7a:2b:87:1f:5c:6b:8b:35:82:45:5d:af:
         e7:b1:ce:72:80:72:9a:47:46:35:35:25:28:49:f6:a7:92:63:
         16:c8:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:23:13 2025 by rpki-client