Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File:                     Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier:          Z53qmgecRde7XlzWb7xJcIVgLjWpQdWPe3FE45vvDd8=
Subject key identifier:   F1:67:86:E8:F2:BB:59:36:6C:02:F7:01:A9:1D:9D:35:AC:44:4E:DF
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       05CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number:          05BB
Signing time:             Wed 14 May 2025 23:12:19 +0000
Manifest this update:     Wed 14 May 2025 23:12:18 +0000
Manifest next update:     Wed 21 May 2025 23:12:18 +0000
Files and hashes:         1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: tdrIRTZxNNzztvU3jtr5aKfeHoJKQ+JCEz59HTy4nn8=)
                          2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=)
                          3: 0DD6AB9CA4F011EC96AF7B65C4F9AE02.roa (hash: /5KvjYunF83kIcMiJK5ao0UnFWTIm9b33GuRAVT7yXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 23:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: May 14 23:12:18 2025 GMT
            Not After : May 21 23:12:18 2025 GMT
        Subject: CN=68252352-ec6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f6:eb:58:57:9d:d6:18:cd:4b:04:3e:ab:41:
                    65:39:1c:ea:53:86:1c:19:9c:ec:b1:0d:79:61:7e:
                    b7:71:75:00:86:12:a2:b1:c3:1b:e7:65:61:41:a0:
                    0c:43:08:13:cd:2b:70:eb:44:87:b4:24:d1:88:db:
                    c5:3c:5e:20:f3:49:fd:c2:8b:dc:a2:3a:03:13:b2:
                    40:98:02:58:7f:30:a7:0a:19:95:b7:3e:c4:4d:e8:
                    3b:db:e4:5d:68:6d:ca:a1:40:2b:84:64:d6:68:86:
                    e6:c4:9f:71:6e:a7:93:76:53:10:ee:60:72:44:85:
                    90:97:f8:c3:5c:45:cc:81:5e:9f:42:6b:dc:e7:d3:
                    39:e9:0e:aa:ce:96:8d:2b:28:a4:69:53:c6:b4:15:
                    62:81:47:94:08:2f:57:f0:1f:a1:f0:b9:b9:b7:cf:
                    3b:53:95:49:b9:e7:40:0d:d6:97:85:53:a7:a5:38:
                    59:04:ac:b1:02:ca:d8:60:79:50:2d:87:15:e0:f6:
                    27:b9:74:13:aa:50:c4:d9:de:64:45:e9:98:4d:55:
                    35:e2:2d:26:24:47:c0:3c:b9:5f:43:3c:12:b2:f8:
                    1c:05:b8:77:4e:be:05:98:e0:2a:77:83:ad:0a:9f:
                    c4:73:fd:73:10:2c:69:3a:43:19:12:63:e6:1a:d1:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:86:E8:F2:BB:59:36:6C:02:F7:01:A9:1D:9D:35:AC:44:4E:DF
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:02:f0:e7:87:51:0d:c9:8c:e7:ff:82:8c:4b:ca:1d:c5:
         3f:20:6f:89:44:e0:47:5f:33:6b:4b:9e:1b:a4:88:1f:5b:59:
         b5:c6:07:69:d3:9d:63:e1:1f:5d:43:06:58:01:fa:de:13:68:
         25:3c:c0:44:5c:b4:ee:c8:fb:77:a1:f5:4c:c9:91:7c:ca:3d:
         4c:1f:1c:85:3e:ae:20:bc:6e:a8:46:48:4b:40:eb:0e:83:78:
         73:65:78:87:61:6a:5a:f3:d3:bf:cd:ae:c7:eb:63:09:06:0a:
         26:18:37:49:35:8e:13:92:8b:69:28:65:6a:7a:68:42:04:dd:
         83:db:57:b9:4c:59:d5:40:5f:93:d0:64:36:16:fb:bf:40:57:
         19:54:a6:6f:09:7c:2d:49:de:a1:02:5d:39:77:d2:49:b4:63:
         5d:94:8d:d8:aa:ca:2d:6b:ca:e9:88:2e:da:b8:b1:cd:fe:26:
         f1:6d:76:e3:a3:db:90:7c:dc:10:e6:37:22:02:87:44:95:d8:
         d6:82:81:74:f2:46:7c:cb:45:f6:41:f1:e2:1b:b9:70:31:d3:
         11:f2:fa:d1:37:e8:ec:ff:f7:ef:8c:6f:46:b7:ec:d8:d1:fa:
         9e:4d:34:37:33:4c:c7:2f:ed:bf:73:d8:f9:ec:b5:88:be:47:
         34:c8:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:45:04 2025 by rpki-client