Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
File:                     n9LoZrHrgid6tvVi_jLgg1mzAWU.mft (raw, json)
Hash identifier:          0tIDtOAyxKqasvHVh6/TUNrKPUSA3DKC6ZOPMtS8Kto=
Subject key identifier:   F9:06:E1:5E:CE:57:05:A8:DE:D3:81:31:E8:93:7D:0F:D0:F5:FA:76
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
Manifest number:          066E
Signing time:             Thu 08 May 2025 22:16:26 +0000
Manifest this update:     Thu 08 May 2025 22:16:25 +0000
Manifest next update:     Thu 15 May 2025 22:16:25 +0000
Files and hashes:         1: n9LoZrHrgid6tvVi_jLgg1mzAWU.crl (hash: rCwmr//z1hcyHVGeTmkrb6RAWa/8WrZ/CHurBgzvHrI=)
                          2: BF351C380A2111EEA26EAE0EC4F9AE02.roa (hash: oGuqbCREFm9ZWSmRoFzBXwWMbym/4RjEQVLDxXxyOlo=)
                          3: 6C42C95C0A0411EE9FEEAB44C4F9AE02.roa (hash: 2EoXxsF3YeIcHrteSRJc8SmsPXHgCaJXfP147EXJ8V8=)
                          4: 6D39AFB00A0411EE9FEEAB44C4F9AE02.roa (hash: mK4z59iph2yMURpRXdd3+cDRQXC8EuVVACLhc5J4EWo=)
                          5: 3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa (hash: sivEYBO7PXdxBzs49Sa2/GKGpQYDM3gFjYXpi1+OrJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 22:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E, serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: May  8 22:16:25 2025 GMT
            Not After : May 15 22:16:25 2025 GMT
        Subject: CN=681d2d3a-307f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5a:e2:bb:6f:2e:e7:35:64:8a:7e:61:a8:15:
                    34:ac:f0:89:63:bd:19:8c:f9:f9:01:10:1d:ef:9e:
                    21:ba:72:d7:53:cf:dd:82:0d:22:28:18:18:c0:7c:
                    c4:f1:22:c0:44:46:1b:37:49:24:e3:1d:26:1a:6a:
                    2c:f2:43:08:9a:7f:00:0f:98:09:b8:58:ca:7c:28:
                    0c:39:87:72:18:8a:8e:92:dc:82:f2:77:e7:d2:bb:
                    57:7a:c1:8f:1b:34:8b:07:ca:5a:b5:38:00:81:4f:
                    e8:7f:da:19:e2:86:07:f5:54:38:8f:03:f4:60:a5:
                    33:c2:14:3d:38:32:51:26:d5:01:10:ac:4b:36:60:
                    e4:68:64:d3:32:da:21:3e:dd:68:bc:00:ab:46:d5:
                    8a:0b:30:bb:75:b4:17:14:83:90:1a:09:31:3e:00:
                    98:47:d6:90:cb:ad:2a:62:98:33:12:c4:0f:bd:91:
                    ff:7b:c5:14:c8:11:9c:da:27:0f:9d:eb:3f:c8:84:
                    84:fd:67:16:56:7b:bb:1a:36:df:c6:f3:84:5b:a7:
                    2c:c1:bf:2c:1b:63:5f:60:7f:f6:1d:60:96:97:c8:
                    62:82:a9:5a:de:a8:ef:fb:ff:df:2a:32:9e:9a:56:
                    77:bb:bb:af:25:a1:f1:61:d0:12:04:67:2d:4b:42:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:E1:5E:CE:57:05:A8:DE:D3:81:31:E8:93:7D:0F:D0:F5:FA:76
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:4b:f2:fb:2b:bd:9c:16:ef:9c:a2:24:46:ed:b0:09:01:
         7a:8c:ef:eb:88:85:bb:06:2e:50:d8:7a:38:08:d5:27:4f:93:
         32:c2:bf:0a:46:bb:55:56:03:0e:84:49:45:b4:68:9c:4c:0a:
         2c:68:8d:7a:9e:b7:9a:6e:9f:af:84:d8:73:f7:a1:74:ff:29:
         2a:d4:90:bb:f5:cb:28:df:f4:a5:95:28:c8:ed:c8:e8:45:cc:
         97:71:51:98:40:1c:aa:2b:89:f2:9a:52:a9:73:39:9e:8e:25:
         6c:d4:5d:1a:ba:30:ea:95:10:0a:e2:3a:98:a0:5e:07:1e:5b:
         3e:ea:3a:d2:ba:18:55:09:6f:22:08:70:93:3e:ca:f3:09:ca:
         36:96:42:19:f3:21:db:8c:72:5d:51:a2:67:8d:d4:b3:bc:fe:
         01:db:ed:f1:c0:c5:0f:60:d5:f9:52:3e:dc:32:c7:de:6e:1d:
         e3:6d:5e:40:c5:7b:d5:59:8f:d7:62:a7:65:bf:3d:91:64:bb:
         07:c8:89:5e:4f:65:0a:9b:0e:90:6b:3a:99:5c:79:11:f4:97:
         3e:e3:ad:5a:3b:34:2b:96:a6:1c:f6:6b:4d:94:f0:1c:a9:30:
         19:77:b3:19:d6:f2:5d:36:8c:e1:6e:ca:72:75:a5:ec:95:1b:
         f5:15:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:08:50 2025 by rpki-client