Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          01ci+hUPdW00wleLtn8cRgXEGIKuw/tr7uUb5H8B2wY=
Subject key identifier:   40:BF:59:8F:9D:7E:42:94:5D:E5:A5:64:27:CD:40:AD:E8:1C:4A:F9
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          05F2
Signing time:             Wed 14 May 2025 22:58:08 +0000
Manifest this update:     Wed 14 May 2025 22:58:07 +0000
Manifest next update:     Wed 21 May 2025 22:58:07 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: XQ2eGNhCXyBmYaq0vDqcNGnux0m0yVniOPAZ6Aeuobs=)
                          2: 2496CA7E557E11EF8AC47D15C4F9AE02.roa (hash: Si88NstkAfEiBBnqBOs/DXYPITXuyjYlx7/3WbtXefA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: May 14 22:58:07 2025 GMT
            Not After : May 21 22:58:07 2025 GMT
        Subject: CN=68251fff-fb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:93:45:8d:db:da:ba:fc:d7:a4:81:58:0a:
                    8c:cd:5d:a2:83:38:54:6b:db:1c:e7:b2:88:7b:c9:
                    67:5e:cb:5f:6d:c6:a1:09:89:3b:18:8a:41:3d:46:
                    55:47:dc:5f:5b:b9:28:7f:9e:b2:7b:7e:79:e2:04:
                    50:10:da:3d:47:0c:9e:55:43:c0:d3:c6:96:65:ff:
                    65:00:2a:79:09:aa:2f:3c:e2:b0:e5:94:3d:e1:9c:
                    4f:75:80:1b:8e:08:a7:2a:89:94:5e:fe:70:4b:b4:
                    0f:49:dd:0a:2d:2b:80:6a:7c:cb:7c:22:87:36:6c:
                    d2:3b:8c:d0:48:be:75:72:4b:25:e4:96:c0:50:23:
                    33:93:3e:e8:8f:2a:37:cb:68:41:bf:29:40:f6:ca:
                    ec:02:31:cf:ff:2c:a7:31:03:5a:5e:da:db:2d:52:
                    32:cd:1b:b2:49:21:bf:d0:05:64:e1:60:3f:7e:57:
                    1b:4b:17:09:5b:5c:bd:33:d6:ab:bd:b2:3f:97:e9:
                    fd:98:7c:2b:8e:6f:3a:d6:19:36:1d:88:d7:59:83:
                    94:5e:b4:52:0e:24:3a:44:a2:9a:0e:7f:7c:6e:9e:
                    c9:e5:a9:67:93:6b:56:5a:f4:eb:8d:7c:79:44:97:
                    96:23:33:bd:56:11:1a:b3:e6:53:fe:35:0c:a0:cc:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BF:59:8F:9D:7E:42:94:5D:E5:A5:64:27:CD:40:AD:E8:1C:4A:F9
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7f:49:ca:cc:2b:0b:2e:8d:c9:ca:85:cb:11:e3:83:13:70:
         e6:e7:c8:28:8e:cf:18:cc:7c:03:52:94:d2:b1:01:eb:e8:55:
         cd:cd:ab:49:ef:4c:57:e8:c0:9b:8c:a2:2a:d9:bc:b7:c7:ab:
         70:82:0f:18:23:2d:86:92:25:5a:82:00:91:78:34:0e:6d:3e:
         3a:6e:1a:ca:43:9d:32:a3:83:22:05:f0:cd:ff:7f:1d:58:9a:
         9e:c3:5e:50:58:73:58:cf:a5:18:dc:98:03:5f:18:65:61:ea:
         c1:47:2c:d3:95:6a:91:28:ec:04:b9:87:cd:b2:08:16:08:98:
         0e:ff:57:11:ca:33:5c:82:a4:06:c0:76:76:dc:c2:4e:fa:8e:
         15:e6:06:4e:e3:2a:e8:88:b3:b5:fe:5a:83:42:75:c7:f3:3d:
         06:2e:8f:fc:0e:9f:c4:b0:d5:fb:c6:68:de:8f:27:bf:db:9e:
         57:c6:ec:2e:f2:30:e9:04:31:e8:90:4d:18:25:2b:e3:7e:6b:
         20:5a:fe:ca:26:3c:3d:f3:82:f1:9c:d1:b8:3a:dd:7a:9c:9a:
         75:91:f0:4e:12:06:0b:fc:bb:fa:e7:d4:8a:14:fc:07:cf:34:
         48:cc:ea:1f:bd:d6:97:5b:7f:37:9c:56:1b:4f:6c:1d:28:14:
         5e:fb:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:31:39 2025 by rpki-client