Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File:                     9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier:          q88FsPwElK9AuJwI+OJkRtvEg+M0QfrSJEgIhcXXKG4=
Subject key identifier:   E9:CC:2D:AF:83:C5:2C:57:71:36:E0:49:B9:8A:1B:94:DA:25:5F:11
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer:       /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number:          BF
Signing time:             Tue 13 May 2025 05:20:37 +0000
Manifest this update:     Tue 13 May 2025 05:20:36 +0000
Manifest next update:     Tue 20 May 2025 05:20:36 +0000
Files and hashes:         1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: 1u1//ePoN7aRFbd3FaBg+ZNZw9fMZZQZ69RSCqDtNp0=)
                          2: 4B30B710167811F09A533762C4F9AE02.roa (hash: fouY10udNgi8BWLYS4oVYjPJTA2tkNL+swT69GBRmDQ=)
                          3: 74954DE6166411F0910CF060C4F9AE02.roa (hash: PO5QUWCvO9COrbO02FVninFJEx0Vh1wCZfd0MomEzn0=)
                          4: 1BA4C14A2D3D11F08B0E527DC4F9AE02.roa (hash: UZMkogX1OQfXFH1RLwemrmJ9iexBHtIlOq8021BP/cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
                          rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
        Validity
            Not Before: May 13 05:20:36 2025 GMT
            Not After : May 20 05:20:36 2025 GMT
        Subject: CN=6822d6a4-c5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:3c:28:9c:34:20:14:81:b5:ca:95:de:a2:
                    55:d2:50:7c:89:b8:1e:87:70:86:69:e3:67:ba:d4:
                    21:61:1c:ae:f7:f8:de:ed:49:ef:88:30:1e:54:c1:
                    c5:00:5c:7d:60:26:be:7a:ed:47:e1:b3:b7:18:b2:
                    c1:f8:a5:16:0c:ed:da:44:aa:f1:91:94:d6:37:4e:
                    23:54:cd:3e:b1:ac:cf:fa:24:53:6c:c5:a4:83:b0:
                    8b:08:52:7b:83:75:6f:e3:5d:49:99:1d:98:fd:be:
                    05:a7:77:b8:92:80:36:a3:e0:b0:d3:d0:20:b4:f6:
                    b4:52:96:94:8d:ab:e4:a2:9e:1e:98:39:36:c2:c9:
                    10:bf:49:0a:3d:a3:59:ae:e4:f3:34:3a:fe:c8:e1:
                    53:cd:a4:42:92:b5:86:85:6e:16:b2:a4:6e:ae:52:
                    19:3b:e7:e6:da:4b:d0:7d:8f:e2:49:22:5f:4e:1d:
                    4f:ad:53:4e:96:dd:a2:a9:ea:6b:ac:ad:74:85:29:
                    0f:42:3b:b7:ef:87:4e:8a:fa:8a:54:f1:3f:1b:9d:
                    bf:bf:2b:23:72:01:54:49:04:85:df:03:84:d5:37:
                    2d:3a:d8:da:1a:fa:3c:83:18:0b:1b:c1:77:0c:4d:
                    b5:f9:78:4b:25:bb:81:3e:29:34:1e:b0:b0:26:55:
                    13:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CC:2D:AF:83:C5:2C:57:71:36:E0:49:B9:8A:1B:94:DA:25:5F:11
            X509v3 Authority Key Identifier:
                keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:19:68:dc:ce:37:25:a8:bf:d4:74:8f:10:2a:89:2e:0d:
         97:40:da:15:59:91:d3:6d:fc:f2:fa:10:02:ca:2f:79:e8:0a:
         5f:2b:64:d8:76:42:ac:b3:1f:f9:f0:e2:14:8f:72:33:a6:81:
         99:ee:9e:3e:ea:c2:aa:be:24:30:36:55:70:c7:7f:f8:7c:46:
         c0:26:74:d4:df:71:20:6d:a1:63:c2:bc:1b:80:38:a6:6c:15:
         cf:1e:c2:d7:8a:b3:f5:ef:65:81:f0:5c:11:86:f4:19:1a:37:
         1d:07:b3:4b:3d:86:f1:eb:1d:39:d4:c1:16:ef:51:0b:2f:81:
         00:2d:f6:ae:07:2b:b4:87:f9:ca:9d:63:c8:43:20:df:22:59:
         a5:17:13:64:7e:74:f6:ef:20:cc:95:33:29:3f:a8:78:2f:01:
         51:7a:92:47:7a:81:7b:29:3e:aa:8b:f0:59:c2:72:39:a8:03:
         a8:66:37:00:d4:8b:cd:cf:fa:f6:39:82:60:03:2c:7c:63:81:
         29:db:9f:ba:12:c5:06:95:aa:c8:06:b4:5e:27:2e:a0:93:3a:
         24:61:89:f9:b1:10:79:9a:f4:53:27:9d:81:fd:64:87:67:22:
         27:9c:be:b7:6c:d5:66:9b:3f:ce:f9:d9:55:69:b0:5d:6c:59:
         5e:27:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:38:10 2025 by rpki-client