Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          6AG4dILuQ6G0LdUr87Wbde2MUbVMGhFsp1LyTAmXQN4=
Subject key identifier:   F4:B1:88:16:EA:98:DD:99:33:33:3C:7B:28:15:F6:54:47:65:AD:6E
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       08DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          08CB
Signing time:             Mon 12 May 2025 20:17:40 +0000
Manifest this update:     Mon 12 May 2025 20:17:39 +0000
Manifest next update:     Mon 19 May 2025 20:17:39 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: kLrQ+QR7WWsezvHp5R3Hb9Euvds5o7rFm+UafAnFgEM=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: UfAX/Fj0JrJleqfsMcMBvDOpsY+oWvOczsjEMDPs474=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: NUYwvd8XbnzOJ3mNMJWywPbsBYEeOEcLsau7uMQ+orY=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: Ptv1d6l4zCzsDfAGIqW3ARxnruAqZbwm3s5WFQRyBpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 20:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: May 12 20:17:39 2025 GMT
            Not After : May 19 20:17:39 2025 GMT
        Subject: CN=68225764-162f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7b:04:f7:50:d4:4c:25:c9:07:6b:51:aa:1b:
                    df:f8:8f:d3:0c:f6:60:89:09:a8:a6:d7:ef:e2:d3:
                    9c:77:14:60:48:07:52:c9:ec:d1:74:98:aa:30:c9:
                    97:f1:80:0c:4b:57:9f:b3:2b:cb:2e:87:43:cf:5a:
                    69:b4:79:7a:bc:61:0f:e3:bf:e5:92:c5:9b:12:9c:
                    4b:ca:d5:8a:e0:23:5a:92:2d:63:84:07:66:0d:6e:
                    e2:1f:65:77:02:10:cb:df:3b:97:99:77:6e:96:b2:
                    98:a3:94:2c:19:3f:dd:c0:0e:28:ca:bd:3a:3c:a6:
                    28:f9:1c:9a:f1:1a:51:aa:2f:c6:ab:f3:13:c4:36:
                    74:b9:c8:7e:5a:6e:4a:0a:9b:5a:c8:1f:a7:4f:8a:
                    ce:ca:88:23:74:e9:73:f7:d8:95:1c:56:ac:df:00:
                    d9:d0:29:16:38:59:7d:f2:04:35:f1:45:dc:5e:66:
                    8a:e1:2e:a3:22:99:93:f1:2d:92:d9:bf:95:a3:76:
                    b7:c3:1d:82:78:a8:62:db:33:e1:bb:1d:15:d0:74:
                    c0:30:84:61:19:09:24:f8:b4:f7:73:2d:77:b8:9c:
                    a5:ea:52:07:06:77:c8:95:26:1b:a8:67:4c:3a:8c:
                    54:6f:9c:bf:fe:ac:ca:0e:11:c2:3c:aa:93:96:a8:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:88:16:EA:98:DD:99:33:33:3C:7B:28:15:F6:54:47:65:AD:6E
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:47:c2:44:4b:d5:d1:b7:0b:41:86:c2:66:37:70:0f:09:
         60:a6:6e:48:46:ad:46:41:ee:0f:70:cf:32:6a:64:7e:78:5e:
         b6:01:5e:58:e7:2d:4a:84:e7:a1:5b:72:91:32:17:c1:44:6f:
         12:2a:a6:eb:0f:72:ea:6d:2b:57:6b:b8:48:b3:a7:14:88:fe:
         c3:8f:f0:cc:5b:39:be:cf:02:e0:64:82:5b:12:4e:55:f0:54:
         21:6e:3c:ff:42:00:dc:7b:74:e6:da:2e:48:99:8c:fd:d1:ce:
         58:d1:53:13:e9:24:ae:5f:31:b1:bf:2b:35:eb:fe:54:b6:19:
         2d:73:72:ad:3d:2b:50:29:c3:ca:fd:d7:f5:f1:0c:15:39:a7:
         85:49:b8:06:e8:2b:c8:88:00:0a:95:fa:85:95:5c:0d:e6:a2:
         df:a7:85:10:74:c5:20:3f:b4:40:a5:e6:6b:91:1c:ad:10:3d:
         e8:56:a7:bc:34:28:7c:04:cb:c3:32:cc:48:a8:8e:78:5a:52:
         bc:d7:a5:4b:f7:dd:dc:91:59:53:68:cf:bb:d0:36:d9:c7:78:
         f7:28:b2:b0:c1:eb:a9:96:7e:b9:b5:39:52:2e:c9:79:8f:48:
         f2:f2:d5:13:4f:92:b6:ce:b1:f1:36:d3:7e:f3:86:09:d3:ee:
         2f:e7:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:41:07 2025 by rpki-client