Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File:                     Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier:          SR0jSBYLlin3SG0VdxaGjhR3QaGLW7UNb8vxX/S0ogY=
Subject key identifier:   92:CC:46:92:84:8E:93:2C:D6:E2:94:2D:8E:30:EC:69:82:2D:A2:20
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer:       /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial:       25D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number:          25C5
Signing time:             Fri 16 May 2025 15:56:41 +0000
Manifest this update:     Fri 16 May 2025 15:56:40 +0000
Manifest next update:     Fri 23 May 2025 15:56:40 +0000
Files and hashes:         1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: Yp3xUZS7XskCoq89TVE41WiqtdVZxaEwbMZogYpn8bk=)
                          2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=)
                          3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=)
                          4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 15:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9687 (0x25d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
        Validity
            Not Before: May 16 15:56:40 2025 GMT
            Not After : May 23 15:56:40 2025 GMT
        Subject: CN=68276039-5ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:0e:3b:af:1e:81:59:bf:64:a4:ac:f4:1b:
                    5a:e1:a4:35:a4:52:d9:f2:5d:ac:be:19:9e:df:98:
                    82:10:a8:2a:fb:5d:32:69:3b:c6:4d:0e:45:fc:7f:
                    db:0b:98:16:ca:0c:e8:45:c3:2b:70:68:bf:38:3b:
                    b6:d0:9a:04:90:b2:5b:15:c5:6c:50:eb:1c:fe:b1:
                    9a:86:f1:64:17:0a:60:6b:f3:92:0f:7f:83:3d:5c:
                    99:83:35:ba:46:69:b3:66:61:11:55:8a:e1:64:dd:
                    31:28:70:45:0b:53:c8:2b:f2:4b:0e:9f:41:fb:98:
                    26:8d:73:dc:15:64:53:de:2b:a0:41:69:95:f6:db:
                    e4:dc:20:bb:34:2e:98:49:33:2c:3f:48:9b:ea:ae:
                    2a:34:b7:be:e0:71:c2:17:7f:03:db:61:25:3a:c5:
                    69:67:b6:32:5a:57:d2:16:d9:2a:80:cc:b7:c9:ff:
                    fa:06:a7:85:02:0d:18:b9:28:99:94:15:e1:0c:07:
                    a5:f3:85:27:b1:ab:9b:72:e9:41:66:08:66:11:80:
                    c0:2b:d0:df:fb:96:02:03:b5:6f:fb:17:c7:80:df:
                    fd:a3:20:1f:fd:c1:23:7d:03:35:7b:67:1b:aa:a4:
                    b7:4c:fa:6d:d0:90:6b:9b:78:7a:48:02:b4:d9:af:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CC:46:92:84:8E:93:2C:D6:E2:94:2D:8E:30:EC:69:82:2D:A2:20
            X509v3 Authority Key Identifier:
                keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:6f:4b:d6:42:5c:27:24:c8:5a:79:6d:9d:c7:74:72:bc:61:
         d8:cb:57:b6:42:a8:2f:5e:5d:1c:43:76:08:72:c6:82:65:05:
         62:b4:d0:da:f1:2c:f8:a7:b6:7a:6a:34:92:1c:d4:3e:e4:2b:
         cb:8b:fe:24:2a:af:8c:a5:03:ed:4c:98:46:7f:77:97:8e:a6:
         6c:d5:55:3e:ac:4a:d5:5d:9d:66:e8:93:98:f5:23:dc:08:01:
         04:6e:6f:48:f1:52:29:3f:8d:cf:9d:42:f3:80:3c:08:d5:f1:
         0e:a3:27:12:54:40:2a:e8:1d:d1:6f:3a:1b:c3:bb:f8:58:3b:
         48:38:ab:72:43:76:2e:34:f6:d6:8a:c9:70:0f:9e:c9:18:93:
         47:35:28:c1:7c:98:ee:59:66:04:6f:d2:a3:11:34:3e:89:1e:
         c5:d4:94:5e:75:f0:d4:97:df:91:bc:5e:20:80:72:31:e3:f8:
         0a:1f:42:ae:bb:93:f6:0f:5b:1e:e5:f3:16:42:71:a4:ae:2b:
         ee:84:10:55:31:23:e6:29:a7:ce:be:9b:a4:e0:67:d3:85:bd:
         48:18:00:ef:1f:64:6c:d5:dd:01:26:84:34:35:23:0a:dc:10:
         b6:be:8f:75:39:47:d0:78:bc:42:ad:21:1a:8f:c8:19:ad:90:
         fb:ed:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 21:00:00 2025 by rpki-client