Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File:                     dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier:          Q9je7QyxZiBbL27DV3MZBfnd1segNI2zWRU3AO4qCG8=
Subject key identifier:   6A:94:FE:DB:69:44:69:C6:78:49:48:2E:6A:21:01:F8:5C:7B:B3:6E
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer:       /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial:       0343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number:          032A
Signing time:             Thu 15 May 2025 01:13:25 +0000
Manifest this update:     Thu 15 May 2025 01:13:25 +0000
Manifest next update:     Thu 22 May 2025 01:13:25 +0000
Files and hashes:         1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: qWql9EkQgI6oZ3+Srl0HtlLu8hEufjYvXdOjsxfPoWA=)
                          2: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: 6J/+qa4ndqIy2bgiH0rAtIyRGJ9+5Tg7hxefbddl5wU=)
                          3: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: z1jWyE7wTAG+vUUdvi1jzxdBdVQ+/IwxY3FhiW3xUxE=)
                          4: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: 4bJR1ae0CXmv08R9QhnGSRGtLcQpBgDCwnqDFh7A4l0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
                          rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 01:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
        Validity
            Not Before: May 15 01:13:25 2025 GMT
            Not After : May 22 01:13:25 2025 GMT
        Subject: CN=68253fb5-1002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:56:d8:b2:d8:21:d6:d3:0c:89:c3:13:d5:
                    bf:ca:da:26:56:95:75:46:5e:a6:52:7e:df:03:b3:
                    f9:e5:44:72:38:42:93:d2:73:16:b0:93:a1:53:e4:
                    1e:d9:97:64:99:b7:d3:d4:82:df:b5:ec:e6:e2:b9:
                    ce:13:31:7d:03:fc:be:15:19:83:ca:49:ea:5e:99:
                    c8:fa:2c:cc:40:de:f0:cf:61:56:f4:29:3e:c9:de:
                    0b:df:8a:db:89:24:cc:4b:b2:eb:f4:dc:d1:b7:7e:
                    d2:8a:65:3a:83:5b:35:13:ea:29:66:36:28:e3:00:
                    79:1e:bd:aa:4f:28:5d:e6:81:2c:73:95:0d:56:e3:
                    d8:97:e3:9b:b8:fa:18:7a:de:04:f0:c9:54:4e:54:
                    2b:05:d2:bd:e2:f8:ff:38:1b:6a:cf:d0:39:2e:59:
                    5f:0d:74:3b:ad:bf:60:17:c5:fd:31:59:af:1b:dd:
                    54:3a:5f:91:41:69:36:a6:6e:6a:0d:a3:5f:24:42:
                    9b:f7:10:ef:cf:18:0f:74:72:ea:bb:be:3f:ce:1f:
                    e6:34:00:df:6e:e9:f8:c9:00:51:29:2d:7d:b9:4a:
                    cd:6a:c9:1b:de:99:41:e6:f8:8b:e0:81:21:31:37:
                    56:69:85:98:19:de:bc:c2:3b:b5:a3:65:7a:38:fd:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:94:FE:DB:69:44:69:C6:78:49:48:2E:6A:21:01:F8:5C:7B:B3:6E
            X509v3 Authority Key Identifier:
                keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:95:53:b3:6b:cd:09:40:f0:28:41:53:58:f2:c4:ef:82:30:
         b4:e2:92:97:51:6f:0b:70:e6:f3:5e:cc:d3:57:ef:bb:27:69:
         5a:d4:9f:93:11:e0:15:84:7b:aa:53:5a:86:93:0e:87:72:33:
         13:40:29:5d:b7:d6:8c:70:d2:60:13:2b:74:a6:1f:8b:08:b0:
         b7:c4:5c:2d:79:1b:61:d9:20:b2:37:5c:9a:ce:61:f5:18:17:
         27:1e:51:b1:f1:50:37:2a:d4:ab:62:25:e8:95:65:16:1f:67:
         04:b0:e1:47:15:4e:37:5e:05:8d:49:10:1f:b1:dc:09:b1:9f:
         28:67:ad:16:d2:4a:9a:0f:4d:1e:50:9d:d7:f8:88:88:a0:65:
         c9:5b:46:76:83:ab:01:b8:a2:cf:b2:ed:62:d5:cd:88:c6:26:
         73:f6:f9:ca:73:89:b4:9b:f1:e8:4b:90:23:f2:26:d8:d2:ea:
         fb:f0:51:5c:63:06:d0:31:72:64:18:21:7c:65:a0:e5:49:86:
         89:f4:32:05:dc:40:09:22:7f:35:47:98:5f:d1:c4:90:15:7f:
         cc:af:fc:40:f2:73:3b:2d:2b:c2:dd:12:30:f8:6d:d7:7f:6b:
         f6:fa:2f:87:8b:ce:26:b0:23:30:e7:75:10:a3:f3:c0:69:02:
         be:5b:04:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:32:49 2025 by rpki-client