Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
File:                     pVDumUQoL8_DhLCCv_qI-G2wQXk.mft (raw, json)
Hash identifier:          UtCLDb2rxdxKO50Wc1a8JKKXNFZ2U5NyN/mEaowGFv4=
Subject key identifier:   7A:10:40:5A:CA:3A:82:55:14:63:29:FF:7E:B9:C8:52:A5:EC:F6:F3
Authority key identifier: A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79
Certificate issuer:       /CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
Manifest number:          0165
Signing time:             Sun 11 May 2025 02:54:38 +0000
Manifest this update:     Sun 11 May 2025 02:54:37 +0000
Manifest next update:     Sun 18 May 2025 02:54:37 +0000
Files and hashes:         1: pVDumUQoL8_DhLCCv_qI-G2wQXk.crl (hash: TzF2G/iuNTP7seAHUE/56pqo2DsHmQVvSA90bLixxxc=)
                          2: 935947E8234B11F0B6DF721FC4F9AE02.roa (hash: H5Ajktl0QcAUjjjN3KtJEIqSFF+VP9DSE9anvuAM0K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl
                          rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD5B5, serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
        Validity
            Not Before: May 11 02:54:37 2025 GMT
            Not After : May 18 02:54:37 2025 GMT
        Subject: CN=6820116e-a59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:bf:b5:81:39:a5:d9:31:84:23:30:53:08:
                    75:32:25:6b:0e:01:b1:d2:5e:46:22:b6:0b:80:91:
                    07:4d:64:ef:f3:b2:cd:cb:b9:5d:5f:02:8e:78:d0:
                    7d:8c:2d:9c:94:32:fa:ae:62:0c:d7:1a:68:bd:63:
                    aa:0c:fb:a1:be:09:6a:75:c1:bb:2d:2f:8e:93:5a:
                    ac:ac:8e:2c:dd:eb:f6:b5:33:bf:77:56:e3:a3:76:
                    b2:b8:65:b0:ec:bf:a4:fb:99:b5:63:9d:f8:06:fa:
                    fc:39:e3:6e:23:55:53:f6:46:6c:b5:cf:f7:28:d8:
                    d7:f5:a7:f2:ec:79:42:1f:fa:04:a9:d4:d1:35:28:
                    6e:9f:e7:72:5a:32:e4:ac:67:61:a2:87:51:35:f4:
                    e4:3b:04:7b:f8:58:20:08:c4:f7:91:08:f4:a9:d8:
                    de:df:cc:fc:72:f8:7c:36:af:6c:b8:89:d1:39:76:
                    57:49:ac:4e:16:00:97:40:c3:97:fe:66:91:68:75:
                    dc:b3:ca:7b:7e:b1:3f:5c:28:d7:88:d4:50:28:7b:
                    50:97:b8:71:3f:21:c5:04:2d:3c:57:f9:21:51:25:
                    72:3c:57:b4:78:72:92:40:75:f2:f2:54:9b:6e:af:
                    8a:5a:a3:14:6d:13:29:b1:9a:70:09:48:26:29:8d:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:10:40:5A:CA:3A:82:55:14:63:29:FF:7E:B9:C8:52:A5:EC:F6:F3
            X509v3 Authority Key Identifier:
                keyid:A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:33:79:c7:6f:2b:f2:6a:bf:94:b3:69:66:0b:6a:47:7b:0c:
         36:0c:af:65:dc:7b:55:51:32:d6:7a:45:83:6d:d6:34:cb:8c:
         8d:4e:81:43:e0:82:cd:90:61:a9:69:85:7a:45:26:0c:29:76:
         80:b6:c6:98:bf:25:a2:48:83:3d:51:50:04:cd:76:ae:49:10:
         e3:af:77:b0:01:59:c5:d6:6d:2f:53:93:90:1d:df:43:2b:09:
         6a:f3:e5:dc:73:0c:f4:47:8f:98:d1:5b:c9:99:d3:79:af:c3:
         c9:4e:4f:b0:89:a5:a9:ce:e4:9f:f3:ed:6a:54:9f:e6:84:bf:
         55:9a:2e:4a:0a:a3:c4:4b:39:a6:b0:bd:72:6b:0e:52:00:3b:
         9b:d0:f2:39:a6:c1:7e:08:39:57:e8:75:23:62:e5:7c:19:8d:
         25:e5:22:3d:c1:80:cb:f9:11:aa:05:0c:5e:b5:32:3a:ea:27:
         8f:7b:df:1f:6c:74:b6:6c:ed:6a:32:1e:c3:6f:97:d1:6e:d0:
         ce:7d:85:05:a2:4a:97:1c:03:c7:9e:ed:92:d8:9f:27:f3:e4:
         a2:4b:b4:97:69:b8:ca:e3:0f:f0:ff:e5:e0:01:be:b6:fc:ca:
         25:e3:62:3d:2f:7d:12:81:4f:cf:c3:c0:d1:75:18:c6:58:f6:
         40:c8:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:26:12 2025 by rpki-client