Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
File:                     5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json)
Hash identifier:          wZf/hjsBq4CE9GIokNxX44FJq+ZaX+4esNNBpbIHaxg=
Subject key identifier:   5C:62:2A:CE:E2:30:F5:3C:0A:F2:9A:F0:45:40:15:B5:C5:68:07:B7
Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
Certificate issuer:       /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
Manifest number:          6E
Signing time:             Thu 15 May 2025 06:16:16 +0000
Manifest this update:     Thu 15 May 2025 06:16:15 +0000
Manifest next update:     Thu 22 May 2025 06:16:15 +0000
Files and hashes:         1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: IXKzpvyegMbfHYsVx5/XcuIDean+1JHsqPuYdYU6NU8=)
                          2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
        Validity
            Not Before: May 15 06:16:15 2025 GMT
            Not After : May 22 06:16:15 2025 GMT
        Subject: CN=682586af-2bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:9c:da:a6:38:c5:fb:08:7b:08:80:cc:8b:
                    3c:9f:58:96:74:78:71:53:50:16:17:f0:cc:23:fe:
                    20:9c:ac:b9:94:30:2b:c8:97:0f:7d:b5:46:d1:7d:
                    fc:ed:5d:ca:4b:5c:29:a4:4c:01:93:e4:97:2b:d7:
                    a5:66:e0:89:ef:f9:fc:5f:44:58:07:6a:8c:e4:9e:
                    8d:c8:f8:cd:40:20:35:d2:fd:e1:94:38:58:39:9e:
                    6f:ac:e5:7c:e1:e7:bb:43:6a:6e:e2:62:6c:c8:ac:
                    18:d8:ab:76:66:5d:41:0c:a7:14:23:45:8c:c6:7b:
                    fc:b0:a3:0c:99:80:01:1a:46:f5:30:89:4f:93:87:
                    f6:96:00:81:56:1e:88:b7:a4:a2:64:9d:90:1c:19:
                    c4:48:61:ab:ed:78:4e:5f:2a:b3:7c:92:c4:10:35:
                    75:06:c3:67:97:98:7b:a5:d0:58:0b:f2:b4:b2:df:
                    e4:33:5d:09:56:5b:57:5c:bf:a4:7f:8b:31:02:52:
                    bb:01:7c:a9:67:41:07:4d:88:0b:93:6c:6e:1c:9f:
                    34:7f:6b:83:ae:4a:e0:05:e2:37:7a:e8:a7:e9:dd:
                    19:27:23:03:df:5c:13:c0:42:4b:98:4a:fa:84:34:
                    59:04:22:22:08:af:78:bf:8e:fa:94:ce:dc:f1:6a:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:62:2A:CE:E2:30:F5:3C:0A:F2:9A:F0:45:40:15:B5:C5:68:07:B7
            X509v3 Authority Key Identifier:
                keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:37:3d:2d:8b:bf:46:61:31:03:c4:f8:32:19:bc:88:e1:2a:
         5e:0f:ba:6f:cc:72:0d:f2:5d:43:45:ec:88:69:00:a6:9f:b8:
         34:36:d4:58:6f:da:f5:9e:f4:35:14:ef:5c:94:01:5a:19:50:
         55:04:d3:7d:b1:61:8b:36:a9:00:04:4b:17:76:8a:40:58:5b:
         52:69:bd:85:40:e6:b6:fd:72:59:3a:8e:e6:17:9e:18:fc:f5:
         21:02:a1:27:3b:27:73:4d:0c:c4:e2:54:db:b9:07:a3:f9:59:
         f3:27:c5:e8:ef:8e:43:23:e0:55:b1:41:98:29:13:e6:73:a4:
         f5:a6:f0:96:74:e5:26:6f:db:32:30:0d:59:1f:77:45:dd:b8:
         91:58:9b:2a:27:85:ef:d6:70:a6:fe:a6:59:e3:9b:ed:8f:d1:
         aa:00:d5:02:29:37:44:a8:9f:a6:2a:e7:dc:b1:7a:35:86:f9:
         11:5a:7b:b1:aa:ba:8f:22:4b:35:91:ef:ed:7e:10:62:c8:50:
         7f:1c:cf:21:b8:14:3f:3e:91:ae:a8:e2:45:9b:8c:7f:c0:9a:
         cc:35:27:ff:73:c5:83:0d:f9:5b:6a:d6:8e:ef:b5:a5:bd:ea:
         39:20:65:47:08:d1:6d:97:7d:3f:32:35:e4:02:c0:fe:78:32:
         16:3d:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:02:52 2025 by rpki-client