Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File:                     v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier:          BytGN6i+3k8F+idqo12HCOpGvD7Ae4LP0g87bgoMXjA=
Subject key identifier:   3D:B2:49:1B:5A:1E:82:AC:27:AF:0D:C8:04:93:61:17:0D:25:F6:51
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer:       /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number:          3B
Signing time:             Sun 11 May 2025 06:23:47 +0000
Manifest this update:     Sun 11 May 2025 06:23:46 +0000
Manifest next update:     Sun 18 May 2025 06:23:46 +0000
Files and hashes:         1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: tn5mu8VepMhiOzWFV71j6JlDC3dtIRUF1U3FNJOk1tI=)
                          2: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU=)
                          3: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4=)
                          4: 685B8598EE5711EFB6D57660C4F9AE02.roa (hash: 2ByPgzEPC85mGN14iqcQMrmFSzyBoiAoV4LILjdSwYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
                          rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
        Validity
            Not Before: May 11 06:23:46 2025 GMT
            Not After : May 18 06:23:46 2025 GMT
        Subject: CN=68204273-4f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:8e:41:91:57:03:3e:c1:4a:a5:90:94:9d:
                    b9:ff:00:7d:6f:e5:e5:1d:93:2c:1b:e5:5a:48:c5:
                    42:0e:fb:f4:84:42:3e:8f:f3:b7:a4:af:2b:4b:e5:
                    ee:09:08:55:8a:6c:97:9a:ac:e9:46:ec:72:e6:f6:
                    07:b3:68:b1:ab:e3:c6:ce:3e:fc:00:f3:6d:8c:50:
                    41:83:92:6d:c8:62:04:59:34:3e:15:19:22:00:42:
                    90:94:52:cc:3d:91:fe:72:f4:c4:02:cb:5f:92:f9:
                    ef:28:e0:85:1d:63:45:42:53:4b:ea:26:95:24:c5:
                    8a:f3:c0:d9:81:d1:95:2a:27:38:44:58:95:36:35:
                    ff:90:bd:78:c0:b7:23:81:c9:4c:2a:64:a1:48:84:
                    ab:fb:df:ac:5b:b3:c1:b9:d9:d0:b0:30:a9:bc:1d:
                    a9:ac:26:e3:9a:6e:f1:f4:e3:c4:f7:2a:39:56:ef:
                    bb:10:44:a2:e4:cc:4f:03:3c:4b:50:ec:95:1a:27:
                    a3:6c:dd:50:9b:6b:d9:f1:50:dd:cf:2e:74:c2:48:
                    43:07:8b:eb:e6:0a:3d:11:d8:22:8b:0b:a5:14:b2:
                    1e:41:c4:2e:cf:e3:a3:08:57:35:d9:33:37:e9:26:
                    58:15:1c:bc:68:7d:02:c4:7e:2c:3b:50:a0:f7:74:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B2:49:1B:5A:1E:82:AC:27:AF:0D:C8:04:93:61:17:0D:25:F6:51
            X509v3 Authority Key Identifier:
                keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:de:e9:d5:f3:65:5b:20:ae:9b:e7:cb:64:e7:b2:22:c2:
         77:9e:12:f8:cb:86:af:d2:d2:a0:fe:15:ab:27:c1:1b:ab:0e:
         45:b0:82:d7:ed:0a:5c:68:a3:ee:f2:ab:eb:7d:ec:e9:8d:9b:
         d5:2c:c0:6d:74:96:15:24:d6:98:fb:e9:be:ea:e1:c2:62:85:
         3f:30:b4:11:24:30:ec:19:6f:41:bd:90:a0:c0:87:f2:51:48:
         d5:86:c3:42:1a:42:04:df:6b:f7:06:59:5d:6c:81:6c:b7:c0:
         6d:cd:a6:3d:f8:a2:d9:50:c8:5e:8f:86:ee:8e:5d:25:06:94:
         e4:73:a1:f3:4a:ad:33:97:7d:6f:77:76:24:c8:92:bc:ad:4a:
         c4:af:19:9b:b4:5b:d9:7a:e2:d8:16:7e:88:96:c7:a0:be:db:
         70:da:98:c3:b9:81:dd:10:79:3e:8f:8b:b8:91:fd:ff:fa:d5:
         a2:6f:9f:d9:da:7a:a6:41:9e:ee:8e:79:2a:62:15:b8:d0:b8:
         92:a9:1a:18:71:b2:2b:70:20:97:41:fa:9b:99:87:ac:5a:4c:
         5a:eb:bb:8c:8c:b4:ba:b6:90:99:b4:14:3f:28:91:4c:35:68:
         38:46:da:3c:e2:aa:a8:d2:00:d5:3f:4d:2d:37:8b:8d:a3:28:
         e8:ff:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:24:24 2025 by rpki-client