Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File:                     v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier:          AL1Sv5ocjQRGE9vcA/RiSwmLu1Af0hMs3PVyWpSDZsI=
Subject key identifier:   24:73:FE:AA:E2:94:7F:34:98:13:DE:9F:5E:9E:93:8E:B0:F1:75:79
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer:       /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number:          55
Signing time:             Thu 03 Jul 2025 07:34:57 +0000
Manifest this update:     Thu 03 Jul 2025 07:34:57 +0000
Manifest next update:     Thu 10 Jul 2025 07:34:57 +0000
Files and hashes:         1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: 7/OkQHe1PkWpQqRbPH6m4keLwiwPfx6QY2qNgxLbCqs=)
                          2: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU=)
                          3: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4=)
                          4: 685B8598EE5711EFB6D57660C4F9AE02.roa (hash: 2ByPgzEPC85mGN14iqcQMrmFSzyBoiAoV4LILjdSwYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
                          rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
        Validity
            Not Before: Jul  3 07:34:57 2025 GMT
            Not After : Jul 10 07:34:57 2025 GMT
        Subject: CN=686632a1-a4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:47:86:ea:65:18:7c:33:4d:5d:74:63:0e:
                    77:33:98:55:4a:e9:8c:4f:5b:fa:ba:98:2b:bb:5d:
                    13:82:a9:a1:ea:22:7f:c0:c3:f8:b6:44:9c:67:60:
                    dd:41:43:9a:ee:11:8a:e9:7a:38:61:76:bf:15:ba:
                    66:ca:cc:3d:81:66:0e:e5:8b:57:93:33:f1:6c:fe:
                    3a:6e:cd:15:fe:3b:f4:f2:5e:2e:bf:df:ed:63:d0:
                    bb:bd:26:98:da:31:7f:0f:d3:3d:56:36:68:7b:dc:
                    fd:94:b7:cc:33:f7:0d:bf:27:00:38:80:b3:e5:6d:
                    d1:af:67:51:77:5e:67:5c:c5:e3:d2:b2:1d:7c:74:
                    9c:19:f7:ac:0d:0b:70:e4:b9:d8:65:85:07:fe:e7:
                    2a:20:ed:ad:c7:cc:cc:0c:05:4a:8c:68:9b:fb:17:
                    8e:3f:28:de:03:8e:51:cf:cc:92:74:1d:91:bc:c6:
                    3b:52:71:d5:d2:40:24:d3:0a:15:9a:02:0a:66:37:
                    c5:50:0e:1e:01:88:bc:cd:87:fb:07:bc:7b:fb:ba:
                    0e:b0:a4:7c:f5:16:5c:40:7c:b5:af:f3:42:b6:1e:
                    cc:9f:6e:f9:02:ce:8b:6d:86:ef:72:ea:1a:e7:61:
                    4f:24:ae:fe:19:2f:46:d7:ac:b4:73:46:5f:e2:a3:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:FE:AA:E2:94:7F:34:98:13:DE:9F:5E:9E:93:8E:B0:F1:75:79
            X509v3 Authority Key Identifier:
                keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:56:98:fc:e7:68:38:07:52:ed:14:84:a8:17:52:d1:c7:
         84:60:0f:0d:a7:91:ed:55:f0:c0:e2:7a:77:62:9d:92:75:52:
         be:3f:81:69:83:d7:8d:93:94:75:fc:fe:50:0a:6d:a3:8b:04:
         09:a7:30:95:38:bb:4b:05:5c:c6:32:64:35:ec:62:ea:62:ec:
         4e:5a:84:cc:cc:66:47:1b:9e:cf:82:e0:1c:97:17:8c:f3:4c:
         67:a0:da:23:c9:4f:82:79:a5:fe:4c:5d:5e:79:88:d2:47:32:
         0e:35:93:3b:90:bf:5b:50:9b:85:38:f0:11:a3:dd:a0:fc:32:
         92:b3:f4:2e:da:ec:da:d7:36:41:47:05:d3:b5:9d:3a:35:c0:
         ef:d0:de:c6:3e:4b:c6:98:c9:b5:e3:a8:f3:33:32:a6:a3:83:
         22:88:3b:5c:02:38:df:0d:12:39:b9:68:e5:7a:e4:be:83:8f:
         83:5a:06:68:5e:24:1a:f1:f2:5c:84:4e:b8:21:6f:fd:c0:da:
         c2:ab:fc:67:c3:14:46:72:a4:a5:ef:b7:d5:c7:8c:21:c7:40:
         13:5c:9b:3c:d9:f2:74:18:1c:a0:55:5d:7f:4d:5e:12:a2:8e:
         4b:d1:35:62:5b:d9:72:79:5e:5e:5c:a3:d9:7a:e1:ac:30:fd:
         7b:f2:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:22:07 2025 by rpki-client