Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
File:                     cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json)
Hash identifier:          4R+B7VIIqGRLFIEnZqmsHSD1Z+7pvlDaCZaZOZy8FfQ=
Subject key identifier:   22:65:A7:08:77:BD:DD:28:74:9E:76:BA:02:C4:8F:1A:D4:AF:E1:AF
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Certificate issuer:       /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial:       07C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
Manifest number:          07B7
Signing time:             Sat 10 May 2025 20:49:28 +0000
Manifest this update:     Sat 10 May 2025 20:49:27 +0000
Manifest next update:     Sat 17 May 2025 20:49:27 +0000
Files and hashes:         1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: wOaPkjVMjy7u9s6BQmJ5vqv5CTbCD5cOw1YoYVSrJTc=)
                          2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: F2B6eTQtjw4DMTGhIIRc21e5xRW7fmJOpub38olCp9w=)
                          3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
                          rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
        Validity
            Not Before: May 10 20:49:27 2025 GMT
            Not After : May 17 20:49:27 2025 GMT
        Subject: CN=681fbbd8-e9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:aa:89:b6:4e:10:79:03:52:d6:dc:c4:8a:
                    43:5a:32:dd:d3:6d:d1:82:b3:b0:43:23:1b:38:4c:
                    fa:b6:02:8e:ef:55:1c:c1:e3:cc:09:ba:ac:e7:19:
                    0d:3d:b3:c2:ad:03:c7:61:c0:e5:cb:8f:cd:06:22:
                    31:dc:2f:4d:c1:e7:c0:ba:db:9f:e7:24:91:2e:fb:
                    a0:28:ec:86:1f:c4:92:a0:93:c0:85:07:27:c7:85:
                    ed:cd:d0:2e:80:9c:62:d2:53:b0:e2:6f:02:5d:b9:
                    df:b5:3c:4e:2f:06:49:4b:f5:a0:49:b7:bb:63:1d:
                    d0:9d:5a:90:82:ab:a6:c9:8d:3d:c4:08:37:fa:6c:
                    14:d5:51:27:86:cd:a8:cb:48:24:d5:69:67:49:77:
                    ea:b2:a6:6b:32:e2:e7:49:c1:0b:bb:e5:0e:d8:25:
                    fb:fd:fd:11:cc:60:13:f7:57:61:03:02:74:d3:37:
                    d3:78:00:6c:48:d4:18:a8:ed:4a:44:a3:ab:19:63:
                    ba:f9:51:a0:f0:cc:4e:9b:55:54:09:32:aa:f5:a6:
                    c8:5e:6a:f2:1b:54:43:ce:91:ac:a7:b6:b6:df:84:
                    e0:a7:2a:69:2c:9a:7f:48:7d:b5:97:d5:ae:f4:83:
                    ae:44:99:81:df:87:30:de:51:d5:08:ef:7c:fa:ee:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:A7:08:77:BD:DD:28:74:9E:76:BA:02:C4:8F:1A:D4:AF:E1:AF
            X509v3 Authority Key Identifier:
                keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:63:3a:98:bf:e6:e8:00:d6:21:fa:56:2f:92:4b:b3:0f:c0:
         fa:34:ff:b8:cd:33:9a:07:db:90:76:9a:e5:5d:c5:1f:77:e9:
         1f:28:29:ff:04:5d:41:60:17:8d:c5:38:ca:7e:3b:e5:c9:74:
         d6:bc:d2:99:b7:91:56:19:d4:17:51:53:64:d7:fa:73:34:53:
         c1:f3:9e:d1:26:3a:c7:62:d8:34:63:bc:1d:1b:0c:d2:d5:dc:
         1b:53:e2:d3:5d:ec:76:c6:e8:4b:b4:49:73:0f:05:9d:a7:2a:
         a5:18:73:d0:3d:f5:b4:8d:fb:c9:6c:f7:d6:e0:25:7c:73:94:
         f4:8c:c9:f6:31:57:03:d7:c3:b5:eb:9d:3a:f6:b8:34:bb:ac:
         9a:8f:ff:2b:c5:18:1b:ec:50:1c:b5:50:cd:a6:58:7c:c3:10:
         bd:31:27:ca:70:b9:25:7f:a8:03:07:7d:0d:bc:1a:d8:ad:6f:
         a5:8e:1d:f2:e8:9c:e3:9d:0a:62:73:36:40:6b:5e:54:de:1a:
         81:bb:ad:07:d8:af:37:08:81:13:65:3a:9e:9e:5c:68:90:e4:
         f6:a8:7a:40:9b:ec:23:66:c8:a6:4a:6f:70:88:b8:d8:b6:d2:
         17:51:1e:85:21:7d:73:bd:09:40:8b:1d:e6:dd:5e:d5:20:d0:
         a4:a1:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:35:59 2025 by rpki-client