Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.mft (raw, json)
Hash identifier:          WRUr1FLc6X7SJ8sM9ECGPgT4EXc4wMrBlIQS0mgscAo=
Subject key identifier:   E2:B8:A2:B5:CB:5F:F9:13:B3:7D:0C:EB:04:AA:35:A9:0D:E5:5F:45
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       0679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
Manifest number:          066E
Signing time:             Mon 12 May 2025 22:08:22 +0000
Manifest this update:     Mon 12 May 2025 22:08:22 +0000
Manifest next update:     Mon 19 May 2025 22:08:22 +0000
Files and hashes:         1: sEu6HxjA5wgx81T3RV7hXTIpQbM.crl (hash: UsIuearUNdazt2uXesX6EblbIWiKTR9A8NeirNJqOCM=)
                          2: DA33C49E08E211ED8B10721AC4F9AE02.roa (hash: Rk/+lADA6gcgkQ0X84YplZfwCDuN0k5YWfT7OkmFseI=)
                          3: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (hash: qQOIJ0lcwqmCJOnDFoB5aMDri/0+odCLlhKVJ/uxcsQ=)
                          4: 710DB204831D11ECA37CC12EC4F9AE02.roa (hash: /OB040tMw9qyOdBlNACkUKZ8Xy3MrWKpNRv3p9KED/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
                          rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 22:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: May 12 22:08:22 2025 GMT
            Not After : May 19 22:08:22 2025 GMT
        Subject: CN=68227156-9a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:e2:16:0b:8c:66:e7:1a:bb:3d:ad:86:5f:
                    66:ba:8b:fc:5f:16:bd:62:e4:d8:01:77:3b:64:18:
                    8e:82:b9:d8:f7:38:69:88:ab:3f:c1:75:d8:fa:fe:
                    3e:e5:fe:0e:5d:e9:bd:5f:98:02:f6:b7:d2:e3:3b:
                    0a:9f:ba:6f:0a:c6:a1:bd:4b:11:ad:42:76:f7:51:
                    a0:83:e3:22:75:a9:c8:65:7e:57:5b:d6:06:8d:ed:
                    a6:c1:be:47:41:35:db:79:ad:e8:1c:a2:48:22:43:
                    8d:6f:55:d1:79:a2:64:c5:76:b6:cb:bc:b4:65:15:
                    fd:f2:45:9c:e3:54:cd:35:81:0b:3b:ee:12:ca:53:
                    78:d1:4f:c3:45:37:9e:da:02:9e:fd:79:cf:d7:e3:
                    f7:e5:44:25:7b:25:bc:a5:ee:cb:04:52:37:17:bb:
                    37:74:eb:f2:f5:9d:da:77:47:6b:1a:3b:bb:a9:07:
                    e0:ae:37:6f:d9:b5:9b:00:33:de:c7:70:98:ef:b4:
                    7a:d3:78:8a:aa:40:c4:06:bd:80:ec:98:4e:78:aa:
                    0e:af:41:8e:7d:23:5b:a0:95:1b:a8:a1:4c:b8:22:
                    de:53:83:00:e5:85:95:f6:13:5c:8d:1c:fe:a5:8e:
                    5a:b8:e8:bf:96:c5:00:10:ea:65:b0:d2:50:30:c1:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B8:A2:B5:CB:5F:F9:13:B3:7D:0C:EB:04:AA:35:A9:0D:E5:5F:45
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:e3:a6:94:2c:9c:26:f1:47:71:cd:87:5b:3a:00:d6:fd:
         14:ce:66:35:58:58:a9:d0:25:4c:f0:c7:dd:35:dd:14:95:db:
         5f:91:3a:47:fb:e3:85:dd:87:1d:5a:10:48:50:46:8f:e0:db:
         20:2a:0a:4c:97:16:f7:73:81:14:e9:20:6e:c4:05:fe:6d:17:
         b5:85:12:f0:5a:f4:1a:4a:31:90:31:1b:f9:bf:03:1c:c4:6c:
         6e:9c:76:8d:38:90:c3:ae:41:57:de:33:33:8a:05:39:c3:20:
         64:8e:18:76:aa:04:3d:1c:ae:27:52:47:90:04:f1:05:eb:05:
         06:b2:e4:80:5d:d2:6a:95:b9:3e:70:54:c9:2b:9e:86:f1:23:
         79:ff:7d:05:cc:ad:1c:f0:ee:3d:3a:7b:49:c4:fe:e8:4a:8b:
         81:16:02:ef:1e:09:7d:d4:27:df:7f:48:25:f4:aa:19:fc:34:
         b6:80:16:43:b2:5e:dc:85:c9:aa:e0:9b:60:00:ef:b9:e7:5d:
         93:93:a9:da:38:65:fe:3a:d2:4e:46:e9:c3:76:e5:6d:94:ae:
         fb:07:b8:02:e1:78:25:3b:df:a2:84:24:ad:73:d0:b8:ab:cd:
         57:0c:21:b2:dd:30:2f:fd:ef:ca:39:0b:d9:0f:b3:6e:f2:ac:
         bf:f4:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:37:10 2025 by rpki-client