Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          tgu2PcpFa4O0stgqEVxrRDWOMblKRRX5L4b/MzJr2xg=
Subject key identifier:   D9:CB:DB:57:4F:E3:96:1B:2E:53:80:D9:AF:87:E8:4F:8C:6D:50:E9
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       03A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          039D
Signing time:             Sat 17 May 2025 01:01:50 +0000
Manifest this update:     Sat 17 May 2025 01:01:49 +0000
Manifest next update:     Sat 24 May 2025 01:01:49 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: Mb/YunqGReE052InsZpBuCqPIoZgg7XwXDlvmq5+kN4=)
                          2: 728139D62FA311F0A9129814C4F9AE02.roa (hash: guIJtqQN+EFa/f6cWPw4iUlLONR7odnIq46PWDEQXBE=)
                          3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: Um+5nEX9UGWaeunNGOXHeeYETiEJM95laBvW70lUPDE=)
                          4: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: EglzY5P8gEG+IosP670+janTnu12u5QYgDoCSiDyeR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 01:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: May 17 01:01:49 2025 GMT
            Not After : May 24 01:01:49 2025 GMT
        Subject: CN=6827dffd-7990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e6:66:11:f4:7c:2a:57:31:94:5b:3c:29:2a:
                    97:a2:42:34:34:5d:ce:34:44:37:2f:0f:d8:84:56:
                    1d:db:b0:8f:d8:cf:98:41:de:be:69:77:89:e6:86:
                    bd:f7:21:23:65:dd:9d:e0:cd:b7:0c:56:9c:2f:64:
                    69:60:5a:07:ab:d7:8f:84:5a:03:44:4d:23:ba:94:
                    13:97:b9:8d:52:fd:1d:32:dd:d5:90:4c:74:84:4a:
                    6e:1b:15:45:11:c7:d5:ec:9c:ce:e4:a1:9f:84:fc:
                    83:7a:bb:7a:47:7a:0a:ef:37:56:07:52:8f:b7:61:
                    c3:9b:f5:17:35:9b:cb:0f:59:9d:c9:da:d1:09:97:
                    99:02:1c:59:12:61:a6:40:aa:87:6a:b1:22:8e:11:
                    48:b9:e7:fd:d9:d8:77:7c:7d:55:09:94:8e:2b:46:
                    b3:38:45:79:04:5f:dc:7f:c5:09:c2:7e:56:b0:b3:
                    55:4c:b8:79:ac:4f:57:94:6a:ef:b8:b0:aa:45:db:
                    6e:18:57:3c:90:fd:16:07:d8:67:0d:5c:64:ec:61:
                    21:f1:61:22:a0:43:57:72:d7:c2:85:f3:ff:3d:bb:
                    7a:5e:71:1b:fe:f0:76:65:c3:ff:30:9f:f2:f7:50:
                    7c:01:8d:49:74:6e:e6:fa:0a:81:80:73:73:90:14:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CB:DB:57:4F:E3:96:1B:2E:53:80:D9:AF:87:E8:4F:8C:6D:50:E9
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:90:c4:6d:f0:91:a8:b2:ce:ee:a6:b4:93:ba:38:d3:6a:
         e7:a6:f9:c4:7d:1d:db:1d:e1:4a:ee:83:65:93:89:83:1c:de:
         49:21:c0:60:38:dd:67:b9:ac:6d:0c:6e:9c:39:59:7a:d2:42:
         07:a5:a4:71:85:5b:49:64:55:63:4f:b6:a8:56:67:6b:37:b3:
         69:40:d6:34:74:7a:64:c2:7a:81:46:35:a4:e7:ac:72:46:e1:
         39:74:64:23:e7:b2:a9:fc:c8:84:df:2d:70:e5:c2:b3:a9:b2:
         f0:53:fe:5d:3c:6b:81:dc:41:ea:40:22:9e:be:17:b8:17:32:
         95:14:70:1a:95:0a:19:97:47:7c:b8:69:27:ac:33:40:6d:3f:
         e1:f8:cc:12:31:14:7f:a0:78:13:24:d6:f4:30:e8:73:72:f5:
         d2:2a:23:c1:82:96:54:0c:d7:e9:de:f2:00:44:59:98:4e:3d:
         dd:a9:c5:a7:e6:e4:e0:b9:61:54:e6:70:62:95:36:f9:ea:d9:
         40:50:97:90:db:8e:1f:c6:cf:2d:08:22:b3:2c:6f:d8:b2:15:
         68:a3:60:ed:4e:34:f0:5e:1a:1a:c8:63:d8:27:a7:5d:c6:2b:
         e3:7e:93:4f:95:1d:38:07:1d:b3:7e:fc:6b:56:17:b5:91:54:
         76:2c:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:55:02 2025 by rpki-client