Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File:                     u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier:          6xuRVMJKrvy0Wcoq1v/VJ4FoiSXQt2/otoghKNCvLS4=
Subject key identifier:   4A:8E:76:0F:7F:04:D0:17:93:CF:FE:00:39:68:CA:82:C7:86:69:BE
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       0894
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number:          0880
Signing time:             Wed 14 May 2025 20:43:34 +0000
Manifest this update:     Wed 14 May 2025 20:43:33 +0000
Manifest next update:     Wed 21 May 2025 20:43:33 +0000
Files and hashes:         1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: lLTjgeq3GfcxczHg6sHTAtbondHikgmCzNoo6LfnXdo=)
                          2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
                          3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
                          4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 20:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: May 14 20:43:33 2025 GMT
            Not After : May 21 20:43:33 2025 GMT
        Subject: CN=68250075-7a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:25:f4:d7:2a:25:69:d7:ef:ba:8e:4c:18:
                    84:17:22:50:96:d7:84:89:5f:a6:82:7d:39:e8:54:
                    bd:24:aa:4d:d6:b6:be:f4:08:8e:ca:ee:38:49:3f:
                    04:a3:bc:df:82:d0:c4:22:df:ca:57:bd:e6:e7:1f:
                    eb:c9:8b:40:25:3c:3b:ba:d5:ec:3b:45:11:bd:0f:
                    40:4e:48:3b:94:39:a9:c5:71:29:6b:4c:72:98:4d:
                    75:a6:9b:de:ab:0a:f3:1a:a9:17:ae:63:6a:be:39:
                    76:ee:ef:b1:37:5f:d8:03:b9:ca:95:a9:f8:8a:e2:
                    72:30:fa:e7:a4:b1:44:cb:ef:f9:4e:7a:2b:fd:30:
                    1a:90:4c:27:5f:bd:42:5a:f9:48:63:8a:e7:cf:c4:
                    e5:6c:23:ad:b2:6c:5d:a8:bd:83:04:1c:bc:c4:ca:
                    01:b6:5a:04:f0:4b:21:ed:1f:7a:fe:99:2c:e9:67:
                    bf:ff:f8:48:8b:05:79:5a:e1:27:b3:df:3f:64:f8:
                    22:e5:35:38:ee:7d:cb:6f:25:45:1b:d0:93:2d:e1:
                    db:4f:e9:d1:ed:28:a6:56:3b:59:09:b7:d4:83:1e:
                    42:1a:2e:aa:fd:e4:6d:ba:81:0c:e0:f9:37:11:4c:
                    17:0c:88:d9:82:50:b6:bb:0a:e6:32:4a:36:5d:f9:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:76:0F:7F:04:D0:17:93:CF:FE:00:39:68:CA:82:C7:86:69:BE
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a9:b5:5f:59:a8:fe:67:bc:f8:31:42:2e:09:6c:bb:e2:3f:
         87:d0:49:f6:5a:b5:5b:fd:e0:94:a6:05:00:fd:f7:e5:11:43:
         60:4c:87:ae:ca:c8:a2:75:7b:6e:b5:78:cd:24:ea:c5:3e:4c:
         ed:11:c9:69:85:67:fa:b8:e8:60:c6:94:7a:5e:de:14:32:5c:
         db:a3:6d:c8:42:0f:ef:35:8d:7b:21:ee:a2:4d:95:f4:a5:fd:
         95:d6:7c:51:64:ab:8c:54:72:7e:41:56:f9:17:12:0a:e7:23:
         ad:af:39:46:ee:a4:a9:14:ba:58:16:4e:67:a1:c2:e0:1d:5d:
         38:b1:d1:8d:3d:de:97:de:77:9c:22:46:e9:5f:2e:62:c4:26:
         38:1c:3b:b3:f3:66:af:54:b9:fd:ef:3f:c2:45:a6:76:f2:bf:
         48:8e:86:45:aa:0d:ff:3e:89:a5:d8:75:ef:77:d8:16:55:e4:
         74:66:79:37:33:ec:82:0a:c2:34:33:e8:27:2c:53:a5:03:1a:
         74:a6:1b:9c:76:af:71:eb:a1:b8:5c:45:55:bf:bb:d6:b6:70:
         f1:0b:29:b3:0f:c8:40:b1:c6:c9:12:a0:da:76:8d:f9:1f:7c:
         e2:c6:72:66:ab:12:ab:82:ef:21:2b:8a:f7:17:ff:27:bb:76:
         75:13:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:36:28 2025 by rpki-client