Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
File:                     gL6TDjBkmxKs7o3EC1dat93mSUU.mft (raw, json)
Hash identifier:          xoYgd5rZqfKGXXA77lBlCSZflI4EIFKUp26wxgCTMAw=
Subject key identifier:   CC:9B:20:D6:C0:27:95:B8:22:6A:FB:FD:DC:16:6A:87:7F:8C:27:3C
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Certificate issuer:       /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
Manifest number:          0137
Signing time:             Thu 15 May 2025 03:56:53 +0000
Manifest this update:     Thu 15 May 2025 03:56:52 +0000
Manifest next update:     Thu 22 May 2025 03:56:52 +0000
Files and hashes:         1: gL6TDjBkmxKs7o3EC1dat93mSUU.crl (hash: vBJdv/RekJ2gKAQMF7TvMNWElQF7Z8CvoWHSnuGSZnE=)
                          2: F43FF9A8AA7511EE9BF3CC35C4F9AE02.roa (hash: iIgu2YCDJNBMVFAfxHOYOBXqDgtqnG2sQcvAv4/N21A=)
                          3: F0FB94ACA95611EEA6E7DB7AC4F9AE02.roa (hash: MEW0G3vOg9trhSdFIvvfCuuUeDbhhXHLhPTz+oibzFY=)
                          4: 17A27C7E116211EF8FC7E061C4F9AE02.roa (hash: cztAbxO48iiXYnmlMNinP2Teys3bNMwe8+H32sjLLV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 03:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
        Validity
            Not Before: May 15 03:56:52 2025 GMT
            Not After : May 22 03:56:52 2025 GMT
        Subject: CN=68256605-8b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:c0:47:ab:1a:80:eb:8c:41:98:c4:aa:2e:
                    58:7b:51:fc:4b:8f:68:a1:e5:ab:1d:2a:7c:b4:13:
                    46:03:52:88:93:8a:e1:d4:30:25:a3:88:96:3d:ce:
                    37:d1:eb:f6:4b:c5:58:70:e8:e6:86:9f:16:41:2f:
                    e2:01:bf:7e:76:28:47:f5:37:5e:02:45:41:da:86:
                    cd:9c:cc:ee:98:b1:74:a5:3c:44:2e:08:2d:27:5d:
                    e7:7c:cf:cd:fd:e8:74:a7:3c:7e:ec:77:03:b9:be:
                    85:7b:6d:2d:a5:45:0b:67:41:d7:28:71:bc:73:4a:
                    7a:e1:fb:d0:90:4d:29:9a:46:1e:2d:e6:d4:ab:54:
                    ab:6d:5f:dd:81:59:54:ac:41:ee:70:03:7d:77:ea:
                    7f:90:35:80:cd:f1:7a:06:69:82:6f:9a:63:fc:47:
                    d0:58:91:05:d0:7e:c4:b9:12:41:03:f2:ca:9d:cb:
                    69:24:e1:2b:c3:67:04:6a:96:18:7e:63:7f:77:c2:
                    aa:b1:51:fd:61:45:f8:0f:93:ca:31:dc:02:f8:91:
                    91:09:b0:cc:76:53:33:25:3a:75:53:32:d0:71:62:
                    a1:34:6d:2e:ae:7b:ed:39:48:cf:7d:b5:39:7a:8e:
                    33:81:41:98:c4:db:91:34:3c:3e:67:21:7c:fa:5e:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9B:20:D6:C0:27:95:B8:22:6A:FB:FD:DC:16:6A:87:7F:8C:27:3C
            X509v3 Authority Key Identifier:
                keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:f5:7f:3f:61:8b:28:10:d7:78:29:6a:41:87:85:ca:e1:
         ba:d3:d7:ce:c2:6b:5f:36:c3:6e:7e:e6:c1:82:96:23:85:eb:
         3f:ea:cf:01:85:ba:26:1d:d6:27:d4:a6:71:6a:6d:66:6e:85:
         0f:2f:6e:da:2f:f6:d1:85:69:c8:6a:13:c6:01:af:04:19:17:
         52:b0:f0:0a:86:25:1f:f1:5f:84:43:40:18:86:00:b5:b9:75:
         79:01:a1:ae:99:0f:9b:77:33:f1:18:98:da:46:43:40:6f:46:
         b4:d7:1c:a9:4f:03:92:8e:35:6b:1b:2e:bd:e7:a6:f6:e0:4a:
         5b:3e:d7:02:22:2d:3d:f9:48:c1:24:d5:68:b5:a8:39:21:d3:
         9e:55:ca:6b:90:05:a9:b3:5d:e7:80:f7:c1:67:aa:6d:82:f4:
         ee:53:e3:09:d5:90:48:1c:39:69:ba:f9:d0:b3:5a:dc:fc:3a:
         b0:4f:6c:89:e4:56:ca:ba:bf:61:13:51:0c:df:6c:7a:b8:0c:
         2a:77:6f:56:4a:2f:95:fa:38:e8:04:d0:0e:dd:1d:bf:52:cd:
         80:72:25:38:7c:b7:b9:cf:35:5b:23:1d:ec:a0:27:4c:81:06:
         35:11:8d:89:87:bf:bf:09:58:12:1d:24:34:b8:71:2d:0d:de:
         a2:78:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:35:55 2025 by rpki-client