Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File:                     CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier:          DVo9Ije3VUKDCFwoozxBDFtFp0juKaw9D4/4/4S4HNg=
Subject key identifier:   CD:15:7E:BA:4A:71:AF:2E:DB:A1:63:75:71:C9:D1:29:48:9E:FE:5F
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer:       /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial:       0EFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number:          0EEE
Signing time:             Wed 14 May 2025 17:47:27 +0000
Manifest this update:     Wed 14 May 2025 17:47:27 +0000
Manifest next update:     Wed 21 May 2025 17:47:27 +0000
Files and hashes:         1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: 65B4snHdb66zFeSfXdC6vaIlPNJx+2UFzIaobHa8kSs=)
                          2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: v5g7cjNReibtump5AZbTVG2Okqg2HIeG+osQENS8uAY=)
                          3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: e0d6vw79IEqP0AdvR6b4v7RskAnTjUKydxlFYiex0pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
                          rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 17:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3835 (0xefb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
        Validity
            Not Before: May 14 17:47:27 2025 GMT
            Not After : May 21 17:47:27 2025 GMT
        Subject: CN=6824d72f-2038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:80:29:8c:2d:8f:9f:8d:c5:b7:8f:df:27:
                    5f:3d:98:be:19:21:3a:3c:ce:31:ba:4f:2f:62:97:
                    61:37:7a:d0:67:83:0f:8c:bf:f0:35:c0:89:5f:45:
                    d1:ab:84:4c:a2:50:c4:cb:42:1c:6f:8f:1d:f8:6d:
                    ba:40:3a:e5:f8:4b:f7:31:38:41:ab:ea:3d:11:98:
                    a3:4e:f4:91:97:12:f0:2c:4d:fd:b1:df:da:aa:15:
                    17:88:df:73:cf:2d:18:b6:d7:e8:32:a3:e9:83:a7:
                    6d:10:53:f7:cc:cb:e5:0d:f4:06:77:f0:6d:be:2f:
                    62:31:cc:88:a7:7a:93:ed:cf:21:ff:8b:e0:c7:6e:
                    31:76:c5:1c:60:7d:cd:3c:fc:89:8a:a8:24:d9:51:
                    b8:22:e3:7e:42:2e:6e:a8:e9:eb:63:62:19:48:55:
                    4f:0e:09:6d:79:27:31:4a:6a:21:90:42:b9:97:80:
                    08:9e:12:39:f4:af:c8:91:87:8b:d2:17:eb:de:d7:
                    3e:a2:f2:77:04:67:4e:dd:55:f1:3c:c6:53:2d:89:
                    19:74:27:a7:f0:4a:45:99:94:c5:be:a6:7c:17:1c:
                    d3:a3:55:cd:0d:87:b5:8c:5d:27:c9:06:5c:74:cf:
                    c9:46:02:5f:a6:d4:f8:cf:08:1b:83:4c:d4:8d:6b:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:7E:BA:4A:71:AF:2E:DB:A1:63:75:71:C9:D1:29:48:9E:FE:5F
            X509v3 Authority Key Identifier:
                keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:89:04:43:4b:89:b1:b9:db:db:68:20:fe:05:75:06:7c:
         92:35:42:e9:5c:b2:73:79:b3:2b:6b:d7:7c:13:c9:f0:5f:1b:
         cd:4b:b8:12:18:f4:fa:41:71:da:af:fb:5a:8d:1a:64:a9:79:
         7a:72:a8:74:b1:4a:89:d1:2e:f6:43:a1:6b:23:2e:4d:45:15:
         ad:fe:b5:cf:aa:2b:e2:53:40:7b:95:5a:8a:2b:6a:5d:af:ad:
         e2:a9:65:d2:c4:5b:60:6d:4a:90:64:f0:f0:c2:41:57:c2:dc:
         5d:42:53:df:e7:fe:a7:fd:50:60:8b:ab:d2:1a:78:a9:9f:45:
         c6:33:1f:f5:ca:9f:15:3e:48:bf:ec:1f:56:39:1f:6d:99:11:
         3b:d5:f7:62:88:f2:af:ee:5b:37:05:56:f3:27:d9:b8:ea:ec:
         37:4a:31:d7:3f:64:f0:59:1d:74:82:25:26:6e:35:ec:df:46:
         a6:b8:27:31:70:5e:6b:41:ea:4e:8c:05:11:9c:9c:dd:a2:55:
         47:19:19:bb:3c:18:ad:68:79:c4:c2:b7:2b:69:2e:51:04:b2:
         4c:b8:47:09:17:c1:9f:d0:de:51:99:f2:9b:c8:f5:a2:4b:ce:
         7e:cb:c9:c3:45:a0:8f:4c:89:80:ef:3a:17:ce:4e:5b:45:85:
         6e:c1:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:20:07 2025 by rpki-client