Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
File:                     eameEjE6dnHw2VkHDVD_70tSVSU.mft (raw, json)
Hash identifier:          iA8ws/6WSy8d8JJ4+j/4u3wQRFDDotbg95nIaXH97mA=
Subject key identifier:   56:27:FF:97:9C:EA:64:BC:C5:69:53:82:76:E7:2B:D8:4D:90:46:0F
Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25
Certificate issuer:       /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
Manifest number:          B5
Signing time:             Sun 11 May 2025 04:45:38 +0000
Manifest this update:     Sun 11 May 2025 04:45:37 +0000
Manifest next update:     Sun 18 May 2025 04:45:37 +0000
Files and hashes:         1: eameEjE6dnHw2VkHDVD_70tSVSU.crl (hash: lVuH3uP9LGRMN9Br54O0ZkNtlgZRspjpC5ZOofHtuhs=)
                          2: 732ACDFA1C7D11EF95F4D214C4F9AE02.roa (hash: lDKMw2Uv+LSmUmslKOyptDJ98K3bb4g5+88hD0kPwgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl
                          rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3015, serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
        Validity
            Not Before: May 11 04:45:37 2025 GMT
            Not After : May 18 04:45:37 2025 GMT
        Subject: CN=68202b71-af08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:7b:d7:4c:49:39:a3:2c:31:ff:55:42:28:
                    c9:6c:e8:2e:6a:74:d7:74:38:6e:81:33:35:7c:4a:
                    d4:4e:68:d1:a4:7c:f5:e4:d4:5e:4f:ff:58:dd:16:
                    e7:5a:60:ac:a7:26:50:13:3f:5e:df:99:c2:40:62:
                    01:48:78:1a:5b:09:00:b9:e8:a0:89:c7:2e:76:22:
                    49:32:04:80:65:9f:df:9f:82:8f:a7:53:af:1e:75:
                    4d:b8:45:af:45:61:af:26:83:76:f9:ed:41:68:16:
                    c9:9e:86:ad:bd:57:5b:2f:b6:a6:69:d9:87:ec:b3:
                    8c:69:bb:c0:8e:8c:34:27:1d:7a:1e:86:99:f8:7e:
                    07:3b:23:c9:9e:df:78:6d:be:7c:1f:08:8d:4e:f5:
                    98:b9:58:d0:42:ec:64:40:06:9e:9c:ad:a0:f2:bc:
                    01:95:c7:fa:d1:73:21:b0:83:3e:73:d7:d5:0a:d1:
                    88:48:73:8e:2b:35:89:d8:7d:62:59:c6:a6:8e:dd:
                    48:c1:49:1a:dd:8f:67:6b:3d:a8:1a:11:48:5d:82:
                    9a:b2:6f:9d:0f:23:49:2a:29:4b:9f:17:86:a2:e2:
                    61:12:d7:38:5b:85:94:e3:6c:7c:f5:bb:5c:30:e1:
                    6c:a3:91:7f:9d:1c:f0:d2:e7:c9:71:15:a7:9b:bc:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:FF:97:9C:EA:64:BC:C5:69:53:82:76:E7:2B:D8:4D:90:46:0F
            X509v3 Authority Key Identifier:
                keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:43:f7:f5:bd:55:e7:e3:f2:d1:e1:60:5d:ef:e9:27:04:bd:
         26:a0:f0:de:11:79:98:7b:ce:75:61:e8:c2:08:56:67:88:30:
         c4:df:0a:fe:7e:8b:83:47:f4:52:96:a3:ce:57:14:a6:a4:49:
         52:5e:05:d4:d1:48:c2:fc:1b:6d:d5:0d:2c:1f:2c:02:a0:5d:
         63:c5:1b:64:dc:02:a4:52:27:01:7c:fa:49:b4:0c:77:ca:ba:
         9a:44:83:19:e5:ea:ec:8a:ea:55:9d:84:a3:c2:2e:af:9e:93:
         df:e4:11:aa:fa:74:b8:3a:62:9f:99:fa:82:53:85:6c:e1:a6:
         fc:23:67:d1:13:ef:72:f7:da:43:c1:60:28:3a:f8:10:1b:1a:
         9c:3c:1b:1e:8b:77:fa:d3:09:4a:ed:6f:e1:5c:31:6c:e0:7f:
         4a:4d:45:24:6e:25:f5:95:95:df:77:60:87:ef:a9:54:dc:43:
         93:0c:5d:e2:0b:5e:23:91:e8:78:0f:ec:a8:5a:03:35:ec:8e:
         1f:ac:28:96:50:87:9b:31:80:17:62:ca:1d:3e:01:05:73:7a:
         3c:ba:0b:e7:96:da:36:dc:31:ba:a5:5b:1b:e1:b6:98:f5:a0:
         78:70:45:60:97:b2:6f:7d:3a:f6:7b:57:95:a9:3a:78:8c:3c:
         37:c7:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:44:07 2025 by rpki-client