Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          Brpe54h8xItQBp8jCNzVaA3A5XzlTj/FJuWF1lQcgjk=
Subject key identifier:   49:DA:53:E3:F2:2F:65:4E:B1:FC:69:46:05:02:E1:21:0B:D2:33:F5
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0B4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0B42
Signing time:             Wed 14 May 2025 19:16:48 +0000
Manifest this update:     Wed 14 May 2025 19:16:47 +0000
Manifest next update:     Wed 21 May 2025 19:16:47 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: uUETURfjWRQBQcZnYKVBgJ2lzTLb0K2CLsna58G+Y0s=)
                          2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: It+EzOgB+4GwVpz41BOeTUKf/RikBUyvJSCbvGF22zE=)
                          3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: m2mZEmy+jYi2Exf5MsZvNb+d8UP/lXqWFf7D/THaytE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2894 (0xb4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: May 14 19:16:47 2025 GMT
            Not After : May 21 19:16:47 2025 GMT
        Subject: CN=6824ec20-863a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:76:c3:f6:a0:ca:4f:20:de:90:28:37:05:
                    b1:cc:98:1d:14:15:6e:ba:7b:6c:eb:25:5b:13:3b:
                    29:74:c8:2b:82:0a:fd:dd:08:2a:91:d5:37:aa:83:
                    29:c3:23:0c:51:2e:5f:8f:9d:26:b8:f2:98:7a:49:
                    4a:2c:91:1d:3c:e9:14:6e:3a:1f:cb:07:1c:ac:dd:
                    f8:db:49:4d:b8:5e:21:5c:57:42:9a:32:40:79:5c:
                    0b:50:b1:95:8f:12:f5:ea:32:52:f2:1d:6b:96:e2:
                    8f:5c:67:57:5a:6b:7a:07:9b:34:be:59:e0:9a:61:
                    d2:a9:d9:fb:f9:1c:1d:79:71:93:18:fc:96:6f:10:
                    f9:97:6f:84:b0:95:19:ad:da:2e:90:c9:4d:2e:55:
                    07:96:2a:2b:26:79:5a:cd:c5:79:cd:b0:0e:21:6a:
                    91:e8:39:c3:1a:ff:69:4a:0e:93:4b:fb:16:ab:de:
                    61:e1:4a:c0:91:18:28:59:06:42:d9:77:5e:8d:6b:
                    37:6d:ec:e8:a2:e2:b4:30:46:0d:81:41:b9:1f:e3:
                    fe:1b:71:e6:ea:d8:4f:5a:0e:c2:7c:af:56:9b:60:
                    c7:16:c4:9d:91:69:6a:61:61:f8:5b:cb:e0:c3:42:
                    84:47:61:93:c0:6b:a5:48:ee:01:e6:2e:09:e0:db:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DA:53:E3:F2:2F:65:4E:B1:FC:69:46:05:02:E1:21:0B:D2:33:F5
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:13:00:e0:24:d7:ef:62:86:51:1d:e1:ee:b6:98:0a:dc:90:
         27:6d:11:09:ef:3d:17:fb:0c:b4:79:30:36:e7:c5:e4:50:0d:
         20:67:29:d2:69:1a:a0:c9:88:3a:98:e3:ca:26:32:b9:37:3f:
         db:24:cd:c2:b5:27:70:35:a3:64:e4:24:e9:9a:1c:ca:10:76:
         af:09:8c:6a:12:ec:7b:88:8f:64:10:c0:df:ba:39:95:a7:bb:
         d9:88:9b:02:83:6e:dc:a8:59:b2:28:79:13:ca:1f:6b:d8:f4:
         ee:cb:91:ae:e2:74:a8:05:cd:75:20:74:eb:bf:95:d4:49:c3:
         7d:ea:8a:58:d5:c1:ab:69:59:de:99:27:15:e8:89:8e:27:b2:
         47:d8:c5:43:b5:23:bb:af:55:36:2c:78:dd:40:c8:32:12:ac:
         21:a3:b7:48:80:ea:42:d1:9d:46:5a:1f:53:93:0f:e4:43:b9:
         67:e4:71:47:1b:67:5b:fa:13:1c:79:1c:ba:14:64:5a:62:15:
         5f:3f:84:d8:fa:05:87:f6:72:55:99:ba:7b:e2:4d:fd:dc:3e:
         92:73:13:3e:a6:e1:4b:e2:ed:86:79:c0:fd:28:bd:08:95:2e:
         b3:b8:ab:7c:09:9b:ba:6f:a3:fc:d9:6b:b9:29:54:29:a6:1c:
         1f:82:1c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:14:43 2025 by rpki-client