Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File:                     Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier:          ksECe7gh/0vB3jOncNL2FWQxxAf2rouk+0MdDnRk1T0=
Subject key identifier:   9F:6D:AB:4F:77:5C:EF:59:96:04:7B:09:47:1A:44:94:0C:AA:90:AE
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer:       /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number:          0551
Signing time:             Wed 14 May 2025 23:28:59 +0000
Manifest this update:     Wed 14 May 2025 23:28:59 +0000
Manifest next update:     Wed 21 May 2025 23:28:59 +0000
Files and hashes:         1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: Xd65wbguu3ZoZjb281ieDXSMLJQpF8W5HmHENG0QgwA=)
                          2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: efdLoq6zZv0F6RR1ze+KA4UrdZ3dfGQdbaEk/qTBX+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 23:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
        Validity
            Not Before: May 14 23:28:59 2025 GMT
            Not After : May 21 23:28:59 2025 GMT
        Subject: CN=6825273b-2f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:63:e3:73:fc:95:fd:85:e2:0f:b9:3d:8f:
                    7e:5f:24:b2:55:a7:b3:8a:da:36:00:84:09:4f:67:
                    be:85:32:fd:d4:60:a2:09:33:73:ed:a4:1a:e8:1d:
                    2c:7c:58:00:4f:11:ea:de:8c:84:3d:d4:32:a2:33:
                    af:05:55:51:ac:df:8c:2e:09:33:60:05:7b:0b:09:
                    30:d7:6d:63:95:a0:c1:8d:3c:73:49:3d:12:7a:82:
                    22:27:7b:01:1e:35:f6:f6:1c:68:51:a9:ba:f5:9e:
                    c1:e9:d2:94:95:29:2c:95:9e:4d:5c:db:8e:3f:a8:
                    5a:11:d5:c9:45:48:29:72:51:2b:9d:30:fd:fd:aa:
                    65:87:98:7e:06:cf:11:73:d6:79:1f:1c:b1:9b:9d:
                    8b:37:55:92:85:16:0d:b4:0f:d1:a5:4c:1e:c9:ba:
                    7a:d6:86:65:06:af:82:bf:ed:0f:39:4d:df:cf:58:
                    5d:2b:ea:b8:46:43:87:f9:47:39:a4:65:e1:90:3d:
                    a2:10:6e:42:d9:36:09:66:0c:f0:a7:97:04:26:51:
                    af:4e:ff:e0:8f:e2:22:6e:4c:d7:5e:b9:76:d7:12:
                    e6:c5:04:4f:25:7a:69:5e:7f:b2:37:1f:f2:8e:74:
                    7b:aa:d7:4a:14:70:82:55:fa:7e:25:59:91:16:86:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:AB:4F:77:5C:EF:59:96:04:7B:09:47:1A:44:94:0C:AA:90:AE
            X509v3 Authority Key Identifier:
                keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ae:a1:a3:e8:14:93:10:b0:57:b5:ee:09:32:28:99:e8:37:
         5b:c0:10:2a:93:80:7b:06:d3:bb:87:89:f8:bd:57:29:4c:65:
         76:22:4b:92:0f:b7:e0:4d:67:4b:8d:36:e7:d2:b0:79:58:8f:
         c2:2e:87:6a:67:6c:f6:d2:f2:de:98:91:40:6f:75:30:34:d2:
         28:d3:be:90:4a:07:0d:d5:14:79:71:ee:61:1f:db:7c:19:3a:
         44:2f:ec:53:54:7c:63:7c:97:ca:49:94:56:25:b2:81:b9:c0:
         e3:f6:69:3c:c5:2d:df:8b:75:ab:1b:a9:10:52:78:4b:a8:f5:
         6b:96:8b:28:15:e6:a3:85:3d:21:8e:75:b7:84:5b:48:6f:b7:
         43:89:23:42:83:71:f8:90:35:33:73:d0:98:ad:16:50:9f:13:
         25:02:cc:1e:c3:c6:30:d3:59:75:ef:27:fe:50:19:d4:c3:f7:
         d2:98:eb:9b:d5:79:14:13:d0:ee:73:47:f6:98:df:58:43:4b:
         ca:45:cc:04:4b:9e:17:94:55:3e:88:35:df:c1:48:fe:93:36:
         d6:40:1e:f4:87:a1:30:fa:41:5d:f6:39:83:84:88:30:05:82:
         8a:49:3f:eb:71:37:63:81:e5:50:4c:a7:0e:b7:7c:9b:ac:81:
         b1:31:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:43:12 2025 by rpki-client