Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
File:                     Bc1Un1RUvTKyKPavyN424Ej2SA0.mft (raw, json)
Hash identifier:          lprJXhlPCzRPrIlO1DfhbQsVA4gHrLkgSRlLawa0uus=
Subject key identifier:   EB:3E:8A:D4:19:D4:EC:3B:D1:78:6B:62:92:7B:2A:F7:B6:40:F7:5D
Authority key identifier: 05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D
Certificate issuer:       /CN=A91E8881/serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D
Certificate serial:       07AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
Manifest number:          07A6
Signing time:             Wed 14 May 2025 21:18:49 +0000
Manifest this update:     Wed 14 May 2025 21:18:48 +0000
Manifest next update:     Wed 21 May 2025 21:18:48 +0000
Files and hashes:         1: Bc1Un1RUvTKyKPavyN424Ej2SA0.crl (hash: rTY5u01VLW6r2GV5PK4vNMel0HrTRJ+XsoiMS2OGaFA=)
                          2: EAC9D46200F911EB8E61B84CC4F9AE02.roa (hash: Vn5biCjexx3cjiQ4QgNEGs4i33iiyVoqmR3L4tJPzNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8881, serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D
        Validity
            Not Before: May 14 21:18:48 2025 GMT
            Not After : May 21 21:18:48 2025 GMT
        Subject: CN=682508b9-360f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:cb:1a:bd:dc:a0:62:83:b4:4a:66:ba:01:
                    99:3c:ec:ba:91:7c:d6:de:9c:23:85:59:7a:d5:72:
                    af:e1:3e:8b:de:6a:e8:ec:96:dc:e2:cb:ee:90:22:
                    62:3d:b1:96:c4:1f:06:49:b8:1d:0a:c0:a4:c2:f1:
                    5c:54:5c:6a:67:27:2c:9c:3d:22:55:28:96:a7:79:
                    78:c8:41:ae:94:ac:c8:26:3b:15:f7:fe:a2:64:5b:
                    20:c9:11:3a:45:26:dd:71:11:00:16:60:be:de:b3:
                    55:56:13:89:18:73:58:61:05:2a:fc:96:76:ac:7b:
                    ce:e2:7e:42:d7:84:a7:8b:66:df:46:cc:be:bc:21:
                    37:a7:c1:c7:ec:ad:84:22:b9:bc:dd:3d:38:0e:0d:
                    a2:66:18:a9:c7:f5:d9:a3:2f:b2:2a:c1:4d:a8:3f:
                    a2:1e:33:55:68:f1:da:09:a3:20:db:12:ff:f7:5b:
                    6b:92:3c:b0:af:7e:a9:29:30:15:16:a9:31:60:58:
                    ea:5b:a7:41:5c:ef:ae:13:09:1b:e1:72:ed:7d:9e:
                    43:b7:a0:16:6a:7d:59:9f:41:5a:1f:e7:bd:67:2d:
                    d9:27:ba:ea:01:f6:df:f2:82:75:f9:b5:b9:f8:e9:
                    76:25:9c:0d:61:f1:d5:a5:26:5e:56:6d:f3:84:3b:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3E:8A:D4:19:D4:EC:3B:D1:78:6B:62:92:7B:2A:F7:B6:40:F7:5D
            X509v3 Authority Key Identifier:
                keyid:05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:6d:bd:59:ec:25:79:fe:88:3a:cc:d3:c6:c9:05:48:12:
         ad:50:b1:c9:a7:d9:9c:12:b5:1b:f7:94:a9:bb:d9:f8:f8:8d:
         ec:b1:f6:f6:4b:f1:e3:e3:22:3a:37:01:86:f5:18:17:e9:5b:
         b7:97:e3:38:20:83:1c:cb:70:8e:d8:cb:f8:63:24:42:a5:74:
         cb:e1:56:22:bc:4e:df:c7:7e:8f:03:a4:d7:10:b5:ce:6d:ea:
         5b:ff:71:a2:eb:08:36:1d:32:1b:9f:bb:90:97:c9:b0:83:52:
         c4:e5:71:f4:2a:5a:00:63:bf:c6:f0:55:3f:15:2c:5c:89:26:
         b0:3d:93:09:e6:2d:7d:ae:ca:fc:62:3c:12:a5:12:02:e8:20:
         34:f0:dc:0a:7d:06:9a:81:33:b8:30:12:cb:6f:8d:3b:ea:1d:
         b1:dc:27:d9:ee:20:18:27:d1:25:f9:18:1c:07:93:0e:54:c7:
         42:1a:ec:26:25:63:46:12:c9:a0:12:a4:5e:14:a9:77:b7:df:
         9a:35:1d:7d:77:a6:bb:96:d4:b2:57:d3:1d:93:33:07:81:d0:
         60:f4:cc:79:9e:bf:52:37:e9:52:a9:43:9a:97:d0:24:8c:b0:
         5f:36:62:34:75:ee:5c:50:00:be:b2:61:c6:18:7a:5c:af:78:
         48:16:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:03:27 2025 by rpki-client