Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File:                     MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier:          eIizkOpaFhmsxMd8DGUn0G2EY1R7CB8M39eEPOv5F6g=
Subject key identifier:   7E:89:41:5E:BF:38:D3:E7:92:7B:9F:FF:2B:23:E0:E9:2F:80:66:94
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer:       /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number:          41
Signing time:             Tue 01 Jul 2025 08:18:30 +0000
Manifest this update:     Tue 01 Jul 2025 08:18:29 +0000
Manifest next update:     Tue 08 Jul 2025 08:18:29 +0000
Files and hashes:         1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: B9MbIUKBs/Fr/+zpB3UCuSSVyTpxsMqmoZ17FydFA4Y=)
                          2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=)
                          3: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=)
                          4: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 8uwpV2NMP0utQgRKFvrYO1IhjVauGOu4rc/6wACuwjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
                          rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
        Validity
            Not Before: Jul  1 08:18:29 2025 GMT
            Not After : Jul  8 08:18:29 2025 GMT
        Subject: CN=686399d5-d3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c0:f1:9b:c5:1f:09:fc:21:6e:43:d6:10:ba:
                    1e:48:16:4b:32:fb:83:70:fd:db:fb:c7:b0:83:e4:
                    1b:9b:dc:01:bd:32:e8:fe:b9:b9:0b:bc:4c:cd:75:
                    5c:97:e9:f0:d8:5b:6b:32:53:3d:02:84:9b:df:d8:
                    7e:c3:c3:e9:d4:f0:28:90:0d:fa:9a:ae:e7:e6:04:
                    2e:ee:4f:dd:d4:f7:3b:7c:48:33:d0:4b:63:aa:d8:
                    43:82:56:be:de:c6:5b:22:99:3d:c2:a3:d2:38:50:
                    89:25:26:f7:e9:b0:ba:30:32:1f:80:8b:6b:9b:3e:
                    35:e0:02:fe:cd:c3:61:99:51:9c:48:75:a0:89:c0:
                    61:b1:12:1c:ad:3f:82:5e:7f:4d:9e:64:d7:9b:ab:
                    e5:85:cd:55:4d:f0:d3:1e:e3:f9:d3:a0:d5:fe:0c:
                    4f:dd:b9:f9:5a:3d:b8:08:42:f5:88:02:a8:13:78:
                    7f:b7:c9:9d:9a:3a:ef:00:cb:aa:4b:e0:b6:5a:22:
                    c1:2c:09:34:8c:a2:d9:01:61:9d:ed:0d:3f:d9:62:
                    20:5a:41:42:49:5c:4c:7b:cb:25:60:3d:92:00:fd:
                    cd:ac:e2:4a:08:4e:8d:f4:2f:47:13:c0:f6:41:24:
                    6f:d0:d3:bb:11:e9:8a:bd:c3:cc:54:5f:65:45:8e:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:89:41:5E:BF:38:D3:E7:92:7B:9F:FF:2B:23:E0:E9:2F:80:66:94
            X509v3 Authority Key Identifier:
                keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:93:72:e1:0f:8b:31:35:ef:db:02:3c:38:b4:fa:19:58:b5:
         ea:22:9f:9a:47:68:25:68:b4:c9:2a:c8:7c:f9:a7:e8:1f:f0:
         f9:b6:91:f0:bc:f5:dc:ec:6e:16:9a:d2:37:2e:40:e7:24:ae:
         83:76:9f:ec:c8:2e:8c:db:71:63:28:48:da:59:87:1d:cf:14:
         1e:70:91:19:1c:8f:48:f8:2b:ed:d0:6b:4c:a5:42:2e:1c:0b:
         6a:5e:ca:57:dc:56:d2:50:e8:0d:c3:b1:97:55:a4:d8:96:d5:
         f1:38:30:fb:0a:a1:50:26:45:15:13:6c:2c:16:69:c9:2c:3f:
         dc:69:ef:32:1f:78:93:5e:0f:4c:b7:39:4c:0e:6c:39:85:37:
         ee:ef:ac:3c:e8:d4:75:7e:f4:a0:ed:73:db:bd:c6:05:0b:f0:
         3e:87:aa:c0:6b:0c:0a:08:3e:65:eb:0f:3b:05:c2:11:9a:93:
         bb:89:bd:c0:92:95:36:7d:4d:c9:31:fd:7b:4b:d2:b0:50:09:
         d6:0b:7e:dc:5e:60:e2:5d:fe:b5:5e:b3:32:2d:7c:d5:fe:60:
         4d:f5:c6:47:cf:60:1a:0f:96:9d:35:7b:ea:21:97:07:fb:81:
         fd:88:82:fc:b8:78:c4:1d:22:85:ae:1f:c4:4a:99:09:37:1f:
         1e:03:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:49:27 2025 by rpki-client