Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File:                     RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier:          2q1xjoxdAx+Qo0Tdn7U1V1L4SmnsfF5Qs6dJVZ3Arxo=
Subject key identifier:   D0:75:20:55:FD:20:5E:3C:8E:C0:DB:B1:C1:9E:34:A8:C3:5A:DE:D9
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer:       /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial:       043A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number:          041B
Signing time:             Mon 05 May 2025 00:04:31 +0000
Manifest this update:     Mon 05 May 2025 00:04:31 +0000
Manifest next update:     Mon 12 May 2025 00:04:31 +0000
Files and hashes:         1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: AZ/VHFn9fKqpVM3TNlRbhGqF3MU89DYqjxY4T9v/9FM=)
                          2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=)
                          3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=)
                          4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
                          rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
        Validity
            Not Before: May  5 00:04:31 2025 GMT
            Not After : May 12 00:04:31 2025 GMT
        Subject: CN=6818008f-aaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:64:93:f6:27:2e:20:b3:c9:44:88:84:53:
                    3c:92:c2:e8:25:db:ae:68:3c:a5:18:18:67:88:f4:
                    8f:8e:16:bd:30:c9:9d:a1:0e:e7:f0:0e:f3:c8:1f:
                    5c:7d:dc:93:9a:6e:4f:5e:37:3e:63:25:de:b4:a6:
                    3c:f2:6f:ee:2c:ac:0e:d2:15:49:43:2f:7d:b7:a2:
                    7d:ea:a5:8f:4b:3e:3a:66:94:c0:3d:44:07:67:23:
                    b2:ec:b1:8f:fc:1b:d4:3f:a5:a8:b1:ba:82:a1:e0:
                    a0:6e:b4:76:e2:fc:75:5d:c6:d5:05:e8:12:af:4e:
                    c9:da:42:18:33:86:e2:82:e6:1e:2e:6d:44:91:55:
                    61:da:f4:52:55:0a:80:4b:25:07:24:0e:d4:2f:4f:
                    0a:b0:01:db:54:ea:0e:18:51:41:71:36:b8:a3:df:
                    58:71:a0:47:bf:7d:44:7c:87:08:a7:4a:19:69:23:
                    11:4b:d5:18:00:49:50:1a:64:4c:d2:3d:1f:f4:05:
                    2a:41:80:b2:92:83:a9:eb:45:34:6d:f1:c5:c1:bd:
                    22:2c:ed:67:5d:80:0c:89:79:31:f1:d0:36:e7:bc:
                    60:75:fe:01:0c:6a:7f:ec:cc:c0:25:b6:ed:eb:3b:
                    81:01:b6:22:ab:68:51:d8:3b:c1:96:28:e5:db:9a:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:75:20:55:FD:20:5E:3C:8E:C0:DB:B1:C1:9E:34:A8:C3:5A:DE:D9
            X509v3 Authority Key Identifier:
                keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:db:4f:db:bf:f1:90:31:e9:7c:7b:7a:5f:57:7a:bc:df:
         6d:99:3c:d0:84:24:4c:b6:59:cc:9f:a5:a4:b6:7d:98:fc:ed:
         f9:31:20:3b:75:d0:c6:a8:a5:e2:42:92:dc:69:ac:ea:78:78:
         ad:80:45:e8:3d:b6:2b:d8:e0:f1:a1:b4:b8:bd:be:c1:60:8c:
         5f:0a:76:9b:6f:55:f6:55:ec:94:7f:2d:77:ca:39:d1:55:b8:
         d2:ae:ef:50:c1:e2:52:7a:89:87:ff:2b:cb:da:3f:28:d8:42:
         fb:4b:fa:07:d9:68:45:7a:1b:bc:0e:32:a4:c1:b5:e0:04:1b:
         3e:ee:6b:16:75:8f:45:ea:3f:77:9e:2f:65:b3:a3:fe:8e:0f:
         fb:d4:74:4a:05:c5:4e:98:b5:a1:c2:a2:70:8d:be:d6:12:06:
         f5:f9:35:cc:7d:25:86:a3:6c:c4:99:4a:7e:6a:ba:3f:41:4e:
         5f:16:4d:06:fa:8b:f5:43:89:f0:c3:e6:97:b9:a2:b7:be:e0:
         2b:98:eb:c9:20:36:1c:70:e6:ce:ea:24:fb:56:02:47:8a:7a:
         4a:52:9a:1d:1a:bd:6b:b8:70:53:66:c9:cd:b6:14:59:ec:15:
         5b:57:c8:ff:58:80:c5:82:d6:c0:7d:ab:38:05:02:f6:bb:3c:
         be:d6:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:26:26 2025 by rpki-client