Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
File:                     5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json)
Hash identifier:          AVctj3A0dSpnOgdRdUbcsSc6doCWjCkqAFjGumdGpgE=
Subject key identifier:   E4:FB:5B:19:76:71:F6:27:44:EC:5D:76:B7:2C:11:40:6D:F0:DF:95
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       34B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
Manifest number:          3491
Signing time:             Wed 14 May 2025 15:06:42 +0000
Manifest this update:     Wed 14 May 2025 15:06:42 +0000
Manifest next update:     Wed 21 May 2025 15:06:42 +0000
Files and hashes:         1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: LiyZKsuK3gF6TIHtn57uHd2skoL2F7oJSDTVKlL4bWQ=)
                          2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=)
                          3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=)
                          4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=)
                          5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13489 (0x34b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
        Validity
            Not Before: May 14 15:06:42 2025 GMT
            Not After : May 21 15:06:42 2025 GMT
        Subject: CN=6824b182-60db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:ed:3f:47:6d:de:16:bc:ca:fc:5b:51:3e:
                    ba:36:9a:61:df:f6:14:3b:f5:be:d1:92:7c:e0:3c:
                    27:e7:28:21:c9:e3:d6:8e:da:b3:75:32:12:30:41:
                    e7:3c:27:00:1a:29:a5:8f:4e:4f:39:60:c8:03:ee:
                    23:3a:07:3e:6a:0f:3f:c4:85:0b:e5:dd:59:5b:f7:
                    6e:bb:ea:7f:31:15:c4:d7:c4:9d:89:cd:78:28:93:
                    9c:44:db:73:ac:ad:53:15:f9:17:3a:3a:c1:d5:09:
                    49:ac:1a:2b:fd:ad:13:2c:1e:1d:18:70:f0:0d:ec:
                    31:99:46:7d:7d:6b:69:20:f7:28:ea:43:e4:28:ca:
                    9f:00:6f:39:ff:7b:03:91:36:76:18:94:53:43:11:
                    d0:ff:70:a9:7c:bb:22:6f:4b:4e:1f:a5:95:93:90:
                    90:21:5e:e6:6a:ad:e5:76:c1:cc:d5:3c:e5:3b:2a:
                    ce:a9:ba:d1:99:fe:d7:a4:c7:7e:02:56:8f:a0:64:
                    c7:f9:3b:96:6c:ba:d9:68:1c:7b:0a:a3:ad:d1:2b:
                    6f:78:0c:18:da:2b:65:ce:b4:d4:a7:e8:45:6e:92:
                    d8:34:dd:18:b3:18:2e:c2:28:46:23:94:a7:cf:5a:
                    5a:62:5f:31:90:99:2b:28:e9:b9:4f:aa:b7:af:64:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:5B:19:76:71:F6:27:44:EC:5D:76:B7:2C:11:40:6D:F0:DF:95
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:19:eb:34:92:96:77:f8:e5:26:4f:c2:c5:7a:e5:d0:9e:
         13:ba:25:23:5f:b3:fa:21:a7:15:c5:5f:58:6d:88:e7:7e:87:
         94:3a:3b:86:45:3d:3c:b5:64:7b:bc:ea:67:7b:52:17:c1:06:
         7c:ac:f7:ec:23:bb:bf:7e:1f:44:c9:96:f7:d0:73:91:4e:12:
         7c:81:47:fc:71:ea:ba:a5:27:fe:17:ce:91:87:f0:0b:25:98:
         a5:cc:6f:19:56:56:3e:1e:1c:4d:75:44:05:c7:e2:7f:02:1e:
         95:ea:11:ce:31:32:06:9b:de:18:fb:65:5e:fa:08:27:3a:0d:
         6e:83:ae:38:f9:88:ce:f4:a8:f4:f6:b4:d8:fe:b1:fe:b6:45:
         e6:8e:63:c6:4f:a8:6f:6d:3f:05:61:00:ce:65:b3:da:46:3d:
         21:b8:1e:79:d8:63:4d:6e:0d:93:33:38:61:77:8e:91:f4:80:
         03:22:1b:04:08:91:3d:6b:49:c5:3b:fc:09:79:12:dc:7d:16:
         a7:63:20:c9:36:20:c5:ee:d4:a5:13:85:93:d7:ad:0e:40:79:
         1f:d1:ee:fc:5b:c5:b9:39:8e:c2:9e:72:2a:6b:b4:68:8f:60:
         80:ed:62:56:01:f8:8d:53:8b:f0:bd:07:11:31:9c:f2:46:41:
         a3:73:33:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC
NTUxQkI5MzAwHhcNMjUwNTE0MTUwNjQyWhcNMjUwNTIxMTUwNjQyWjAYMRYwFAYD
VQQDEw02ODI0YjE4Mi02MGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqvtP0dt3ha8yvxbUT66Npph3/YUO/W+0ZJ84Dwn5yghyePWjtqzdTISMEHn
PCcAGimlj05POWDIA+4jOgc+ag8/xIUL5d1ZW/duu+p/MRXE18Sdic14KJOcRNtz
rK1TFfkXOjrB1QlJrBor/a0TLB4dGHDwDewxmUZ9fWtpIPco6kPkKMqfAG85/3sD
kTZ2GJRTQxHQ/3CpfLsib0tOH6WVk5CQIV7maq3ldsHM1TzlOyrOqbrRmf7XpMd+
AlaPoGTH+TuWbLrZaBx7CqOt0StveAwY2itlzrTUp+hFbpLYNN0YsxguwihGI5Sn
z1paYl8xkJkrKOm5T6q3r2QGUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT7Wxl2
cfYnROxddrcsEUBt8N+VMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE
QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL
cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5GxnrNJKWd/jlJk/CxXrl0J4TuiUjX7P6IacVxV9YbYjnfoeUOjuG
RT08tWR7vOpne1IXwQZ8rPfsI7u/fh9EyZb30HORThJ8gUf8ceq6pSf+F86Rh/AL
JZilzG8ZVlY+HhxNdUQFx+J/Ah6V6hHOMTIGm94Y+2Ve+ggnOg1ug644+YjO9Kj0
9rTY/rH+tkXmjmPGT6hvbT8FYQDOZbPaRj0huB552GNNbg2TMzhhd46R9IADIhsE
CJE9a0nFO/wJeRLcfRanYyDJNiDF7tSlE4WT160OQHkf0e78W8W5OY7CnnIqa7Ro
j2CA7WJWAfiNU4vwvQcRMZzyRkGjczNu
-----END CERTIFICATE-----
Generated at Fri May 16 03:09:33 2025 by rpki-client