Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
File:                     slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json)
Hash identifier:          rVjnuaIfn5iFNlVgqVWZM7ZlIH60wNFoyBt4BDUQtd0=
Subject key identifier:   D4:A6:B2:1A:29:18:4F:E1:3E:E6:C9:E7:15:05:EB:4B:81:0D:E4:AB
Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
Certificate issuer:       /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
Manifest number:          8F
Signing time:             Thu 15 May 2025 05:43:34 +0000
Manifest this update:     Thu 15 May 2025 05:43:34 +0000
Manifest next update:     Thu 22 May 2025 05:43:34 +0000
Files and hashes:         1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: nwc/i669Bmecjx0vdTRTluhvZexvjnopLO0PmovDONo=)
                          2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 05:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
        Validity
            Not Before: May 15 05:43:34 2025 GMT
            Not After : May 22 05:43:34 2025 GMT
        Subject: CN=68257f06-4582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:82:31:45:06:8f:fe:36:f7:b6:9f:82:6c:
                    6d:e1:cd:fc:6f:f8:32:72:18:ae:a3:1c:51:a1:90:
                    60:b2:cd:cb:d6:56:0a:53:1f:11:84:d4:94:18:b6:
                    0b:f9:1e:11:61:b5:d8:2f:57:15:37:4b:75:bb:e2:
                    34:e4:f7:02:d9:74:36:10:38:ef:3c:14:86:ac:0d:
                    4b:ba:01:ae:15:89:3d:d2:59:88:fe:72:47:d7:09:
                    da:32:5a:2c:8f:a9:00:95:cf:2d:25:e4:a1:af:ae:
                    53:f2:0b:b5:a3:f8:d4:d6:86:76:d0:31:49:d9:95:
                    31:d1:59:0a:e9:91:ca:1a:5c:48:c2:ae:03:de:b1:
                    41:12:00:dd:07:60:b8:65:aa:54:f8:4b:f8:82:90:
                    36:5a:28:51:e8:01:48:32:70:3b:99:5e:60:36:b8:
                    4c:f7:e0:48:3b:ee:cf:a2:27:9b:f7:5a:1d:f3:a6:
                    80:dd:0e:cf:aa:8b:ee:90:6a:b5:b3:6b:dc:8b:16:
                    27:c2:53:a5:58:71:88:8e:a2:33:ad:a3:a8:52:63:
                    5b:99:6f:88:18:79:a1:21:da:74:ac:83:7c:c7:91:
                    ab:f3:d9:27:2a:e0:db:01:c7:08:f1:21:cc:df:0a:
                    a1:80:fd:59:fb:62:05:cf:31:a4:54:32:d1:84:d8:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A6:B2:1A:29:18:4F:E1:3E:E6:C9:E7:15:05:EB:4B:81:0D:E4:AB
            X509v3 Authority Key Identifier:
                keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:d4:86:bc:bb:af:53:9b:e5:e2:fb:72:fd:9e:0b:a4:52:
         35:82:85:67:51:d0:33:9d:6d:70:ee:87:58:c4:f9:c2:2b:0a:
         03:76:b5:c8:1d:2b:40:97:fe:42:9e:34:76:8d:73:dd:d0:3a:
         a0:6c:eb:75:83:7f:28:11:5e:08:b6:02:bc:3e:63:8d:be:68:
         5a:ae:26:97:99:93:ae:97:ba:2e:57:cc:80:80:0c:bc:95:2d:
         8e:80:61:b2:17:3c:6d:de:66:5f:72:23:af:13:48:91:7f:44:
         77:66:16:be:51:84:aa:22:44:5b:c1:33:a7:84:d0:02:b0:f5:
         72:12:9f:02:83:1f:da:40:e1:d4:1a:b8:d1:44:a6:0f:06:11:
         3e:ee:19:8d:e5:81:ee:f8:ff:ed:2e:27:87:a3:fb:4f:56:47:
         e2:f3:cf:15:74:2d:bd:ce:1c:d6:64:ee:e5:c1:97:fb:bd:3a:
         cb:fd:cd:28:98:b2:99:c8:b0:c2:4f:54:75:c2:53:20:f4:13:
         0e:02:52:c9:16:77:62:8c:e3:b8:09:45:35:86:2d:06:c0:6b:
         4c:d3:8d:e9:ad:cd:3c:71:42:48:84:f2:3a:db:95:65:c7:da:
         03:6e:cb:2f:44:e9:28:8c:dc:16:e5:ba:99:14:a9:51:3c:05:
         12:59:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:49:54 2025 by rpki-client