Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
File:                     AuOHDsPGHid3cW1wGLNMszV6AsQ.mft (raw, json)
Hash identifier:          GpONZUtt0quMObcz+q/LMxteVhxhQ3N2RJ6u+VSGUYs=
Subject key identifier:   D8:C9:E1:34:80:A4:B6:44:90:E6:99:DF:A0:05:9E:8E:95:BA:7E:0C
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Certificate issuer:       /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial:       066C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
Manifest number:          0656
Signing time:             Mon 12 May 2025 22:21:15 +0000
Manifest this update:     Mon 12 May 2025 22:21:15 +0000
Manifest next update:     Mon 19 May 2025 22:21:15 +0000
Files and hashes:         1: AuOHDsPGHid3cW1wGLNMszV6AsQ.crl (hash: x2Fo7jdek2JaT0XGAHwwyofgjxgJMHbsi0/CsNGUmbA=)
                          2: 78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (hash: hEiN61azCzCVDsRROVBC0HW2s55XG0VY8MhC1abTRg8=)
                          3: 79B5BD3A6AC011ED9C15EE6BC4F9AE02.roa (hash: tZpTe2qCGQj6NQwlc0TmLNR5XmYKiiqPqhHoaN4jA38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 22:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5B0D, serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
        Validity
            Not Before: May 12 22:21:15 2025 GMT
            Not After : May 19 22:21:15 2025 GMT
        Subject: CN=6822745b-3629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:13:f3:6a:0d:f0:d1:19:34:a6:77:e4:94:
                    fc:79:ff:a5:e8:e9:03:f7:85:11:bf:8f:25:26:43:
                    ae:d1:d5:96:9b:b4:f1:c8:f3:d9:82:b8:9e:9d:d3:
                    35:a4:77:43:0f:8f:af:08:09:5f:2a:ea:a5:96:54:
                    16:e7:5a:4f:87:84:14:32:db:9b:74:10:c0:7d:09:
                    85:c9:3e:cc:c3:90:64:08:7f:a5:1c:e6:f0:27:26:
                    da:ff:f5:79:ba:e6:bc:c0:98:c7:60:26:22:a2:8d:
                    12:1f:61:09:e4:26:6a:1a:9b:60:9e:e2:64:8b:50:
                    81:ae:d9:b7:85:01:93:91:d0:e5:fb:f6:1b:9a:a5:
                    e4:df:d8:7d:f3:de:94:0d:d2:1d:e3:dd:bd:2e:42:
                    10:cd:69:19:75:8a:f6:a6:e6:37:78:2a:06:3f:bc:
                    61:67:7e:2d:56:74:fa:00:1f:38:36:f2:80:ec:48:
                    6f:7d:94:16:0c:e4:ff:3e:21:31:bb:fa:70:97:54:
                    31:e2:c3:5b:87:f8:60:06:2d:62:89:0a:e2:e3:49:
                    79:58:7c:85:24:39:f9:7b:dc:01:f8:97:37:2e:b1:
                    6b:28:48:0c:7e:28:9c:c4:a1:0f:b0:b9:79:5c:cd:
                    0d:cc:40:6d:a3:35:34:5a:7d:a5:16:04:0a:ab:e9:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C9:E1:34:80:A4:B6:44:90:E6:99:DF:A0:05:9E:8E:95:BA:7E:0C
            X509v3 Authority Key Identifier:
                keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f1:f4:e5:48:8c:0a:dc:94:56:02:35:76:e3:cb:46:e0:6b:
         f2:e9:48:5b:14:50:69:f9:a4:2b:71:36:2b:c3:84:e3:38:39:
         7a:db:8f:18:e5:b7:c4:d0:26:f5:24:ab:c2:03:2e:1e:86:3e:
         da:ba:27:90:48:91:58:39:39:47:60:59:f2:91:fa:25:33:8f:
         54:ee:02:72:1d:29:33:a6:8c:52:f6:df:5c:ad:f0:2f:09:cd:
         1c:67:f5:6c:40:88:b5:9a:00:06:30:fd:0a:87:53:97:e9:87:
         b4:33:a1:1b:f0:b7:80:b8:33:0a:aa:06:1c:f5:fa:28:0b:63:
         0a:e3:4d:a3:ed:81:3b:35:f6:db:a0:68:22:f1:f3:53:cc:0f:
         d2:b7:c5:8e:a6:1b:bc:fc:22:a9:f2:09:dc:2e:87:ca:e9:5c:
         33:44:81:58:b0:da:19:da:39:ae:d1:73:4e:86:62:46:ce:8d:
         6e:78:70:0a:cf:0c:df:aa:ea:08:2b:07:98:7d:75:31:8d:0f:
         1a:4d:91:45:d6:62:2d:b0:c8:12:a1:87:48:7d:2e:56:b8:52:
         e9:a8:8d:37:0f:00:92:25:fc:f5:fe:08:70:09:f6:0e:f9:d1:
         e6:0a:35:cf:cd:66:3f:52:d8:1d:4d:4a:ee:35:3b:3e:17:ab:
         1b:30:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:19:13 2025 by rpki-client