Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
File:                     53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json)
Hash identifier:          e4fbfg3f2wrfmOD7uaZXBTk/aJBye3bLPkY/R8s2aD0=
Subject key identifier:   09:83:E2:14:CB:0A:D1:E3:61:04:87:FB:1A:6F:BA:2C:87:9E:F9:B7
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Certificate issuer:       /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
Manifest number:          0168
Signing time:             Tue 01 Jul 2025 04:35:28 +0000
Manifest this update:     Tue 01 Jul 2025 04:35:28 +0000
Manifest next update:     Tue 08 Jul 2025 04:35:28 +0000
Files and hashes:         1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: oRWYtJ2HLrNlfa2+GqsaYgXLZywUgWi6MMcg3xJCjeQ=)
                          2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: qiuU93Lc7YatLMlsGPtovUfT87zuHB3bZX8CwFGs5GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
                          rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
        Validity
            Not Before: Jul  1 04:35:28 2025 GMT
            Not After : Jul  8 04:35:28 2025 GMT
        Subject: CN=68636590-3389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:33:cb:c4:a9:9f:7a:94:32:64:4a:e0:81:d0:
                    e2:20:89:10:ec:59:db:ed:c1:4f:34:82:97:98:ec:
                    9e:c6:eb:87:6b:d2:79:cd:73:e7:da:ec:c4:dd:09:
                    70:79:2d:f1:a7:33:89:b0:06:ce:0d:40:97:3d:81:
                    1b:bc:bf:06:0d:74:2d:14:a6:90:da:66:e0:a1:fc:
                    2e:bc:22:64:74:9f:f1:75:37:18:cc:bf:34:04:06:
                    4a:e9:06:35:bf:00:6e:bb:5c:80:c7:85:e4:31:e9:
                    35:37:96:95:81:09:66:e8:73:30:be:b4:5c:86:88:
                    d2:64:3f:47:e5:da:d4:e9:41:17:a3:0a:b2:45:47:
                    02:72:7b:47:88:0e:56:3d:f7:a6:9f:61:80:c5:f4:
                    6a:02:c0:41:cc:21:96:8e:d0:f9:76:5f:d5:1f:cf:
                    8a:10:18:b4:67:d7:26:00:cf:eb:16:71:84:ca:c9:
                    d2:76:f5:c4:73:ca:52:41:71:64:e7:66:49:e3:1e:
                    f1:58:8d:32:56:b1:34:c1:8d:be:18:be:ad:0a:8d:
                    67:5a:a5:28:fd:bb:8e:5e:1c:a6:b9:d4:89:eb:ea:
                    f1:23:3f:dd:0b:12:54:23:55:f8:49:3e:4e:0b:46:
                    3b:39:5f:2c:69:a5:41:f2:17:84:a0:f2:6c:ec:3b:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:E2:14:CB:0A:D1:E3:61:04:87:FB:1A:6F:BA:2C:87:9E:F9:B7
            X509v3 Authority Key Identifier:
                keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:90:61:4f:7a:83:70:d5:d6:89:f6:32:b3:45:44:ab:88:56:
         aa:63:40:a5:de:64:19:f3:9c:f8:e2:1e:f6:02:c7:43:7c:92:
         9e:1e:5c:87:04:03:53:2e:13:b9:aa:46:28:3d:a4:76:88:25:
         07:df:83:7b:ae:72:db:19:46:23:5f:7c:7d:f5:82:b9:89:35:
         b1:8a:15:93:7f:e1:2e:22:9d:b4:a8:70:0b:17:6f:5b:5d:be:
         70:e8:c3:b7:ca:0e:2c:2a:08:3d:8f:c1:aa:3d:c3:44:d1:68:
         36:aa:19:da:93:0d:69:58:38:34:42:41:24:91:e1:bc:5a:63:
         0a:11:8e:32:e2:96:79:27:d2:7f:f8:f2:d8:28:69:8c:b5:3e:
         ec:53:29:5a:fd:18:72:20:8d:55:37:c6:85:ca:26:a4:bb:3a:
         4d:37:4b:58:43:5a:1b:12:32:b1:c6:13:2f:c9:82:1d:6d:ac:
         d9:86:e2:5a:de:2a:c6:c4:a6:81:9d:b7:2b:56:45:e2:82:3f:
         0a:fd:21:6a:9f:34:58:07:b9:4a:15:d2:5b:28:d1:15:71:fb:
         2c:23:6c:ab:1c:25:53:6c:4a:e2:d4:a1:af:5c:66:5f:5f:e2:
         83:6d:c2:a7:c8:1a:bc:32:4a:fa:72:24:bb:a0:3c:35:50:0e:
         fb:75:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:10:52 2025 by rpki-client