Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          +LKghJ/m1s11CgwNhPE8nPjaDVEh9NTt5BzLgE6CAP8=
Subject key identifier:   9B:AE:35:6B:53:43:63:A0:61:F2:88:A4:C3:65:2C:C7:66:B1:09:6C
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          0175
Signing time:             Mon 05 May 2025 02:44:22 +0000
Manifest this update:     Mon 05 May 2025 02:44:22 +0000
Manifest next update:     Mon 12 May 2025 02:44:22 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: 1op659SfLtAYVimA45KUYK6OPQTj3zV65t8ZHRV6iSo=)
                          2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=)
                          3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 02:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: May  5 02:44:22 2025 GMT
            Not After : May 12 02:44:22 2025 GMT
        Subject: CN=68182606-803b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:b8:b0:3d:21:3a:32:70:f7:a4:2d:6b:1e:
                    ae:fc:1d:6d:ca:ee:98:33:f9:79:4b:28:16:00:69:
                    3f:27:b8:f5:8e:42:9c:8e:c0:13:56:75:a2:18:41:
                    47:df:3f:36:72:77:62:33:a6:4d:66:bb:3d:89:99:
                    95:d3:0a:74:09:a0:af:20:61:ac:22:a3:f0:1c:da:
                    20:e2:fa:ba:30:fe:6c:0c:cf:9a:82:37:64:1c:f6:
                    6c:e9:63:10:6a:0f:a7:24:bd:0f:c5:ba:3d:b6:f9:
                    4d:7d:2e:32:a7:6a:ec:16:02:5d:dd:2b:9b:63:88:
                    23:57:0d:1e:4e:09:14:9d:fd:85:16:c8:ec:b7:ed:
                    69:2b:55:a8:ff:98:d0:23:5d:75:46:00:cb:07:58:
                    c5:c8:ad:bd:76:58:9f:c6:e7:e3:da:14:b2:16:a6:
                    51:ee:d2:5d:25:e2:53:b8:cc:a3:63:c1:52:97:ec:
                    06:76:73:90:9d:6e:3b:43:3c:95:95:7d:70:e7:c7:
                    68:92:73:aa:80:32:57:0c:ac:3f:09:e0:1c:b5:61:
                    28:c2:6e:ff:e6:51:65:2a:32:d1:69:44:a4:51:c7:
                    6a:87:5e:3d:55:1e:a7:82:34:6e:9e:3c:26:a0:02:
                    01:ec:db:81:84:1b:db:d1:9a:be:c9:1c:db:ae:52:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:35:6B:53:43:63:A0:61:F2:88:A4:C3:65:2C:C7:66:B1:09:6C
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:21:48:fd:83:9e:bf:9c:89:f8:c5:4d:2d:2a:a3:6a:c9:
         1f:d2:74:f8:bd:2f:ff:2e:c3:15:a2:bb:c9:f1:03:3d:10:e9:
         f5:e5:28:2f:48:5f:44:58:c2:e7:c1:08:59:99:9d:ec:76:65:
         be:fc:70:2b:c9:96:65:cb:47:93:39:e1:72:34:90:16:8a:1b:
         26:b6:0d:de:34:f4:b7:5e:8a:55:26:6c:81:e1:04:c6:bf:49:
         6a:a1:f0:ed:36:7f:75:62:32:a9:21:84:8e:ce:07:77:d7:1c:
         03:68:54:0f:5c:01:15:40:b8:f7:a9:5a:ee:5e:4c:3e:c7:f0:
         78:db:00:74:07:9f:02:d0:07:31:75:a9:30:0f:a4:44:2e:cb:
         b8:e3:e4:69:5d:cb:83:d6:0a:d1:47:e8:37:b9:89:90:db:b3:
         04:95:1f:00:dc:4a:ab:43:e2:62:c3:b4:3e:78:c6:1b:0f:5c:
         37:4e:e6:8a:02:bd:1f:a9:17:96:f7:2a:e0:79:4c:f0:3f:36:
         cc:50:86:01:b4:19:1d:b1:a9:7d:18:ab:af:8a:61:9d:1c:39:
         03:b2:02:da:d6:ad:c4:f9:da:31:3f:94:0c:c1:81:1f:b5:c2:
         70:57:34:0d:91:54:16:16:94:75:0d:fe:33:9d:c5:cf:18:5f:
         8a:10:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:03:03 2025 by rpki-client