Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
File:                     VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json)
Hash identifier:          cf5Yx0opwpbnQy0+mqTE7jT7VUHQBjmW0nzUitG61L4=
Subject key identifier:   6B:0C:9D:3C:2D:20:21:FD:76:C7:AB:3A:66:82:B3:53:25:C4:E7:E4
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Certificate issuer:       /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
Manifest number:          0119
Signing time:             Sat 17 May 2025 04:31:34 +0000
Manifest this update:     Sat 17 May 2025 04:31:34 +0000
Manifest next update:     Sat 24 May 2025 04:31:34 +0000
Files and hashes:         1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: HqLQQwsMRqmmG+wkh6fUWqKtEEx7G/G5qq2oFOg/iOM=)
                          2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=)
                          3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
                          rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB103, serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
        Validity
            Not Before: May 17 04:31:34 2025 GMT
            Not After : May 24 04:31:34 2025 GMT
        Subject: CN=68281126-6c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:15:35:27:4a:33:4e:1f:25:9a:2e:ea:8f:
                    44:1e:47:87:04:ce:07:a2:90:1e:e6:3e:c0:b0:e3:
                    01:a7:6b:72:be:3a:82:93:bb:9c:36:a2:6c:f5:9a:
                    37:88:4a:7b:cc:d1:55:dd:54:91:5a:88:a8:ff:4a:
                    0e:8d:b4:d7:c3:78:59:59:ef:af:23:55:c3:ff:14:
                    9d:47:a2:64:c0:41:bf:eb:9d:0a:8a:c5:f5:27:bd:
                    ab:6e:55:de:75:bf:ae:e3:30:a9:66:54:0a:5b:30:
                    ca:e9:82:4f:74:2e:db:0c:8f:b7:38:91:7f:96:05:
                    75:c3:11:06:36:bc:9e:9e:c6:7b:d3:8a:f9:64:0e:
                    8a:86:fd:0d:da:35:12:23:09:27:1b:4e:61:93:ca:
                    dc:cb:ee:44:00:da:42:86:35:bc:ed:e8:f0:e8:fb:
                    74:bc:11:4e:3c:b4:f8:8e:d6:9c:e6:78:b0:fc:fb:
                    0c:cd:b1:7f:a8:87:a4:c7:74:b0:7f:f1:ea:f6:d3:
                    27:29:cd:a4:d7:ba:f1:6b:25:b2:49:43:8d:13:17:
                    7e:e7:fd:da:94:aa:d6:0b:3b:a6:9f:18:df:8c:04:
                    af:f9:c9:7b:81:7a:a5:da:fb:f5:6a:f8:a0:fb:65:
                    8c:86:a0:2d:92:b4:fa:e2:ef:04:22:13:a9:41:13:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0C:9D:3C:2D:20:21:FD:76:C7:AB:3A:66:82:B3:53:25:C4:E7:E4
            X509v3 Authority Key Identifier:
                keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:d3:71:67:68:d4:f7:1e:af:95:e4:92:fc:8c:bb:8f:da:
         24:70:6d:8b:2c:65:1d:f1:81:e7:bf:77:9c:1b:b9:c7:57:4f:
         24:33:78:6a:9c:47:8d:13:81:0d:9e:6a:89:13:8b:8b:b3:c1:
         16:79:b4:88:44:01:44:bf:99:85:df:ef:26:8b:94:3d:2e:2a:
         67:a1:f4:38:2d:3d:08:68:e7:4e:f2:cd:5e:39:17:b7:f2:99:
         62:09:81:98:2c:42:7a:01:fd:08:94:1c:6e:01:00:2e:eb:23:
         6b:36:6c:f3:6e:d7:f2:a1:06:9d:0b:8e:b0:ab:da:b0:e8:b2:
         da:bb:c6:e1:ed:7c:b1:a4:c0:b0:6c:dc:57:b9:f8:6b:a6:0a:
         33:0f:72:a4:c5:a4:ea:68:b0:41:28:eb:65:d3:a8:1b:be:98:
         a3:0f:47:4d:d5:5a:28:b8:06:6e:37:d3:29:1c:54:21:ba:97:
         5a:19:25:20:bb:9d:27:8f:59:68:b2:a4:70:7b:3c:64:47:c6:
         0f:7b:bf:ab:ed:af:7a:8c:ee:e4:90:f3:9a:5b:81:cf:d6:96:
         88:f0:b8:d3:94:a1:40:b3:95:87:73:34:08:a2:e7:6f:93:51:
         bd:1e:9b:3a:35:00:76:50:41:f2:6f:97:be:e1:4b:06:57:e3:
         9d:0f:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:04:56 2025 by rpki-client