Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File:                     5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier:          EGe9mOeNPF/0DSp8cANw2wGYIkr8NGHjecVUiOWsfag=
Subject key identifier:   D5:37:52:EF:73:27:31:62:30:BF:96:D8:40:E6:F0:D6:51:71:A5:6E
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number:          0232
Signing time:             Tue 13 May 2025 01:43:28 +0000
Manifest this update:     Tue 13 May 2025 01:43:27 +0000
Manifest next update:     Tue 20 May 2025 01:43:27 +0000
Files and hashes:         1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: AV6vulE0A9w+QQ540eNvoZwjnxIC1kDFF1xKmN5p4Gk=)
                          2: C578C852218A11EFB28E7B82C4F9AE02.roa (hash: kTzsqNEXZTEaSzrPrWyUs9cD3MM8KSq3zyWoBQVDjyE=)
                          3: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=)
                          4: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: May 13 01:43:27 2025 GMT
            Not After : May 20 01:43:27 2025 GMT
        Subject: CN=6822a3c0-6e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:25:99:3a:39:27:5b:f7:a5:a5:51:55:5f:90:
                    8e:8c:7b:20:6d:90:32:ff:29:13:04:bd:e9:f6:62:
                    88:22:f5:d9:d1:28:e1:ca:7d:79:36:17:2b:e6:44:
                    e7:60:18:8c:b9:3c:35:37:8c:03:40:f5:0c:0f:f9:
                    df:6f:c5:38:54:af:03:00:99:a1:14:9b:52:d9:be:
                    34:41:68:e5:cc:26:6e:b1:b1:3d:10:44:e8:45:19:
                    a4:59:3c:19:c8:ae:96:84:95:67:33:62:cc:c4:01:
                    f4:6c:4e:cc:23:b4:94:8b:06:de:71:0c:01:ce:2b:
                    3f:b2:20:9f:7d:97:f1:d9:8e:ba:b0:a1:02:2e:d0:
                    53:9e:9d:05:e4:db:f6:bc:83:87:16:35:3f:44:0e:
                    29:66:24:fe:94:b9:e4:e6:26:bf:88:1c:41:75:2a:
                    c9:15:34:b2:d4:ec:3f:a3:3d:00:ee:c0:96:80:cf:
                    57:58:5d:03:1c:f2:3f:05:2d:16:fa:69:80:a7:cb:
                    1a:4d:ed:91:53:d7:2c:3c:99:cf:1c:22:04:36:e9:
                    a0:a6:64:bc:d7:8e:76:70:dd:9e:c4:3e:d2:4f:9a:
                    37:70:59:cb:f9:3d:3a:37:13:c5:72:be:31:22:a8:
                    c9:e1:72:0f:e2:94:e3:40:a0:02:09:69:f5:4d:49:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:37:52:EF:73:27:31:62:30:BF:96:D8:40:E6:F0:D6:51:71:A5:6E
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:97:9e:80:bf:55:27:27:0f:86:a2:cd:79:76:b3:70:39:
         28:cd:e0:de:a1:70:f3:a5:11:f3:6c:45:97:38:6f:8f:26:a4:
         4a:6b:56:27:b3:b0:81:f4:22:bb:ff:48:cd:18:6e:17:27:f1:
         82:39:a7:b8:69:58:49:4c:6d:19:3b:48:ef:f8:46:85:4b:48:
         2a:96:ed:cd:a7:79:93:5f:01:f6:b1:b6:3b:99:87:14:5b:e6:
         39:72:f8:98:77:f5:d0:db:05:51:4f:12:f5:00:f9:66:8e:cc:
         49:52:2e:5e:81:b9:3c:1f:dc:b8:84:9e:de:21:92:67:7e:e8:
         6b:93:24:47:da:6e:7f:7f:62:54:d2:e6:1e:7a:75:fd:d2:54:
         4c:75:52:81:36:bb:1c:47:e0:f3:e5:0f:e1:37:5a:d3:c0:f7:
         d6:4e:e5:86:b6:b5:41:d4:10:7e:bd:03:77:80:ef:cf:a3:7b:
         90:70:3a:af:47:25:7e:77:c2:47:ae:d3:8b:95:57:22:0d:15:
         a3:cd:65:84:c2:3d:5d:ac:64:a6:79:9b:5e:17:85:b5:9a:1e:
         46:d1:e7:3a:51:26:04:ad:77:59:54:6a:60:ca:80:35:ac:48:
         23:ba:e3:17:83:d9:c8:d3:06:8b:43:f4:c7:12:e6:74:c4:4e:
         9c:3c:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:17:39 2025 by rpki-client