Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File:                     BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier:          qz0Cwj9wpSE0u/dNEFIbX4y8YQPX4C75DV4xn2idrbc=
Subject key identifier:   C1:82:34:B0:9F:16:B5:7A:13:8B:63:70:2C:9B:74:FF:C0:CA:2C:F5
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number:          5E
Signing time:             Thu 03 Apr 2025 06:18:13 +0000
Manifest this update:     Thu 03 Apr 2025 06:18:12 +0000
Manifest next update:     Thu 10 Apr 2025 06:18:12 +0000
Files and hashes:         1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: yngpJjgB3H17oSR+EoMJG3E7MWf+R5CrCeFSxtbkKio=)
                          2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C
        Validity
            Not Before: Apr  3 06:18:12 2025 GMT
            Not After : Apr 10 06:18:12 2025 GMT
        Subject: CN=67ee2825-d78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:72:5c:80:7d:60:e0:81:60:fa:5e:d5:45:
                    3b:56:f4:a2:8b:f2:ca:ad:df:d3:fb:b0:3e:5f:6e:
                    9b:29:ab:e2:04:24:51:9d:18:c7:c5:9d:dc:c2:2a:
                    44:56:cf:21:38:fe:29:28:23:6a:e1:b0:ad:72:4b:
                    5d:6f:67:89:37:4e:79:5b:78:17:b3:cf:29:84:33:
                    ee:4d:07:e5:4e:46:73:95:e0:e7:54:f8:65:23:8f:
                    ae:49:49:54:ee:7f:07:ed:4d:30:98:37:18:fa:3f:
                    fe:3a:d7:6f:21:ad:88:28:88:19:89:59:a7:46:ec:
                    52:d8:ae:15:80:23:b0:24:af:1e:75:51:fd:45:7f:
                    f2:04:4b:e3:75:79:37:70:95:6a:8c:6f:f4:16:d9:
                    fb:19:0f:87:b8:19:4e:d1:05:ca:66:be:05:4e:4a:
                    c7:90:71:7e:42:5a:45:58:5b:b0:34:ad:d6:5f:9c:
                    75:38:6b:86:a4:91:d0:d9:43:c2:76:a3:be:b6:94:
                    09:e7:df:cc:8f:1f:d4:b0:a5:0a:56:2f:6c:4f:e5:
                    54:23:0f:6d:aa:2e:30:3a:b8:a7:74:70:95:70:74:
                    30:1a:e3:47:3a:20:08:7e:a4:dd:68:c0:76:3d:65:
                    d1:b7:57:5e:ca:7f:9f:94:ff:39:c4:c6:38:d0:81:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:82:34:B0:9F:16:B5:7A:13:8B:63:70:2C:9B:74:FF:C0:CA:2C:F5
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:90:a0:07:d2:35:66:86:0d:8e:1c:b0:13:4d:2d:42:12:09:
         e6:06:e0:92:32:c8:a7:d5:ca:af:04:8d:ba:6d:9e:06:cc:52:
         0b:9c:c2:ad:93:ca:96:9d:f3:22:db:9e:8b:3d:2f:0e:07:ab:
         b3:b0:cd:f1:fd:11:02:e2:63:e2:e9:60:e7:c3:96:de:16:b6:
         b0:e2:27:69:df:c3:16:36:3a:eb:c6:08:e5:c6:19:80:c2:54:
         8a:fa:76:f2:c6:c4:38:1c:62:d7:13:61:5b:43:51:e8:60:f0:
         c2:84:c0:3d:b0:6d:68:e6:9c:94:46:6e:6c:95:62:6f:8b:3e:
         3e:80:17:42:7a:87:aa:da:ba:48:0a:db:37:17:94:40:96:dd:
         9f:06:3c:95:ec:79:a9:35:84:8b:89:24:61:53:2d:30:20:c7:
         2b:bc:11:84:b0:93:cf:16:51:d5:bc:aa:0d:6f:a3:00:29:81:
         c2:52:ab:17:85:13:5d:66:16:e4:0b:41:f8:45:d1:31:3c:6e:
         50:e1:2e:64:61:a8:9f:4a:1d:9c:d3:1c:e8:41:fb:6b:7f:9a:
         94:f1:b3:53:3a:06:a0:66:51:cb:46:88:e7:98:7a:cd:ff:47:
         18:b6:74:fb:e8:89:5e:83:95:f0:6a:b9:c7:a1:65:fb:83:e2:
         e6:c9:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:50 2025 by rpki-client