Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File:                     _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier:          +sMxkL7EIXbhsa2R2WT/HDzyUWVkq2WUNgMZ5ndrM04=
Subject key identifier:   AF:56:FE:29:46:D1:64:AF:03:96:1B:77:C0:B0:D6:9A:71:97:B1:D0
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer:       /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number:          6E
Signing time:             Thu 03 Apr 2025 06:10:02 +0000
Manifest this update:     Thu 03 Apr 2025 06:10:02 +0000
Manifest next update:     Thu 10 Apr 2025 06:10:02 +0000
Files and hashes:         1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: 4Z12rA9ebChxzN2TFvbi48ybVd5WqwY02ZxeJ+0h+KU=)
                          2: B538B552701211EFB6868329C4F9AE02.roa (hash: 29NsNsEH3hS+ytz7V80jP+Hgfwg6ZXrunR8Rxp6hBOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
                          rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ACF5
        Validity
            Not Before: Apr  3 06:10:02 2025 GMT
            Not After : Apr 10 06:10:02 2025 GMT
        Subject: CN=67ee263a-58c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:23:e9:be:ba:bc:3a:ee:a5:2c:dd:6e:8b:
                    f1:bb:fc:b7:8d:8b:bb:bf:c6:4d:f2:03:97:8d:f6:
                    fa:8c:50:af:4d:e7:6f:0d:8e:c8:33:fa:3d:8e:18:
                    21:0c:8c:9c:8f:8c:af:c4:d1:51:fc:79:7a:1f:c2:
                    c9:ea:ea:8c:71:b5:c8:cf:64:2a:75:80:17:fa:3d:
                    29:85:a0:eb:aa:f1:7e:b2:e8:8d:d6:f3:9c:2b:12:
                    06:b9:32:5f:0e:b2:28:1e:a8:4b:e8:ee:03:6b:e2:
                    e0:7d:6f:48:b4:27:09:0c:7c:23:ad:72:85:56:cd:
                    9a:0b:6f:89:0e:d5:86:46:11:79:12:b3:19:5c:02:
                    05:f8:23:1d:1f:b7:88:98:74:af:48:70:14:77:a9:
                    39:67:8e:b9:eb:91:7f:a0:ce:d1:1c:22:cc:c2:11:
                    07:3d:2b:21:d7:00:6c:40:52:d0:af:ff:d2:e4:d2:
                    96:8e:40:d2:a8:7f:a9:be:9f:14:b1:8d:75:f0:83:
                    92:9d:47:39:e0:54:19:80:ed:f5:6e:e7:0e:7f:08:
                    cb:2c:3f:72:d9:2e:0e:33:44:9e:37:3e:73:46:e7:
                    2c:be:33:81:14:99:81:50:ba:d4:c6:e6:d3:2b:2c:
                    0c:2c:40:31:9c:41:ae:76:57:38:12:e4:2f:84:74:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:FE:29:46:D1:64:AF:03:96:1B:77:C0:B0:D6:9A:71:97:B1:D0
            X509v3 Authority Key Identifier:
                keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:dd:81:8f:55:29:f1:4d:5e:4b:0b:2d:a2:39:98:08:2b:
         5b:78:2c:93:3a:2c:56:6a:d0:bf:2f:13:93:01:2c:85:27:b2:
         1c:e5:f8:ab:a7:38:14:20:36:93:4f:31:75:0f:ed:f5:9c:58:
         a7:01:66:be:17:1e:83:a3:0d:2c:63:9a:26:8b:e1:5c:b9:41:
         2a:b9:e6:31:ff:e7:52:14:6b:b6:4a:4a:18:44:82:38:76:ef:
         3f:8b:60:f1:4a:a9:57:3d:dc:3c:43:50:cd:cb:14:2c:77:21:
         4d:41:21:da:47:37:39:c0:64:81:5a:50:00:19:a7:07:86:bd:
         0e:f9:a0:e1:a4:c6:10:b5:53:de:61:49:58:e7:ed:ef:dc:9e:
         dc:af:4b:66:49:0f:5d:cb:cf:58:f5:2a:ba:a7:51:96:e5:15:
         2c:7b:b0:9c:97:d8:30:a8:c0:2d:c9:a4:14:1a:ca:35:bf:26:
         bb:21:7a:3d:d9:ba:5f:13:6d:49:66:33:fa:e8:a0:5d:5b:b9:
         96:de:23:62:3e:25:fc:c2:5d:d2:c3:57:ed:17:7c:0e:44:21:
         b5:78:2e:b7:dc:f0:53:3c:9e:63:a0:df:b6:3e:12:35:aa:88:
         f2:88:2b:43:12:b1:43:49:e4:e3:1e:1a:df:9f:b7:b2:9a:88:
         94:9a:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:09 2025 by rpki-client