Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
File:                     Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft (raw, json)
Hash identifier:          Lt7HjAWVvUTwQT25zijHbRz2Fg4Ds4brXcT7xVv/EME=
Subject key identifier:   2A:EE:81:9A:73:29:A1:BE:31:7E:30:F8:7C:95:7C:32:A1:CF:60:3E
Authority key identifier: 49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Certificate issuer:       /CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
Certificate serial:       0662
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
Manifest number:          0653
Signing time:             Fri 28 Mar 2025 22:42:14 +0000
Manifest this update:     Fri 28 Mar 2025 22:42:14 +0000
Manifest next update:     Fri 04 Apr 2025 22:42:14 +0000
Files and hashes:         1: Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl (hash: xBlMw0SYOj+9uh68a1e5SCpQ3YAbxOntmQeWPjHBywc=)
                          2: BD8A42B27CA411EB847F0B83C4F9AE02.roa (hash: rF+D6zPDIJwry6qHScwbtKwBOHZvfUdrhdX6D6Fqdog=)
                          3: FFD6E656DB1E11EB91006D71C4F9AE02.roa (hash: K61xoWut3SAgEuN5+1k0dXQON0k0l7TUwfM2kslJEm4=)
                          4: 006626AEDB1F11EB91006D71C4F9AE02.roa (hash: 20i7SUN+ILtvpk7iV/YzHa7IC6zBka4WdUDNuP/C6/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl
                          rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 22:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736B7
        Validity
            Not Before: Mar 28 22:42:14 2025 GMT
            Not After : Apr  4 22:42:14 2025 GMT
        Subject: CN=67e725c6-de4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:d0:36:cf:6a:eb:f0:68:ff:50:26:34:38:
                    76:e2:1e:1d:da:3e:de:42:93:a7:e4:95:2b:18:fe:
                    20:33:90:2a:90:fb:1e:40:2c:ab:f9:cf:83:cc:68:
                    7c:f2:43:92:92:3b:16:e7:54:cb:22:4e:6d:19:09:
                    78:07:24:56:ec:12:c6:18:aa:68:41:61:c9:e0:3d:
                    8c:7e:15:7e:6a:a3:34:64:57:13:ac:dd:26:2d:e1:
                    92:48:9c:64:23:21:ed:5a:37:95:d3:38:bd:76:c1:
                    33:18:31:c1:d3:c7:f8:b1:c4:58:69:32:43:87:e4:
                    51:55:d2:b8:43:e2:f7:e8:aa:fb:5a:dc:90:23:e7:
                    14:23:fa:b6:6a:77:fe:f4:68:da:74:ed:f1:e4:54:
                    63:39:d2:2b:19:82:08:0a:31:67:89:08:1e:82:4e:
                    72:8f:7d:12:0f:a8:82:b7:e8:66:60:8c:4a:44:bf:
                    77:b8:c3:61:14:bc:a2:3d:27:b4:65:54:3a:45:64:
                    76:ed:ff:fc:15:6c:8a:20:27:54:04:04:1c:d5:45:
                    7c:76:92:fd:58:7a:56:2e:7b:0f:57:4f:b5:d4:ae:
                    e0:65:b1:91:67:af:66:b2:86:75:45:9b:9e:c3:5e:
                    da:46:6b:4c:23:a8:84:3e:8d:4a:fb:21:ce:09:b6:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EE:81:9A:73:29:A1:BE:31:7E:30:F8:7C:95:7C:32:A1:CF:60:3E
            X509v3 Authority Key Identifier:
                keyid:49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:01:88:d1:15:1d:42:37:96:78:4d:fb:f2:c8:ef:dd:fa:8e:
         30:11:c9:a2:38:b7:f7:af:8c:db:ef:49:d1:66:c5:bf:de:df:
         f4:ac:89:83:c0:7d:f9:41:12:cb:8a:51:e1:74:b0:0c:f6:d4:
         78:d3:4d:04:fd:b6:a4:10:f5:cb:e9:bd:2b:f5:9e:22:37:0c:
         cd:be:a2:aa:64:ff:d7:1a:38:01:1e:58:42:3d:65:cf:88:36:
         cf:3a:df:e9:7b:d7:9b:92:35:57:43:3e:a6:e6:c6:e2:fa:d3:
         b8:8f:b7:9d:e2:d7:a1:f8:55:da:78:01:1f:cb:9a:fe:9e:41:
         de:fc:66:47:cc:34:ac:d6:8c:9a:0e:23:f2:1a:97:4c:ef:b4:
         f6:c8:62:15:e2:4c:79:48:5a:8a:00:ad:e7:29:2c:59:1f:d9:
         cf:8b:b8:7e:03:eb:3e:ef:71:45:d0:a1:93:f5:06:4d:61:30:
         de:84:12:99:74:6c:c7:11:ee:14:11:e4:4d:df:a2:ea:3f:ea:
         49:f5:62:85:55:8d:92:c9:4b:54:9a:ef:83:bd:c1:22:25:87:
         1d:90:20:3f:a2:7f:b9:33:7a:d8:b4:ed:7e:3d:c4:98:27:b8:
         e0:5f:e1:fb:7f:df:57:61:e5:01:99:fa:b8:09:03:0d:77:6f:
         79:1c:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:32 2025 by rpki-client