Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
File:                     5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json)
Hash identifier:          Q2nrrjrX0HU0xNmm+saTI8SZ002UkgLF4XmqBE2zKpw=
Subject key identifier:   75:7F:8C:6D:B6:FC:F3:F9:AD:0E:49:CB:DC:E7:6F:E4:06:27:4A:00
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       065D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
Manifest number:          0655
Signing time:             Wed 02 Apr 2025 22:27:19 +0000
Manifest this update:     Wed 02 Apr 2025 22:27:18 +0000
Manifest next update:     Wed 09 Apr 2025 22:27:18 +0000
Files and hashes:         1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: 8DiudIQ3hJS5t27y5sfmT8KmvupFV2JQoUXgFl0zetc=)
                          2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S55fbog5DZrTL6CQ8gLDN4CUVpPp3b9gzfe68beFEQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5
        Validity
            Not Before: Apr  2 22:27:18 2025 GMT
            Not After : Apr  9 22:27:18 2025 GMT
        Subject: CN=67edb9c7-6112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:ac:c0:6d:c4:e0:9e:34:c0:7b:7a:26:41:
                    40:fe:4f:9a:d0:f0:3f:ac:23:2e:8c:fe:13:10:c1:
                    aa:21:99:66:69:d8:b7:f9:9b:c7:30:ea:71:6a:b0:
                    ac:bf:8f:0a:39:01:88:24:c1:e9:af:fc:8f:dd:eb:
                    da:ef:0b:6f:d4:d7:a7:d0:79:37:39:6f:c7:43:fd:
                    40:66:81:63:d4:34:44:45:cd:b6:23:a5:af:c5:63:
                    aa:e2:14:a5:ad:f7:04:8c:77:89:03:90:3e:fa:76:
                    97:03:ec:d7:87:f9:9f:53:a0:23:36:be:43:20:d5:
                    5b:61:26:7b:ba:da:c8:fe:31:09:41:38:9b:b0:d1:
                    fa:64:93:dc:ed:8f:58:c0:3e:6b:a1:b5:46:b1:0d:
                    3f:02:69:cf:18:ab:22:d9:87:42:40:90:f4:c3:98:
                    7a:2d:7c:7b:9b:01:b0:ae:7d:5f:77:a6:36:5f:ba:
                    8b:92:fc:22:98:1f:31:0d:9b:00:a1:e3:a1:9c:4c:
                    5d:76:32:08:ee:36:b6:fd:68:61:de:5f:8c:70:1c:
                    25:eb:2d:51:3c:ba:73:af:c5:84:c4:a0:fd:b3:b4:
                    14:a3:08:ac:20:0f:56:9a:c0:7c:f4:c4:c0:3c:4b:
                    de:91:a5:b1:34:6e:f6:c0:a8:fc:ce:42:85:f3:33:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7F:8C:6D:B6:FC:F3:F9:AD:0E:49:CB:DC:E7:6F:E4:06:27:4A:00
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e0:f5:a9:2f:cb:6d:28:7c:83:97:75:a1:43:da:42:bb:37:
         44:a7:05:cd:b6:5d:6c:7e:87:88:69:e4:80:e3:1e:d2:6e:15:
         02:d0:9d:e2:bd:ea:06:02:96:81:1e:91:19:1f:42:76:00:8f:
         ab:d2:11:db:fb:bd:b6:b5:c1:5c:00:db:f4:93:6e:ae:c4:a4:
         80:c0:5f:dc:53:e4:50:50:0a:f0:05:f9:89:ba:52:8d:40:c9:
         69:f3:85:e1:86:6b:0a:91:f2:60:e4:5a:e7:53:63:20:94:50:
         fd:a0:91:23:bd:30:76:95:c8:4f:c1:e7:d9:3d:72:81:ac:bd:
         fd:ea:80:bf:e5:25:34:cf:8e:5b:b2:5e:28:99:b6:bb:15:a9:
         ae:03:01:b1:e5:21:db:4d:93:e2:d7:6d:26:22:8c:ff:e7:2f:
         20:5f:14:31:46:8b:58:78:bd:36:e4:4b:b8:50:1e:b9:ec:51:
         f4:24:b1:d4:a5:e4:61:cf:c5:ec:49:a7:16:fb:de:da:e2:cd:
         6d:c3:c5:0c:4a:4b:bb:0f:6a:8a:69:c2:e5:b9:8f:16:f2:d5:
         5d:17:37:65:74:73:ec:77:a0:0f:a4:80:44:a3:67:ec:17:4a:
         13:7f:bf:a5:a3:bb:8d:d7:51:77:8e:34:b5:fd:39:39:7a:c8:
         09:4d:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:30 2025 by rpki-client