Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File:                     vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier:          OkuhjHUexIpVodaUOvLSrE1NdpAz18bMDH5U0hSnoKM=
Subject key identifier:   3F:09:FD:C6:07:25:F2:1A:A1:15:12:C0:22:E6:BE:26:17:CE:A1:EE
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer:       /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number:          BD
Signing time:             Sat 05 Apr 2025 05:23:47 +0000
Manifest this update:     Sat 05 Apr 2025 05:23:47 +0000
Manifest next update:     Sat 12 Apr 2025 05:23:47 +0000
Files and hashes:         1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: s2WVPR40YKOUqeSXFE4wK9MenN573JVqAOSRk6CUzmc=)
                          2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: nV0vvomgUuYAvIzu+zUsDjepnjclen17WArrRDCOOcE=)
                          3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: 8Rz14qqnLJzTDtmQhY87UU9ZmhRFExlX0EXdINFDVKA=)
                          4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: pMueZdZNVsSO9dkMJ6HNJEYyNaRswTRPg4jNaq1x/N8=)
                          5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: kU3sDSAugxDvj2jONja3ZA3jP5BMAHMZw6R2ums+q7s=)
                          6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: Oc+7IC+W0+Xbte63+cuJ+plpWgmKJWGeEg9BO4bYTrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
                          rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91993A0
        Validity
            Not Before: Apr  5 05:23:47 2025 GMT
            Not After : Apr 12 05:23:47 2025 GMT
        Subject: CN=67f0be63-0723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:33:1f:34:76:95:aa:9e:92:19:61:af:18:06:
                    40:8b:0c:fd:f9:47:1e:dd:9a:98:8f:61:82:d3:b4:
                    ec:f1:55:47:14:41:ce:73:a6:7e:54:42:49:83:35:
                    85:cf:56:f2:c5:35:ae:60:81:5b:8a:47:e1:7e:f8:
                    82:10:21:0a:f4:02:34:37:9f:ef:50:8b:fc:f1:75:
                    a0:6e:00:45:c0:04:1c:06:3e:23:6a:aa:7d:68:e1:
                    7a:b5:7b:3b:6c:49:4e:20:6a:c0:54:08:68:77:83:
                    57:7a:95:36:e9:2b:93:7a:20:9a:ac:40:8e:d0:08:
                    40:8f:c9:a8:69:65:5d:98:b8:4a:75:c2:08:7c:78:
                    32:b4:8c:4c:74:6e:0e:1a:32:f0:39:86:bd:eb:e9:
                    3b:54:f7:42:e7:2a:ce:f0:55:84:b2:99:71:f0:48:
                    1b:90:d3:a5:27:65:64:ba:b8:7b:c4:97:62:aa:9d:
                    c7:5c:51:62:16:f4:67:d2:f3:da:a1:7a:32:79:74:
                    89:ee:f0:77:f5:33:d1:d1:2e:8f:9e:63:95:34:75:
                    e6:45:0f:f2:91:ae:ac:6b:25:88:89:78:22:7f:99:
                    c9:97:a1:41:99:29:34:42:00:9f:bd:ee:c2:f7:c5:
                    5c:bb:87:1b:01:fb:66:3e:8b:7d:cf:cc:d6:25:e5:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:FD:C6:07:25:F2:1A:A1:15:12:C0:22:E6:BE:26:17:CE:A1:EE
            X509v3 Authority Key Identifier:
                keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:bf:6c:ed:1c:33:69:d2:39:6f:e8:6b:88:23:c1:77:42:44:
         ad:e8:16:db:32:0c:8c:30:fe:6f:a7:cc:da:28:a4:58:78:72:
         55:9c:d0:3e:dc:d1:ca:5d:a7:5b:4b:13:46:a1:92:87:61:c6:
         0d:14:3f:46:7d:bb:b6:94:9c:5a:25:d4:f0:77:7c:ee:92:00:
         66:04:0f:6b:c6:67:4a:94:6e:8f:80:d8:18:00:46:00:46:04:
         cc:3b:01:01:d7:7c:b4:cc:e4:4f:20:2d:c9:df:c1:65:60:78:
         05:21:8c:a9:1d:93:76:cb:ee:e6:5f:f4:20:50:d5:66:21:b8:
         58:62:7c:65:ef:bc:e7:94:a3:22:95:0a:4f:41:e5:85:55:29:
         b0:e7:e7:3e:74:61:7f:db:36:d4:9d:d1:d1:e5:0d:a0:da:e1:
         18:52:b0:a5:b6:47:8c:b1:05:13:1e:45:b4:d2:61:2c:05:54:
         48:42:6b:fd:3b:83:22:d2:b9:2a:a1:a2:be:a5:08:0a:f3:ee:
         6b:e8:a7:c4:17:f9:89:b1:f7:4a:ef:4d:df:c4:ca:a0:2b:00:
         7e:9f:89:33:28:4c:5f:1a:58:be:b6:f4:aa:fa:90:95:37:aa:
         3d:bd:07:ca:92:0e:c9:31:0c:60:02:7a:cd:ba:64:5b:dd:58:
         0c:d5:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:10:11 2025 by rpki-client