Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File:                     5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier:          nA9MfUcRTeaSxXOYE7wM4z56t8ajti/X0icD508hE3M=
Subject key identifier:   FA:AE:A9:9F:22:7D:53:C0:B2:BB:38:32:4C:0D:0C:9C:90:C8:21:7E
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer:       /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number:          FB
Signing time:             Thu 03 Apr 2025 04:25:28 +0000
Manifest this update:     Thu 03 Apr 2025 04:25:28 +0000
Manifest next update:     Thu 10 Apr 2025 04:25:28 +0000
Files and hashes:         1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: Ws7ENGIUJk5lu2yNg32HfzcHRKI0V+aOC8efgDDNMr0=)
                          2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: 4Cz/oqpVomdj5KjMuMHHcnulXM/0E2/i4QAzsSN/Y08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
                          rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B20D
        Validity
            Not Before: Apr  3 04:25:28 2025 GMT
            Not After : Apr 10 04:25:28 2025 GMT
        Subject: CN=67ee0db8-4ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:2b:b9:73:7f:d4:93:46:a0:c5:78:d9:2e:
                    c3:7f:bd:98:b0:37:69:23:a8:33:62:fb:0d:ee:60:
                    3c:4f:27:5b:15:43:94:25:6e:c6:e3:51:a0:5f:82:
                    88:34:70:b9:ed:68:27:37:a9:52:42:35:1c:9e:89:
                    8b:5b:3c:ef:f3:22:a6:37:68:ef:27:5a:e6:89:10:
                    6b:d3:93:98:94:3b:e0:0e:06:0e:cc:da:de:6a:e7:
                    8f:a2:eb:07:c9:9d:c3:79:67:59:99:da:59:cd:62:
                    46:1c:48:3a:03:92:ca:64:2e:db:65:08:f7:12:34:
                    e6:cd:05:c2:8e:cc:de:6d:f5:8b:b9:18:df:d0:b5:
                    80:bc:94:68:f7:09:3c:e3:51:ad:d2:05:cc:a3:a8:
                    38:de:72:e1:e1:38:d4:c5:1c:12:93:19:57:5c:94:
                    19:9a:18:52:96:f9:18:9f:e0:90:3c:13:0b:be:93:
                    32:5c:e8:2c:fc:f1:76:2c:d6:67:0e:ae:d1:75:a7:
                    d2:fc:b7:be:8a:c5:a7:1d:9e:1a:b1:fd:cf:3f:b1:
                    12:0a:ea:6c:9b:0f:38:6a:a6:b0:73:02:43:7d:2c:
                    ab:24:17:af:cb:d5:eb:69:cf:fd:e4:56:a8:c5:fb:
                    30:84:73:52:8c:12:33:0b:9e:21:50:cf:36:3f:4a:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:A9:9F:22:7D:53:C0:B2:BB:38:32:4C:0D:0C:9C:90:C8:21:7E
            X509v3 Authority Key Identifier:
                keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:80:2b:99:a3:36:ba:68:fe:27:d4:0a:f1:d4:e0:c4:e9:b9:
         8f:5e:d8:a5:0b:29:cf:27:25:04:6f:4d:e7:01:29:5f:7f:f1:
         f5:87:8c:f5:56:f1:4b:40:16:6e:b6:6c:cd:43:fd:32:9c:9a:
         06:76:57:fe:8e:01:fa:89:85:15:9f:08:c4:79:42:ca:b1:75:
         b8:76:cf:56:87:1f:2d:e0:3d:2d:a9:c3:03:5a:38:ce:0a:8f:
         77:ed:dd:f1:98:8e:2f:6c:a8:18:21:43:1b:21:c3:f8:88:9c:
         4e:26:f7:28:47:21:fa:db:60:9a:5e:9a:17:75:1b:3f:68:08:
         bf:76:44:28:e6:6a:4c:b6:4f:e8:b6:df:b2:43:45:42:9a:c1:
         f4:ab:da:54:b3:b0:3b:ad:2c:da:f3:87:8e:5e:2f:e6:e5:49:
         26:b4:54:14:7d:e9:ca:fa:c6:ae:98:ab:88:96:e8:05:c7:a8:
         e5:f3:5b:70:55:5a:47:de:e4:4f:f1:8f:d3:ab:d7:d9:9d:33:
         70:a1:d0:5c:8a:50:4d:d7:95:ed:cd:bd:7b:b7:0e:6f:60:e2:
         99:dd:48:16:8c:69:f5:fd:42:9c:5d:8b:28:29:a3:31:e3:ae:
         8f:3a:6e:a2:2b:98:1d:2c:1b:05:29:dc:58:de:d3:b2:10:0b:
         19:01:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:10 2025 by rpki-client