Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File:                     YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier:          Egm5Phh7ziJxc061CxzJr2H7bt/t+Bg+UnM3hc4V5oc=
Subject key identifier:   A0:5C:24:53:DB:7C:40:98:88:4B:0F:BE:DB:A7:76:D6:8C:AD:4A:AB
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer:       /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number:          5D
Signing time:             Sat 29 Mar 2025 06:23:03 +0000
Manifest this update:     Sat 29 Mar 2025 06:23:02 +0000
Manifest next update:     Sat 05 Apr 2025 06:23:02 +0000
Files and hashes:         1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: 4IKHmX6MF9Pmzvxi6FpuWZ6HwiMwz/QuPGhm7N93ahg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CD5
        Validity
            Not Before: Mar 29 06:23:02 2025 GMT
            Not After : Apr  5 06:23:02 2025 GMT
        Subject: CN=67e791c7-1895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:2d:df:dc:62:b8:a5:55:46:83:d1:8d:1a:
                    f5:8e:93:f8:93:f3:96:09:80:50:7a:43:d0:0a:f8:
                    6c:30:d4:4a:63:ae:5b:fc:6b:a0:18:0d:cf:8c:bf:
                    26:a5:0c:b5:43:5e:8f:6c:f3:3b:a6:e3:11:9d:d8:
                    dc:f4:40:cb:cd:82:b5:45:9f:8d:96:a9:a3:d2:00:
                    7d:61:f5:79:e2:9c:31:18:1a:82:65:90:fa:a6:22:
                    90:61:e5:54:8a:17:44:e1:5d:ce:a8:fc:c1:05:6e:
                    e8:45:a8:8f:33:34:95:35:b0:54:7b:d5:59:f5:ac:
                    aa:0e:bf:1f:4b:5a:76:9d:19:7e:52:3c:8d:ea:c9:
                    18:1b:10:89:23:f8:f6:8b:91:9f:ad:01:49:32:91:
                    54:c7:53:0a:85:74:c6:89:8d:51:1b:38:7b:a9:f1:
                    67:7a:5f:0f:d2:e9:0e:8b:35:c9:16:76:0a:5f:3c:
                    a5:5e:00:6a:bf:56:6d:4b:51:2e:b8:db:b9:67:e5:
                    a4:e8:2c:05:69:ff:d1:14:ef:21:09:3f:15:bb:50:
                    1e:47:5a:77:42:28:cd:ac:d1:d2:5c:35:5e:2d:46:
                    64:73:23:f3:9d:43:82:44:dd:f8:89:f1:7a:4c:02:
                    2a:94:40:0d:ff:fc:74:c3:8d:d0:00:f4:e7:5b:59:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5C:24:53:DB:7C:40:98:88:4B:0F:BE:DB:A7:76:D6:8C:AD:4A:AB
            X509v3 Authority Key Identifier:
                keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:3e:d2:7f:4b:10:be:4c:d8:fb:ca:d7:a5:a2:ce:76:84:
         0e:b6:6f:ec:e1:68:21:2e:a7:6e:7e:23:e4:23:84:16:f1:82:
         c2:ba:d6:4f:cb:1e:bf:7c:c1:35:f6:06:1c:2e:2a:c3:d2:fc:
         43:50:1a:51:07:32:2d:dd:10:84:5e:b1:4b:b6:c9:fd:ae:17:
         af:02:b0:07:85:fd:c5:63:dc:d4:78:5a:b8:bf:1b:81:13:98:
         39:a1:4b:c1:6c:12:4a:71:af:cb:20:a2:07:4f:c8:1c:bc:7f:
         77:66:00:7d:17:52:f9:43:b3:50:3f:07:2d:d2:04:79:58:40:
         6d:23:c4:1e:b0:48:8c:07:92:35:7d:0c:f9:e1:5a:61:bf:18:
         e8:0d:41:e7:a3:59:c1:30:f5:49:36:c5:73:94:fc:dd:e4:df:
         8c:94:fb:3c:dc:3f:38:55:dc:83:b6:91:f1:c4:71:e7:c9:36:
         99:60:09:4c:e6:9b:d7:d3:1a:9d:63:7b:4a:8a:6c:68:22:5c:
         34:70:d4:29:62:88:c6:e1:49:17:af:70:b8:62:4d:1e:4f:d4:
         a1:6a:eb:ac:fe:d0:7d:87:4b:6c:27:47:09:42:07:a9:e9:b2:
         66:3f:cc:02:f2:5e:0e:ac:56:fa:f5:68:86:f1:d8:83:67:7b:
         71:37:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:41 2025 by rpki-client