Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
File:                     5EZZ6m_c00PGwef_0BSlsHgYlos.mft (raw, json)
Hash identifier:          EHK9LUf3911O83OT76McWm7RU4s8UqPpQHfmLjAi6CE=
Subject key identifier:   72:FD:64:D1:66:3A:04:90:28:8B:7F:70:01:53:EC:7F:E6:10:B7:76
Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B
Certificate issuer:       /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
Manifest number:          06CD
Signing time:             Fri 18 Jul 2025 22:21:36 +0000
Manifest this update:     Fri 18 Jul 2025 22:21:36 +0000
Manifest next update:     Fri 25 Jul 2025 22:21:36 +0000
Files and hashes:         1: 5EZZ6m_c00PGwef_0BSlsHgYlos.crl (hash: m5ZePfnD6XBne9ODtLJMdQe6BHbYokPQR5cPmvjd/io=)
                          2: C8FB0DB8616D11EB928F0250C4F9AE02.roa (hash: wvBpCoANMp6HM7/0VPGZvZaF4FC0qm23TRsKibzPLZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl
                          rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B
        Validity
            Not Before: Jul 18 22:21:36 2025 GMT
            Not After : Jul 25 22:21:36 2025 GMT
        Subject: CN=687ac8f0-cc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:2d:69:a5:50:94:6f:9e:9a:f1:7a:d6:9e:
                    38:76:c3:2e:b7:dc:0c:aa:e9:ea:d2:71:20:91:94:
                    76:02:14:fd:ac:ea:e5:42:ed:e3:2d:0a:bc:eb:df:
                    db:b9:25:12:43:30:2e:06:72:ca:02:cf:68:18:69:
                    6a:15:34:33:cd:62:f3:23:73:e3:db:b3:20:f1:25:
                    4b:26:7c:82:9e:98:2f:4f:99:a3:07:da:a3:de:2b:
                    af:98:4e:7b:43:8d:ea:2a:1b:af:a4:78:87:a2:9c:
                    eb:ec:38:2c:b0:ba:59:9d:70:cf:24:8b:bb:6d:06:
                    ff:27:d9:86:a7:98:30:d9:9a:5c:ec:a3:63:20:2d:
                    58:fd:d5:56:6f:2b:57:84:bb:f6:65:a6:f1:bb:73:
                    de:82:90:71:ef:8e:71:0d:5d:80:1d:54:05:47:98:
                    2d:8e:17:b1:59:06:64:65:1b:14:11:a4:39:92:94:
                    0e:97:93:40:ab:b9:5e:52:f8:b9:10:a5:4d:49:ea:
                    1b:95:1f:4e:09:19:e7:0a:be:8d:bb:e2:1d:9d:29:
                    95:1a:0d:f9:e2:ca:ab:f1:25:71:bc:76:2d:40:cc:
                    fe:da:4e:68:6d:d9:0f:3c:09:f6:8a:80:c1:72:e6:
                    d9:9a:c1:de:c3:fb:d7:b6:11:97:e3:55:a8:64:60:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:64:D1:66:3A:04:90:28:8B:7F:70:01:53:EC:7F:E6:10:B7:76
            X509v3 Authority Key Identifier:
                keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:c4:62:dd:58:53:8a:8e:29:77:6e:1b:c1:de:2c:dd:d2:
         39:d4:7b:c1:28:6e:b0:db:22:46:77:51:b9:ef:a2:40:db:25:
         1a:af:c5:42:7f:35:68:b0:4a:c3:4e:e4:19:a8:03:78:e0:0d:
         ce:9c:49:e1:c0:0e:aa:49:cd:66:79:f2:1d:80:27:eb:f3:4f:
         6a:2c:40:85:83:25:4c:fa:70:25:31:52:0d:64:40:dc:34:bd:
         d5:2a:4f:4a:ae:96:a8:68:aa:39:f5:a0:cf:b6:fa:ec:10:cb:
         01:50:38:9e:72:76:1f:31:0d:40:1a:9d:1a:4b:c2:3c:8a:78:
         66:33:ca:7f:34:9f:2d:8d:20:ca:2f:e2:c0:be:e9:20:22:4a:
         65:92:4f:8a:d9:b1:db:53:31:49:d7:db:40:f6:83:4d:a0:f6:
         15:6a:b9:64:c5:48:79:d3:00:f1:2d:48:b5:ff:ee:08:71:20:
         d0:ed:e9:f9:e4:72:21:b0:97:68:8c:4b:15:45:40:dc:f6:01:
         e8:87:7b:21:5c:e6:6c:d5:ff:4c:84:73:6f:7d:e9:4d:94:e2:
         2c:94:79:07:a2:d0:77:4a:1a:dc:11:fd:93:15:b0:97:b4:2f:
         70:10:40:fb:52:de:fa:41:7d:80:68:14:f9:9e:8f:01:31:73:
         3f:48:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 04:22:58 2025 by rpki-client