Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          fOO8Ux6ODCz2SywcRKIQJ8E1LIz8uNXsWVh2BDaHDxg=
Subject key identifier:   FD:36:DA:F2:98:4C:D9:C4:74:DB:A6:2D:A9:43:E0:BE:7A:6A:4F:31
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       05E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          05DE
Signing time:             Fri 04 Apr 2025 23:05:33 +0000
Manifest this update:     Fri 04 Apr 2025 23:05:33 +0000
Manifest next update:     Fri 11 Apr 2025 23:05:33 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: WjsG3MhCsI9AInNAwyjeDVoV8m2rXs92v/OV9/j/bqg=)
                          2: 2496CA7E557E11EF8AC47D15C4F9AE02.roa (hash: Si88NstkAfEiBBnqBOs/DXYPITXuyjYlx7/3WbtXefA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508 (0x5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D
        Validity
            Not Before: Apr  4 23:05:33 2025 GMT
            Not After : Apr 11 23:05:33 2025 GMT
        Subject: CN=67f065bd-9ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:89:f5:85:0b:83:e2:e3:74:b0:0a:97:5e:
                    40:ee:1a:ac:82:21:f0:30:80:77:e8:98:ac:b2:b1:
                    a4:66:d1:78:00:52:dc:53:54:22:9d:ce:9e:0e:d9:
                    35:b5:e0:ba:84:fe:34:fc:ab:61:29:d9:80:9e:15:
                    b2:98:06:1d:19:90:08:04:00:3a:c0:9e:c5:69:66:
                    eb:c4:2d:8d:d9:4c:93:2c:61:4b:a1:b7:5d:6f:44:
                    2b:09:51:b5:25:be:70:4b:a4:5c:7a:1e:d1:f7:5b:
                    bd:c6:4f:86:94:7b:99:6e:a8:e0:ec:ea:9e:de:b8:
                    dd:6c:81:7e:a9:23:c3:2d:08:43:69:b0:ba:a2:bc:
                    12:8a:c8:59:e1:c5:4d:c0:13:fb:c5:99:84:3e:30:
                    db:0e:bf:40:5f:60:d9:1a:33:8a:47:e1:82:10:c1:
                    e3:5f:d0:25:7e:ab:d1:f2:58:a6:ae:a9:69:23:ec:
                    4b:62:b2:ef:ee:d0:c8:5b:63:4f:e8:73:5b:c2:e5:
                    ad:4e:8b:23:97:1e:9a:8e:f5:25:01:58:c4:9e:40:
                    50:28:e5:ec:af:b2:2c:a5:8f:ef:54:27:8f:9e:0d:
                    15:94:fb:61:c6:76:55:f7:b1:55:c0:5b:c7:84:87:
                    c5:fc:82:d4:86:f3:12:9d:27:91:5c:cf:f3:e6:89:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:DA:F2:98:4C:D9:C4:74:DB:A6:2D:A9:43:E0:BE:7A:6A:4F:31
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:e5:34:bb:fd:d9:b9:cb:26:45:fa:ae:71:b8:7b:e7:65:
         f2:09:6b:f3:8f:cd:6c:e6:12:36:05:1a:d8:f9:92:b3:d8:78:
         a0:63:d9:44:e7:6a:c2:8a:10:41:40:3d:37:8c:07:c3:98:d0:
         0f:08:d1:5d:77:2c:ee:51:4b:79:20:9b:0b:98:54:39:47:3c:
         16:48:f1:4a:0a:89:cf:b4:4a:76:6b:60:e2:c6:d3:18:0c:f5:
         8f:d8:c2:47:c8:82:84:cc:7e:70:bb:20:79:88:92:a9:54:46:
         ab:96:6f:c0:d8:00:b9:88:da:54:9b:a5:67:1f:ca:ba:90:d7:
         6a:d8:ba:ce:3e:e3:38:08:01:25:f5:07:73:86:09:07:c0:e0:
         e7:ce:db:04:44:88:94:a0:37:6a:b7:08:f1:24:44:b0:74:cc:
         63:a0:c0:ac:7d:0a:10:c9:49:f1:60:13:97:14:71:b5:3e:b6:
         c6:95:9f:c8:73:75:c9:35:de:26:39:0c:d3:b5:25:61:23:a8:
         5b:4c:a0:20:5a:e3:d2:0f:3a:82:45:58:f0:b2:7e:a4:d7:7c:
         0b:73:bb:e9:01:17:e4:ea:65:c2:f9:fb:4e:fb:23:02:5b:31:
         77:06:3d:00:63:22:97:07:58:5c:2d:26:fd:96:eb:62:ba:47:
         ad:96:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:19:20 2025 by rpki-client