Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          8mZDd3iXJncMJTtrD/iLM0Ict0Wu4SBhwkO82LWjZTs=
Subject key identifier:   5A:BA:83:25:B4:94:62:61:5A:12:B1:56:3E:21:C2:5D:02:0F:71:73
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1B10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1AC6
Signing time:             Fri 18 Apr 2025 16:26:28 +0000
Manifest this update:     Fri 18 Apr 2025 16:26:27 +0000
Manifest next update:     Fri 25 Apr 2025 16:26:27 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: N0yx1omhfLV3aCgo+UGQB7ONSanFsMgM66wP4vMLnUM=)
                          2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: 2FdeFk6BkACA2x84QQhSx1d4f7hfVmpEG3T9lZ0KKs8=)
                          3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA=)
                          5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: EBfpSajs+p8kmDGMcsROIkdAjLRuCAc9bxp8aA0ImwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 16:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6928 (0x1b10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Apr 18 16:26:27 2025 GMT
            Not After : Apr 25 16:26:27 2025 GMT
        Subject: CN=68027d33-4dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:a9:e1:b3:6e:02:5a:5d:ec:d6:f8:f8:ac:
                    c8:d8:0d:00:ea:e6:f0:81:2b:6f:d4:cb:e5:7c:a4:
                    ba:e0:22:26:00:c7:d2:bf:df:27:92:95:51:b5:25:
                    90:e8:55:06:b9:85:d8:9b:b3:2f:f6:e3:3a:88:69:
                    ab:d7:3c:90:7a:44:4e:c1:33:9f:5b:18:30:fe:48:
                    3f:4c:39:16:ce:29:51:e2:80:e1:13:7d:39:85:5d:
                    9a:6d:77:ac:e1:81:19:54:8d:4f:5a:bf:8d:b2:1b:
                    60:d2:f9:55:17:89:3e:ec:11:08:8e:07:4b:97:b6:
                    60:6e:31:50:51:25:e7:a6:35:fe:93:97:03:84:f9:
                    f8:b0:76:bf:5f:cb:88:cf:b2:77:dc:cf:71:99:17:
                    9f:96:2d:18:64:3f:e7:fa:91:29:b6:7a:ea:8a:58:
                    69:8f:e1:d3:ff:ad:0e:be:5d:0a:ca:b5:0c:0c:f2:
                    74:0c:02:b8:1b:91:42:32:67:dd:f4:6f:17:4b:c2:
                    ba:96:87:91:8e:ae:c4:b3:c4:55:22:99:3c:37:90:
                    38:b3:97:5d:0a:d8:45:11:7f:5f:02:76:c3:cc:e4:
                    c3:59:5f:39:d7:df:e5:18:c0:92:2c:87:37:b5:0e:
                    47:5e:17:96:4a:96:4e:cd:e7:73:e0:61:39:ba:a5:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BA:83:25:B4:94:62:61:5A:12:B1:56:3E:21:C2:5D:02:0F:71:73
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:45:e8:b9:7c:c5:c7:a7:ee:95:45:a2:28:e7:11:6a:d4:ad:
         3d:08:f9:42:2d:4d:5b:ea:6a:4c:72:ad:50:fe:fe:96:03:15:
         a0:cd:bb:ad:2a:90:cd:89:fc:e2:60:cf:7f:10:c7:7e:72:e7:
         c7:c6:bd:a7:b7:65:06:bf:9d:d5:2e:39:16:95:22:f4:d5:5e:
         91:7c:f3:e0:a3:3d:81:84:9a:6d:af:0e:b3:38:83:44:47:9e:
         51:4f:06:a7:af:1f:d3:cf:27:b4:61:40:f3:70:e8:64:ac:4d:
         d5:02:93:77:38:dc:85:59:ed:0e:6c:c6:ed:08:e8:07:32:7d:
         31:0d:b4:6b:4f:61:dd:a5:37:16:7f:e9:4c:56:c0:05:64:5a:
         08:41:b8:92:29:9c:16:6d:2e:8b:7c:15:d7:93:86:47:eb:2c:
         c3:7f:55:14:0f:56:dd:5e:18:15:a5:a1:74:a4:ce:dc:a7:09:
         23:f0:14:4d:30:c8:bb:d1:d5:58:53:73:13:07:43:04:53:52:
         7e:0f:ac:a8:25:a1:0b:4c:6c:d3:4c:62:e0:db:f0:ec:53:85:
         db:e3:f3:51:65:f3:5d:ec:15:ed:3f:a8:4c:f9:36:1f:2c:9e:
         33:4e:51:c2:4f:63:61:eb:59:23:c4:72:8e:3e:fe:75:5e:c6:
         54:dc:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:45 2025 by rpki-client