Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
File:                     53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json)
Hash identifier:          36IBifKXiU2TuZMRQTLKmh+ltlOqOe8WSqNajK4q+/Y=
Subject key identifier:   BD:B6:FF:A5:8C:69:EA:26:56:33:8D:0F:C8:E4:2A:56:3E:33:63:CC
Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29
Certificate issuer:       /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
Certificate serial:       0C58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
Manifest number:          0C52
Signing time:             Fri 18 Jul 2025 18:36:49 +0000
Manifest this update:     Fri 18 Jul 2025 18:36:48 +0000
Manifest next update:     Fri 25 Jul 2025 18:36:48 +0000
Files and hashes:         1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: 7lnuCSlCajSl4ij2Uo+dDnM3ReCMt3hfjDDh3bftAL0=)
                          2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 18:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
        Validity
            Not Before: Jul 18 18:36:48 2025 GMT
            Not After : Jul 25 18:36:48 2025 GMT
        Subject: CN=687a9440-6a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:21:85:b3:18:d8:17:1d:b4:e1:a4:dc:91:
                    db:1e:99:89:6b:8c:fc:86:b5:ee:cb:9e:8d:89:62:
                    d7:98:0e:de:aa:fe:6e:7c:99:c3:66:d1:2d:3a:1e:
                    ce:91:e9:65:ca:7b:09:59:0b:4d:cd:44:6b:f8:51:
                    56:9c:e7:1f:f3:ad:8e:71:fb:e1:d6:fc:32:fc:a4:
                    ae:f6:79:b0:31:6e:20:3b:fd:69:bc:14:cd:ec:39:
                    ef:0d:a5:2c:07:43:e6:e8:dc:4b:a0:c9:50:09:fa:
                    f1:96:12:f1:c7:ba:4b:82:d5:ef:13:b5:11:04:e0:
                    9a:84:37:f1:6f:0e:db:e5:e0:c3:83:7c:d2:ea:e7:
                    c3:16:98:eb:71:8a:79:55:ad:90:17:68:91:0e:7e:
                    bd:a1:ac:8f:be:39:55:d1:7e:c5:20:ab:7f:0f:44:
                    7f:24:14:05:34:99:31:45:76:e3:77:00:ba:a0:e8:
                    73:b6:57:49:f4:cc:27:4e:d6:94:15:9b:c7:56:2f:
                    d2:ce:3e:7b:3c:e8:6f:ef:3f:a8:71:e5:87:26:96:
                    25:d7:c4:f6:ab:8b:b2:61:84:13:3d:bd:fa:f5:38:
                    ff:e0:66:58:74:26:ab:d5:a2:be:9a:aa:6e:f7:db:
                    e0:1e:f3:b6:f5:29:47:2d:13:45:b7:07:ca:80:49:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B6:FF:A5:8C:69:EA:26:56:33:8D:0F:C8:E4:2A:56:3E:33:63:CC
            X509v3 Authority Key Identifier:
                keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5e:6e:ea:b6:df:61:6b:f8:1a:75:df:3c:a6:6b:50:d9:73:
         04:e4:72:b3:42:11:4c:24:63:cf:89:06:ab:8f:10:44:8a:ee:
         a1:bb:b2:0c:3e:17:99:8d:9d:fd:28:b1:7b:d7:67:ef:de:44:
         07:0d:89:e9:d0:6a:d7:67:f0:3e:18:4e:dd:4b:1c:50:9f:44:
         57:e5:3e:6a:9c:35:78:70:7f:76:0b:b4:35:ca:9b:80:f3:8f:
         8e:db:f3:ab:7a:29:2c:c4:e5:36:35:86:c8:8d:10:3f:4c:60:
         68:cd:ea:22:20:02:60:1b:7b:a5:39:5a:52:b1:1b:fa:b0:3d:
         24:ed:8d:ec:d7:71:18:74:84:22:2a:1c:03:68:88:7e:15:c8:
         8a:71:75:aa:1a:16:cb:3a:3c:eb:29:ea:7f:3c:24:ab:23:04:
         ae:0e:cb:f2:55:41:f2:04:e6:7a:ea:26:3a:03:f1:a2:f6:f6:
         1f:f3:5e:94:e8:e9:24:cf:da:4d:b3:87:c3:25:db:89:f6:cd:
         4a:44:2c:87:1d:f4:0c:4a:ac:c2:41:a6:43:ba:51:95:a6:01:
         80:08:d8:bc:52:71:ec:4f:74:c3:19:32:c0:86:3f:cb:c0:89:
         87:4c:18:98:a3:16:91:3e:e7:ef:fa:73:55:6b:61:72:4c:f8:
         99:97:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:45:36 2025 by rpki-client