Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
File:                     y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json)
Hash identifier:          KVWDg05aw9qrrQLdw88Y1IFK6D+mft0nv2qvwXZfzyw=
Subject key identifier:   6B:33:83:B7:15:33:38:92:C9:A0:AB:87:53:39:9F:6C:98:31:8F:D8
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Certificate issuer:       /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial:       0BDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
Manifest number:          0BD4
Signing time:             Tue 08 Apr 2025 18:44:41 +0000
Manifest this update:     Tue 08 Apr 2025 18:44:40 +0000
Manifest next update:     Tue 15 Apr 2025 18:44:40 +0000
Files and hashes:         1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: rVEGDwu6wyyEUY3gaXJL/U/SFRIy/aLjKpmTK9Kv8cE=)
                          2: 65866C4815D111EABE986319C4F9AE02.roa (hash: ky275MRbaVtyIuJOfhdH9mQsA448nNjhkiKWj0SgjYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
                          rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 18:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3036 (0xbdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB6AC
        Validity
            Not Before: Apr  8 18:44:40 2025 GMT
            Not After : Apr 15 18:44:40 2025 GMT
        Subject: CN=67f56e99-736d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:7b:9b:8b:e0:89:97:1c:32:62:07:77:41:
                    96:d0:98:0c:40:d8:cb:fb:cf:27:bb:f6:6b:6e:13:
                    c7:f0:36:b5:c2:66:ad:9e:7d:60:fe:5d:38:ff:a7:
                    9c:69:59:f8:53:24:24:8f:95:73:4e:da:b2:77:5e:
                    8a:f1:b0:58:54:0e:c2:62:e6:63:2e:52:d6:c7:a5:
                    73:3c:12:8c:9d:6d:77:50:db:60:9e:39:9b:38:fc:
                    bf:e1:91:89:58:99:19:77:37:8f:c6:09:42:b1:81:
                    38:f8:28:df:2e:44:e3:82:8e:c2:d9:8c:24:59:a4:
                    f4:de:b9:1c:10:09:3f:39:e9:e0:b0:1b:af:5a:54:
                    22:6d:56:8a:38:b4:f3:ec:e5:64:63:a4:53:3b:7b:
                    42:c4:d6:5b:f6:24:92:6f:28:1f:83:fd:6b:71:ac:
                    91:ee:12:31:fe:d8:15:04:4b:91:6c:b7:5c:28:57:
                    53:75:f4:14:57:b4:69:37:b6:e1:fb:65:b4:c5:7b:
                    5d:4e:4c:a8:5f:e0:0c:bb:04:75:ad:77:96:89:83:
                    ad:08:fa:d0:2e:5d:09:99:2f:5f:af:82:83:5f:3f:
                    dd:29:7c:72:82:25:10:50:07:30:7a:4f:34:b8:a8:
                    4d:e9:5f:76:2c:4d:92:a7:86:b1:50:15:23:90:ce:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:83:B7:15:33:38:92:C9:A0:AB:87:53:39:9F:6C:98:31:8F:D8
            X509v3 Authority Key Identifier:
                keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:b8:5a:26:5e:be:de:30:df:67:a9:d1:13:cd:b9:3c:7c:
         01:98:29:dd:17:4a:1e:b8:95:fa:44:3a:99:b9:1c:e8:ef:55:
         cf:0c:91:88:76:56:00:8e:b9:1c:68:ce:c2:73:9e:22:9c:21:
         2e:00:78:9f:ba:c1:17:12:94:ba:e2:aa:a3:21:81:39:09:e9:
         5f:d7:49:bb:f7:d0:7b:64:1c:72:48:e0:0f:c8:05:6c:ce:16:
         c2:2f:b3:a1:dc:b7:36:b5:a8:06:c8:27:b4:69:f6:11:77:3c:
         7c:48:2a:39:26:71:3d:55:6a:ac:b3:ae:0d:01:b5:70:d6:a7:
         f5:59:6f:9d:28:cb:2b:d5:5f:dc:7b:5e:db:ad:22:a5:30:bf:
         c9:54:d4:8d:d1:70:a1:13:0c:77:24:f0:e8:7a:05:6b:96:15:
         09:08:eb:d3:26:bb:d6:f3:c0:25:6b:50:33:d7:10:cf:3c:c5:
         a7:e1:2d:68:df:01:d5:08:8a:a0:04:fc:6d:a7:fb:c8:17:90:
         92:55:a0:df:2f:f3:2c:51:b8:34:35:ee:8f:eb:89:e1:7f:69:
         15:8f:aa:42:24:44:dd:19:8b:8a:b3:f8:01:3f:46:32:22:da:
         1b:09:6c:cc:73:41:d6:75:e5:30:de:4f:89:08:25:6b:3b:88:
         6e:ea:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:29:01 2025 by rpki-client