Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File:                     lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier:          CnAYqjwwQYI210pJhVHcDJUfRffRGs80rmYjrcb8xMY=
Subject key identifier:   CF:2D:99:30:A2:18:D8:6B:DB:45:D4:4E:A7:20:79:26:BD:F8:B5:26
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number:          B0
Signing time:             Sat 29 Mar 2025 05:26:52 +0000
Manifest this update:     Sat 29 Mar 2025 05:26:52 +0000
Manifest next update:     Sat 05 Apr 2025 05:26:52 +0000
Files and hashes:         1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: FevaMp/bGldQAe/SNLELI0/6GWFuGnjer6jN/nHmFYA=)
                          2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: 2Jk6NkRGMZVyLJ5lD/V9WaUiK9h9DfnBbBByEKgktvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E
        Validity
            Not Before: Mar 29 05:26:52 2025 GMT
            Not After : Apr  5 05:26:52 2025 GMT
        Subject: CN=67e7849c-5a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:6b:0f:29:a2:51:98:ba:90:66:65:00:35:
                    86:55:f0:7d:a2:bb:84:ab:c8:59:37:52:ca:e5:d9:
                    8b:a8:b4:02:b2:fc:49:60:43:2f:bf:e6:15:79:f5:
                    87:ba:85:2c:9c:c6:bf:dd:1b:3c:39:f7:71:29:ca:
                    bb:a3:7f:32:c5:34:b9:54:63:47:46:61:c7:e6:ad:
                    1b:95:51:a0:22:c3:ae:e6:da:bf:36:e5:40:b1:2d:
                    fa:3e:80:d4:61:cf:3a:35:94:2b:9d:b5:6f:2a:3c:
                    fc:59:7c:e9:47:81:d7:4f:fb:40:1e:e0:65:d4:e1:
                    27:97:30:ea:74:65:cd:c3:e1:d0:5b:dd:4b:ed:f6:
                    b4:fc:c8:bc:0d:8c:ec:0e:37:25:99:23:4a:3e:23:
                    4b:1b:e3:3e:09:55:b4:92:e4:c8:e0:c5:11:2e:55:
                    01:ff:39:88:24:36:28:7c:3f:ec:66:44:b0:2b:79:
                    1c:d6:f2:dc:ce:dc:9f:2b:26:9e:57:db:67:ef:8a:
                    f4:76:ee:70:c1:a6:d6:a5:04:ce:2c:14:00:84:d5:
                    f3:f0:15:4d:70:aa:1b:41:69:df:0f:4d:f5:94:91:
                    b4:cf:7a:9b:9d:93:a5:83:88:99:19:61:ca:48:e3:
                    c2:bf:eb:3d:82:a8:7d:01:9e:67:2c:45:c0:82:6b:
                    eb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:99:30:A2:18:D8:6B:DB:45:D4:4E:A7:20:79:26:BD:F8:B5:26
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:84:9f:28:3b:89:da:49:12:49:ba:ec:4a:10:89:db:57:4b:
         43:dc:4c:92:ef:87:9b:85:e9:7b:1b:38:25:64:6b:85:23:c6:
         9e:3a:17:be:ba:95:ef:3f:f3:f2:50:c5:ca:f7:17:a8:e9:2b:
         12:5e:ca:96:bf:17:45:9d:64:45:d9:b3:3f:9d:17:39:09:c0:
         40:05:87:ff:d7:ef:17:29:2c:3c:5f:25:a8:6c:94:f5:10:0c:
         6a:65:f2:7b:bf:5d:0d:8e:95:0f:a1:91:91:c8:c3:a2:dd:fe:
         c7:6b:b1:a8:fb:c6:44:25:73:67:f6:82:0c:df:e7:2e:7c:85:
         0c:b6:24:2a:aa:f6:a9:62:6b:65:8c:80:d6:a7:cb:b5:6f:df:
         d5:fb:72:87:08:de:d1:d3:85:3d:3a:2e:52:b5:a2:ff:f8:d8:
         65:87:b9:aa:8f:a7:61:4a:f8:97:e5:73:21:54:d0:c0:74:e4:
         f5:1e:a8:a4:d0:e0:64:ba:5b:fb:95:78:a6:fe:28:3f:b4:5d:
         02:f6:46:39:75:b3:f8:08:a6:9f:23:97:c3:70:35:79:56:22:
         74:0c:4b:40:b0:87:7c:6b:69:41:dd:a7:b3:54:0d:a0:f0:9e:
         06:0d:f6:0e:15:99:2b:8a:50:f0:dc:90:f0:18:71:c4:0c:5d:
         25:8a:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:02 2025 by rpki-client