Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
File:                     5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json)
Hash identifier:          Jsc4gXyu/drCw8YukreLCg6NangQJE0vwcVIXIdCVbA=
Subject key identifier:   F5:3A:52:AA:6E:A8:FC:EE:73:A8:B8:FB:53:CF:89:D6:AC:2E:74:3D
Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Certificate issuer:       /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
Manifest number:          012F
Signing time:             Mon 09 Jun 2025 03:37:47 +0000
Manifest this update:     Mon 09 Jun 2025 03:37:47 +0000
Manifest next update:     Mon 16 Jun 2025 03:37:47 +0000
Files and hashes:         1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: hH1P7tNvrJkqsHarOSluoCwVUQsUnPWJ/xwIUm4szX4=)
                          2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: VIpTaiDF//T8jK4C9n6iwAX2TMSKtXEtM34C7KtsS6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
                          rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
        Validity
            Not Before: Jun  9 03:37:47 2025 GMT
            Not After : Jun 16 03:37:47 2025 GMT
        Subject: CN=6846570b-13ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:70:35:4f:9c:13:38:6f:46:29:c7:6d:7f:
                    8c:dc:34:18:37:7a:32:62:88:96:36:49:74:b5:cd:
                    80:b0:55:13:28:f9:64:4e:74:15:6b:75:7a:c5:d6:
                    4f:63:95:78:be:d1:27:c1:24:e5:d5:15:bf:48:4b:
                    8c:42:87:3a:c4:02:45:2d:e1:35:03:7e:04:ae:c4:
                    f3:76:a9:e0:1e:69:08:26:36:51:41:23:c5:69:de:
                    63:94:2a:a4:1d:16:fd:b4:5d:be:ca:88:3c:1e:14:
                    ce:af:19:3e:ba:6c:37:56:54:78:f9:54:13:42:bc:
                    45:2e:1d:53:e0:d4:61:7f:2f:a6:60:3d:cc:ba:1a:
                    9f:9f:a2:25:3f:6c:43:25:7c:f5:a4:93:a2:d0:de:
                    60:4e:ac:3a:d8:96:df:50:f8:04:3b:96:93:6e:89:
                    f6:c8:fb:68:3f:39:8f:3c:b3:0f:24:c2:53:2a:6b:
                    de:28:d3:e8:09:c1:ae:6e:96:f5:bc:15:7b:90:cf:
                    10:97:56:2a:d4:1e:dc:63:d2:7d:f5:01:bd:ed:27:
                    39:50:f8:35:f1:6b:a5:e0:c7:b8:ca:07:84:0f:ae:
                    d8:80:38:a1:df:17:52:03:89:9c:00:68:5a:39:41:
                    ea:6b:a0:ff:6c:49:1a:2a:cc:64:9e:1c:c7:f9:e1:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3A:52:AA:6E:A8:FC:EE:73:A8:B8:FB:53:CF:89:D6:AC:2E:74:3D
            X509v3 Authority Key Identifier:
                keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:65:80:e0:1e:68:ce:8a:fb:80:ad:01:e8:0f:a6:44:c2:
         c0:f0:a8:5e:24:e0:85:50:a5:e5:30:6d:3d:cc:39:e9:d6:bd:
         85:48:7f:be:02:7d:5e:68:22:08:d1:74:25:6f:0b:d9:52:af:
         01:82:c2:5a:29:c0:dd:f0:66:09:90:ad:31:1e:de:6d:46:27:
         dd:25:b7:de:81:21:d6:a8:d8:9d:29:01:b1:66:7a:35:db:a2:
         17:cd:9e:2d:43:8f:87:40:d0:9c:62:dd:ba:64:54:c1:00:51:
         b6:55:b6:47:2f:b0:7f:42:c0:4e:b2:67:1b:47:b5:34:fc:b2:
         40:bd:3b:70:6d:00:39:35:3d:36:dd:e9:15:ee:81:d4:d9:43:
         37:a6:3d:a2:26:21:3f:a5:1c:86:4b:8e:42:95:d7:8b:cb:59:
         35:7f:c7:f1:4c:f6:cc:01:1a:c0:2e:a0:25:7b:d8:c4:2a:2c:
         b0:83:26:82:4f:95:d8:ef:d7:3a:ca:18:ce:de:17:a1:af:c2:
         cc:0e:c7:52:05:a8:ae:7c:b4:2f:8f:12:d4:98:50:18:25:f0:
         81:53:f3:9d:f7:80:79:31:df:de:99:de:d0:4d:d1:ae:b8:f6:
         e8:09:6c:24:cb:a0:7b:60:4f:4d:54:19:ef:e9:2b:cf:82:dc:
         d7:0d:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:22:14 2025 by rpki-client