Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File:                     Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier:          If8tzgOqif320OesUHtCRE148Dh9fjobdc4pzXm7/Yk=
Subject key identifier:   AD:B0:9D:5F:29:4D:22:F2:02:D3:65:1B:24:28:D9:3F:63:3A:A3:44
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer:       /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial:       251E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number:          2510
Signing time:             Thu 08 May 2025 15:45:02 +0000
Manifest this update:     Thu 08 May 2025 15:45:02 +0000
Manifest next update:     Thu 15 May 2025 15:45:02 +0000
Files and hashes:         1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: IhTqtAWUWMZR6KLVrn66QmHD6+ec2hAit+mvGtSrwR8=)
                          2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: bILzWIi7SfN0oZ29P+We7rkWjU1abIhmL+TRmVZttNg=)
                          3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: A+fjTwtG6/7wteTJpdAw9ZNsTS7E+yeIkAmgl1S9yHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 15:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9502 (0x251e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
        Validity
            Not Before: May  8 15:45:02 2025 GMT
            Not After : May 15 15:45:02 2025 GMT
        Subject: CN=681cd17e-fb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:81:c6:e6:b0:15:4c:7b:fe:77:0b:22:68:
                    9f:39:7d:2a:71:6f:91:2f:c5:a8:a3:b5:29:09:49:
                    6c:d8:37:e4:af:b3:f7:97:1c:7f:5c:cf:ca:07:ea:
                    e0:fa:77:ca:0f:04:18:01:0e:99:26:5b:3f:ae:f9:
                    75:23:1a:bd:fb:76:a7:68:2e:0a:50:f8:bd:72:bf:
                    66:69:a4:9e:cf:b7:77:79:99:ce:d4:d1:39:54:37:
                    74:34:38:18:b0:95:db:c5:0c:18:9a:43:d1:76:67:
                    6d:8b:81:ef:a3:c5:e7:f3:c9:aa:d1:56:dd:c2:b2:
                    bc:77:03:fe:f4:c8:8d:48:c7:91:0d:21:c8:11:bb:
                    28:ab:51:e9:28:aa:21:d4:1b:79:62:0c:65:4a:36:
                    34:6d:c2:ed:d7:82:ef:76:f7:d2:8a:f6:01:4b:3e:
                    91:23:f6:dc:ad:7e:92:c5:e1:39:f5:9a:7a:03:3c:
                    2a:37:4a:d7:48:ec:ff:c7:00:6c:e3:0e:02:73:da:
                    2b:02:f0:42:ad:16:06:6b:87:0b:c3:c0:77:a2:f5:
                    fa:1f:d0:26:c1:b3:21:a6:97:ef:76:1a:29:46:10:
                    33:28:4e:93:15:c6:e1:b4:80:2d:8a:95:a6:00:36:
                    48:e6:63:cf:ae:2f:be:4d:e0:69:34:dd:3e:79:af:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:9D:5F:29:4D:22:F2:02:D3:65:1B:24:28:D9:3F:63:3A:A3:44
            X509v3 Authority Key Identifier:
                keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:1f:5d:64:0c:54:ec:34:5a:b9:64:69:00:7f:ae:8f:04:
         c7:88:eb:a3:6f:e1:d1:d5:6d:fa:44:d2:02:dd:f3:ec:8f:d2:
         06:57:fe:79:bc:ca:07:9d:54:68:bc:fb:4a:66:89:f5:18:e6:
         70:b7:98:a6:0b:37:d3:2d:12:a4:38:c7:41:87:fb:a9:da:86:
         4d:a1:55:e1:47:88:cd:39:df:d5:d3:be:de:0e:a1:a0:9d:bf:
         15:5b:db:0b:0c:50:86:ac:67:52:26:18:01:e2:e9:29:33:33:
         b0:fa:02:a3:9b:40:6f:25:63:a3:80:54:82:74:72:0a:98:02:
         1b:90:fc:f0:2b:2f:af:f2:d2:96:03:fd:1a:c8:8d:b8:f8:98:
         45:0e:74:db:5d:25:6a:5c:1a:fd:68:45:18:7d:37:c6:01:3f:
         e0:0f:1f:e1:a2:c4:71:a1:8b:76:68:f6:f8:60:7f:28:ec:12:
         50:1f:5e:5f:e0:26:0e:7f:36:bc:96:75:79:8f:bb:ac:cf:fb:
         3d:1d:f3:1b:d3:f5:18:7d:51:38:b9:45:82:c4:53:0d:dd:11:
         a5:ff:0c:62:66:49:26:67:d9:bb:2d:47:47:cc:f6:73:3d:f8:
         8a:ec:7a:a5:8c:c9:aa:51:9e:a2:d9:f8:ce:72:d9:8d:a8:b5:
         87:55:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:27:45 2025 by rpki-client