Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
File:                     N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft (raw, json)
Hash identifier:          9PhRYbWI5ellMUxzGbBz+1pAAaliudmuse3gIk92LvA=
Subject key identifier:   BD:F7:19:3F:D4:73:98:90:EE:F3:BD:BC:AE:23:DC:B2:00:EA:8B:83
Authority key identifier: 37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84
Certificate issuer:       /CN=A91287DA/serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
Certificate serial:       0682
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
Manifest number:          0676
Signing time:             Fri 30 May 2025 22:32:51 +0000
Manifest this update:     Fri 30 May 2025 22:32:51 +0000
Manifest next update:     Fri 06 Jun 2025 22:32:51 +0000
Files and hashes:         1: N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl (hash: 4n4caW4usmL64WB+HqD/v8Jjr81OF8XWjnFw08VGyno=)
                          2: 9F033492FEAE11ECAA127057C4F9AE02.roa (hash: /Ivo1Zrp1YzA+b2nHOqMIX2KKbB9wOU3QBB4yoafaMw=)
                          3: E7C01CD0804211EC8FFC2242C4F9AE02.roa (hash: UPrIRDJOZBK4JaaA3DogMCcUMvppOSVC+ZBzff7BSvs=)
                          4: 76EF24FE7B2711EBB00AAE16C4F9AE02.roa (hash: 15s9GGtV9r2X3ENjyLsJWCxlo86maWdm8NO5zkuQdRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91287DA, serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
        Validity
            Not Before: May 30 22:32:51 2025 GMT
            Not After : Jun  6 22:32:51 2025 GMT
        Subject: CN=683a3213-da35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:af:44:c1:76:dc:d2:51:bf:62:c0:30:fb:
                    ae:17:d1:02:89:e2:b5:46:9b:ea:6e:9b:c7:64:58:
                    2f:39:e6:88:b7:59:e4:a6:d1:78:a1:b1:9e:af:e3:
                    ea:b5:32:3e:20:dc:f0:92:8d:20:20:e0:97:b1:74:
                    ba:7f:63:2f:e9:25:3e:f4:dd:e3:b4:63:23:43:2b:
                    ad:99:25:9b:30:a3:b9:be:14:ee:e2:e8:26:09:1f:
                    f9:03:04:f5:8c:13:04:10:b2:87:71:39:9a:1d:52:
                    55:2e:98:1f:1c:fa:38:04:fb:e4:1a:fe:63:54:96:
                    e4:57:02:e2:4d:be:16:ae:d7:02:76:dd:d2:df:cc:
                    c0:8c:bb:63:76:4f:50:b6:fe:f9:fe:8b:39:e5:d4:
                    98:3b:88:e1:a8:f1:de:0d:c7:9a:e4:61:34:9e:6b:
                    6d:a6:cb:4b:3d:05:8b:ec:99:56:35:8e:55:0a:1d:
                    c0:50:49:63:fe:0b:93:90:86:f2:53:f1:b5:7d:2a:
                    7d:c8:a4:97:76:2f:31:dd:f8:5f:14:f7:8e:94:d3:
                    e1:df:5c:1d:8d:e6:b8:6b:10:7f:5e:d8:d0:40:77:
                    18:9b:a3:fc:08:68:3f:2a:15:69:4c:da:2f:08:ed:
                    af:bf:2f:49:7c:69:75:87:06:d3:a1:67:ae:ed:c7:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F7:19:3F:D4:73:98:90:EE:F3:BD:BC:AE:23:DC:B2:00:EA:8B:83
            X509v3 Authority Key Identifier:
                keyid:37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:d8:9b:ad:8c:50:70:ff:c5:d9:73:59:75:48:54:e1:52:
         48:62:66:bd:0e:32:f6:9c:88:cc:c5:eb:78:d2:20:f4:ec:74:
         a3:7f:1c:6b:ec:2d:f8:f6:e1:21:1d:5b:18:6b:69:ab:91:ae:
         23:a8:6e:63:6e:b8:49:92:cb:bf:a5:65:fb:ac:e0:c0:1e:13:
         61:60:6d:19:c7:e0:2c:a1:62:b9:0b:d2:1b:0a:dd:f3:12:21:
         07:62:44:67:fe:29:52:5d:d0:cd:fd:c6:a0:fa:3a:7d:3b:43:
         3a:eb:70:24:aa:5f:fb:b1:0e:c7:f5:32:af:76:b5:43:9f:8c:
         9c:c8:c5:50:bc:97:13:cf:1f:e6:75:c0:76:88:40:d9:fd:c7:
         2b:a9:58:f6:61:50:93:65:9f:81:51:e9:89:50:2e:59:1b:be:
         5f:ef:14:72:99:79:af:b1:b5:4d:09:11:39:ca:f9:29:d7:7f:
         4b:9c:ba:1a:b8:7e:67:95:ad:72:23:be:76:70:ab:7f:1c:af:
         0b:e1:22:81:d7:20:0a:40:0d:da:7f:cb:98:f8:95:19:b0:a9:
         2c:09:b1:d2:ae:80:02:00:76:75:26:44:a5:16:5e:db:ea:6e:
         8e:77:b3:67:ff:36:2d:4e:00:b3:de:35:bf:a6:a2:48:ca:d3:
         ef:2a:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:39:17 2025 by rpki-client