Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File:                     5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier:          5Timkqa1ZdJM3w2wNVxCvvwV2POAA8q9j8NPEbmx5ic=
Subject key identifier:   C1:D9:C9:8B:84:18:A8:19:93:4E:A1:B8:44:C6:3B:2B:B7:ED:48:4A
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer:       /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial:       0310
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number:          029D
Signing time:             Thu 05 Jun 2025 01:43:54 +0000
Manifest this update:     Thu 05 Jun 2025 01:43:53 +0000
Manifest next update:     Thu 12 Jun 2025 01:43:53 +0000
Files and hashes:         1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: o5AGdR4VGkemiC34D17PW9m5BrAA+sNMeD8pYX6EG8U=)
                          2: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: Go+fcAH12BxWvxt8qaSo8+7Glvp6WIQoRE1nDrD2I4U=)
                          3: A43C91FC53D311EFBB77311CC4F9AE02.roa (hash: D//lZUHccjSWmVyDEJeznhesSScUiuT2tBwunf9QN5o=)
                          4: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: tFX2mHpCejE1T1hhbkEHTKBu8FY85bbr60BmVvCm9y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
                          rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 01:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
        Validity
            Not Before: Jun  5 01:43:53 2025 GMT
            Not After : Jun 12 01:43:53 2025 GMT
        Subject: CN=6840f65a-b72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:1d:00:e6:5e:c2:6d:b5:73:47:ec:e0:46:
                    bd:5a:31:c8:43:74:5f:4e:57:a6:53:30:14:16:04:
                    1a:fb:e5:1d:05:ba:24:ef:56:ca:23:ef:9f:8f:3b:
                    1d:40:e1:43:85:0f:9f:9c:2a:82:49:60:f5:e1:f3:
                    ca:1e:6b:fd:f1:a4:d5:a2:58:d4:b2:06:27:6a:07:
                    ea:1e:2a:90:e8:71:3a:cf:43:e2:a7:03:39:a5:05:
                    8a:9e:8a:df:6c:76:b9:1c:37:24:76:48:e0:92:a5:
                    6b:43:e0:f9:c3:b7:72:2c:43:96:7f:2b:79:c3:2d:
                    d6:a7:26:22:94:07:5d:57:15:7a:f6:9d:cb:e6:32:
                    7d:31:e1:a2:b9:84:30:7c:5f:8b:0c:8c:09:16:e1:
                    86:20:40:87:ef:88:21:90:33:94:59:d9:66:d6:25:
                    54:b3:f9:a0:3d:a3:64:4d:48:e2:15:ff:5f:1d:d7:
                    ad:7e:ac:68:97:2b:ce:2b:f6:04:b2:03:29:92:69:
                    cf:52:8d:f1:e1:3d:9d:93:68:8d:0a:74:d0:5d:d6:
                    e0:8b:c6:95:84:4e:e1:5a:bf:41:64:dd:71:60:4c:
                    af:d9:80:4e:05:a9:71:b4:be:33:11:a8:bf:b8:b9:
                    98:c3:4b:2d:70:8c:eb:15:35:89:9f:5a:b7:24:c7:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D9:C9:8B:84:18:A8:19:93:4E:A1:B8:44:C6:3B:2B:B7:ED:48:4A
            X509v3 Authority Key Identifier:
                keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:bb:39:ff:93:92:5c:aa:3e:2c:ba:63:85:5d:ad:7b:f6:e4:
         8f:33:f8:f4:be:3b:54:d7:5b:a0:d9:77:73:d9:ca:25:26:88:
         bd:42:5b:55:eb:99:88:7c:a1:17:fd:88:ae:59:b8:cb:61:e6:
         90:a6:32:89:0c:8d:06:5b:58:59:b2:35:20:ec:72:71:56:86:
         92:f6:f2:b7:28:e9:a3:1d:97:f8:d0:5b:57:20:29:58:08:ff:
         5b:09:d9:1e:4a:69:c9:76:be:e7:31:6c:75:d3:66:ec:b7:8f:
         24:9a:02:d1:e0:5c:c9:48:ef:98:17:37:bc:88:eb:1b:d0:65:
         de:90:6e:08:10:8b:a0:46:1e:cd:ca:84:0f:8b:75:55:f4:99:
         ec:56:1e:cb:02:69:8b:07:07:74:4e:7b:e2:48:08:eb:bb:df:
         a7:57:be:f1:17:60:49:f6:3f:f6:31:70:0f:ce:ba:ac:55:42:
         d2:5d:19:d7:f6:5d:36:88:10:c3:44:25:b3:6f:c6:ef:dc:15:
         e4:47:ca:a5:4a:f0:dd:8b:d4:68:74:4d:ae:58:35:41:4c:44:
         ff:65:17:d3:3b:b6:74:c9:61:2c:d8:d2:9c:63:c5:ed:fb:2f:
         5b:8f:f1:42:15:5b:3f:02:75:10:84:f8:53:1d:ba:1c:ab:26:
         e0:d9:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:03 2025 by rpki-client