Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File:                     m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier:          KxGMus7C56r0CT5mnkA/H/N7Osp7qZ7C+O4C1jOf/XE=
Subject key identifier:   F3:14:D9:77:74:78:BB:2A:A2:92:D6:DD:0A:15:10:AC:7B:EC:54:17
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer:       /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number:          0161
Signing time:             Sat 31 May 2025 03:41:32 +0000
Manifest this update:     Sat 31 May 2025 03:41:31 +0000
Manifest next update:     Sat 07 Jun 2025 03:41:31 +0000
Files and hashes:         1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: TtiAKXPp1pdL/zVq7Antlqlng2QyBZbSUAvkdq7T9n8=)
                          2: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 1McoUaNADtVmxnwjUYo0/yr8ZNju9sl8ZAS30i7LT7Y=)
                          3: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: BmCmwmrfy1CENmrxL9jjUF6CdXOsP2Ds7n3Ty7zfap8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
                          rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
        Validity
            Not Before: May 31 03:41:31 2025 GMT
            Not After : Jun  7 03:41:31 2025 GMT
        Subject: CN=683a7a6c-d675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:61:38:67:78:15:e2:1f:a7:a4:8e:a3:7b:
                    86:86:89:9a:3f:a9:e5:bc:df:c6:87:63:56:30:04:
                    4c:81:3e:51:a9:b1:b1:d9:20:31:a5:c5:02:17:ce:
                    9d:ac:39:c5:78:67:d7:4a:7b:95:b7:5d:e2:22:33:
                    79:fb:df:c6:93:e2:29:d6:f9:99:78:cc:bd:bf:3e:
                    ed:b8:ac:cf:72:04:3c:f3:e6:9d:eb:0e:99:d3:c5:
                    b4:34:f6:09:1d:d6:b2:2e:1a:98:d8:57:75:71:e2:
                    60:0f:e3:42:f5:07:6d:e3:bd:64:86:1d:20:65:4e:
                    10:16:f3:11:dc:3c:47:66:52:28:3b:f0:a6:db:5c:
                    5c:1b:57:14:4d:a8:c5:a8:e0:52:45:f3:45:10:12:
                    c0:73:19:48:d2:28:38:61:19:a3:03:9a:67:de:03:
                    f3:c2:e6:21:7f:db:61:0a:19:48:e3:ad:97:28:01:
                    9e:a7:25:c7:97:05:df:ee:40:b7:97:50:09:e6:49:
                    18:50:81:b0:46:b4:ca:a7:3b:74:2c:b5:3b:db:f6:
                    25:f6:cc:83:bf:19:24:a4:20:49:c8:88:21:ea:6b:
                    df:ad:fe:22:70:67:36:67:fb:d5:4d:a7:46:8c:1c:
                    cb:98:c4:a9:01:47:c8:41:99:56:d1:30:98:92:90:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:D9:77:74:78:BB:2A:A2:92:D6:DD:0A:15:10:AC:7B:EC:54:17
            X509v3 Authority Key Identifier:
                keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:07:94:32:2b:13:67:06:46:d2:e3:52:54:16:2e:82:61:
         a4:4c:7d:ed:f6:a2:d3:1d:f8:59:d9:ed:76:6d:7f:06:f2:c5:
         f8:f3:e0:76:e1:70:1b:4d:82:09:26:22:a5:38:14:84:da:6b:
         c8:e7:71:86:87:03:e1:02:bb:c3:17:c3:18:d0:cb:6c:68:79:
         04:a7:5e:56:cd:ab:55:d6:37:47:d2:4a:bb:3b:70:bf:f0:fe:
         c9:2c:1f:94:c3:a8:f6:fc:d3:86:2e:be:5c:29:44:d5:77:27:
         9a:ee:dc:61:f2:7a:1d:00:c1:da:cb:ca:6b:3c:1e:ea:63:e3:
         83:54:9a:9c:bb:db:b6:c5:29:15:59:eb:dd:12:3c:af:52:c8:
         17:d2:a1:40:e2:84:f6:22:d1:34:9c:00:ac:fe:46:c9:63:af:
         bb:89:40:37:f9:fd:9c:6c:b9:49:48:19:6b:1e:87:55:da:26:
         a4:d3:a5:d1:b3:dc:d1:aa:a4:2d:60:2f:49:15:f7:c8:ef:7d:
         7d:6b:c0:62:d4:64:3d:43:11:ce:69:16:3d:73:e0:d9:b1:e0:
         02:c4:8d:65:ba:2e:f2:06:c8:75:91:e0:85:ed:00:91:db:eb:
         32:7d:49:9d:41:53:0c:d2:44:3b:1f:99:13:fe:4f:df:2a:39:
         7a:cc:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:01:17 2025 by rpki-client