Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File:                     bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier:          ovzy8QPwRb+JrVyKSf+RO+nA1w3bxlaVLpMSGhK8O+s=
Subject key identifier:   A4:70:D6:D8:C2:D9:BA:B4:E2:5D:57:4F:F2:FA:BF:78:21:8B:B4:DD
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       138A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number:          1361
Signing time:             Fri 30 May 2025 17:11:55 +0000
Manifest this update:     Fri 30 May 2025 17:11:55 +0000
Manifest next update:     Fri 06 Jun 2025 17:11:55 +0000
Files and hashes:         1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: hh4AiqggGfnTrpJsgHrKoYhrB3PdshuMtHL0c4Bg2yE=)
                          2: 872698A8041B11F0A98AFA39C4F9AE02.roa (hash: KRihtjgc09Z77Kl0lz0K09YLnot4iNb77HfA1M9eF18=)
                          3: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: 0b7omzeKz4jSfEh3GkF+vZhYJ1Gdf4wavihWtciHsrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5002 (0x138a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: May 30 17:11:55 2025 GMT
            Not After : Jun  6 17:11:55 2025 GMT
        Subject: CN=6839e6db-6676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:b4:59:d8:55:8b:ca:6c:32:94:6f:cf:94:
                    ea:54:c8:e3:f7:27:18:a7:57:b8:4a:3c:ab:fc:30:
                    2b:bf:d8:7e:03:ba:10:84:54:11:02:5c:8a:da:a8:
                    d4:12:85:49:27:95:c0:95:6e:b3:ae:82:f5:ba:8b:
                    a7:d0:bf:33:ba:e8:a8:e8:fb:3b:09:82:60:9c:05:
                    a4:a0:94:c1:bf:87:bf:79:35:2c:c8:7c:64:2c:90:
                    19:18:9a:55:b0:1e:e7:a5:41:7d:4a:9e:76:9f:d6:
                    07:35:a0:63:58:49:fa:42:22:7e:54:62:5c:2d:b0:
                    cb:dc:3b:65:e5:ad:49:67:c3:25:37:6b:b5:30:3d:
                    9b:07:fa:61:ff:ed:86:fc:27:08:d7:03:a7:17:a6:
                    0d:85:07:26:b2:85:cf:ce:41:ea:73:15:dc:2f:3d:
                    a8:1c:25:90:90:47:8c:cd:5e:5d:cb:e5:33:47:3d:
                    48:3e:cc:45:32:41:16:25:f5:e4:36:3b:5d:1f:bb:
                    59:73:a6:02:81:c1:49:79:5c:6a:53:ac:18:58:90:
                    4b:31:52:16:a3:a0:2a:dd:8d:ef:72:f0:01:80:c3:
                    56:c5:41:b3:19:33:c3:be:0e:69:23:0e:6d:30:0a:
                    7b:ef:9f:8d:84:08:cd:ec:65:95:54:fb:9f:8d:57:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:70:D6:D8:C2:D9:BA:B4:E2:5D:57:4F:F2:FA:BF:78:21:8B:B4:DD
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e9:a8:58:fe:d8:23:56:c7:9e:0c:e9:ed:18:f6:34:d5:7b:
         c2:95:88:51:34:3c:f6:cc:bd:ca:ba:08:ca:fe:28:89:ae:22:
         6e:52:77:f2:03:ee:42:01:6b:b3:a3:47:85:3d:73:16:5b:ee:
         85:25:3c:76:d9:b7:ea:06:d3:b0:1a:6d:56:3d:df:f7:72:36:
         c4:c2:d9:3e:29:45:b3:1c:4a:2e:e9:13:9f:a6:b7:c9:3f:b4:
         39:a0:b4:da:4a:57:dc:e3:18:c4:29:f0:41:98:58:51:53:e5:
         28:ec:8a:43:d4:42:8c:1f:c6:cf:02:2d:97:52:eb:f8:fd:86:
         81:a7:ab:49:eb:02:0a:8c:5d:f1:fd:ff:87:cd:92:04:02:89:
         f1:0d:65:2a:af:30:5e:ab:ef:04:83:97:b7:0e:84:be:30:92:
         25:8c:ff:fa:b4:47:3a:f3:96:04:41:24:4e:dd:0b:9a:ba:40:
         6e:2d:49:73:b2:07:f6:4d:5a:b1:ef:53:ff:4e:22:dd:b2:bd:
         18:47:71:e5:97:99:6d:e1:35:92:dc:c7:15:58:1a:d4:84:e4:
         ba:f9:61:a6:97:8a:ca:07:9c:8d:53:8b:5a:31:3c:0a:02:66:
         8c:29:98:28:14:c7:56:cc:be:1b:f6:ea:99:eb:41:e9:fa:86:
         1b:39:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:47:46 2025 by rpki-client