Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          DYoptU3EXGb917iGG3t9O1/V5m+KkjaBU6+6yrJ/NPE=
Subject key identifier:   84:55:66:05:FD:3A:7F:1E:C3:F8:BD:41:DC:25:67:9C:27:25:5C:0A
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       05E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          05D9
Signing time:             Fri 30 May 2025 23:12:44 +0000
Manifest this update:     Fri 30 May 2025 23:12:43 +0000
Manifest next update:     Fri 06 Jun 2025 23:12:43 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: PGBXiS6rZYwwW2av0JbU1G94aZG2aWk+maqJFwEKPjk=)
                          2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: Zin5Bd4weOB/NhOZcniDknZ2HAO8m6tl6cWhzqt6SiQ=)
                          3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: May 30 23:12:43 2025 GMT
            Not After : Jun  6 23:12:43 2025 GMT
        Subject: CN=683a3b6b-2216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:86:00:ed:89:16:ba:2b:a7:e8:9b:44:02:
                    c9:c7:8e:15:c9:32:b2:94:a2:d9:cd:d3:b5:7e:e7:
                    77:08:c6:2a:04:5f:6d:a6:01:3c:48:3e:3e:9a:9e:
                    c8:a5:55:70:02:9f:54:02:2f:89:a2:93:89:f6:e6:
                    64:18:c4:8f:78:de:1d:d4:b1:7f:3a:b4:fe:4c:17:
                    a3:7f:ae:3e:6d:f8:94:f8:0e:54:4c:83:93:8b:29:
                    e9:0a:31:59:b9:ea:7a:c8:17:25:43:07:ca:a3:10:
                    1d:4a:6e:56:ec:bc:3a:dd:a4:c8:82:32:05:ff:0e:
                    fa:68:02:a9:f1:fc:6f:f0:4c:78:d4:ae:a2:a4:35:
                    17:37:c9:8c:3e:f4:8d:b6:9c:60:c6:38:bd:23:3e:
                    96:5d:fb:de:16:01:bb:ac:b5:0c:5d:db:a5:8d:38:
                    bd:1b:25:c9:42:ae:e5:b8:1a:4b:37:40:27:3b:d2:
                    3c:96:1b:b2:18:9a:9d:4e:dd:aa:94:46:ba:4f:64:
                    ad:7c:19:c0:ba:10:26:71:1f:d4:ca:25:82:13:79:
                    70:db:a7:0b:35:18:5c:b1:c9:58:dd:a5:81:92:16:
                    5e:9c:a2:1f:6a:1f:41:75:f0:74:4f:20:ff:9f:14:
                    95:64:25:81:b9:20:f2:98:ab:ce:ed:ee:e3:95:f2:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:66:05:FD:3A:7F:1E:C3:F8:BD:41:DC:25:67:9C:27:25:5C:0A
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:76:a5:cf:b1:18:fc:2e:f7:2c:a7:0f:41:b7:ef:2d:83:
         21:cf:71:81:c6:36:c9:6b:e2:06:11:bf:9d:e1:17:15:ec:71:
         3e:b7:14:f5:19:ef:55:5f:3a:b5:91:21:c7:68:09:4f:28:b2:
         ce:59:a1:9d:f7:4d:91:be:4f:3d:9d:6a:23:f9:5e:74:d1:e1:
         fb:be:d7:d4:60:53:c5:70:7a:ac:d2:ae:a8:37:98:77:10:6b:
         5c:e3:98:f2:17:6a:e8:e8:96:1f:a3:5f:1b:21:4c:d1:eb:06:
         e1:a4:45:4c:6b:f0:35:7c:23:b7:ac:5f:60:41:8b:e1:b3:4e:
         bb:08:8b:c3:a6:d7:88:cf:04:b3:87:44:e7:ce:fb:99:42:09:
         70:7e:8f:58:88:09:36:06:bc:c2:f3:42:2e:c5:68:c2:4e:45:
         11:f5:e0:32:f6:2f:5a:e3:dd:b7:8e:89:38:46:95:3a:f0:a1:
         32:6f:17:81:a7:61:7d:66:47:ca:e6:d9:4e:74:d7:4e:a2:d6:
         51:0f:db:c1:9a:01:57:67:51:21:e2:a6:19:fa:b3:6d:12:9c:
         58:04:16:22:6f:81:65:a3:95:cb:5d:4f:67:29:2e:3a:c2:3f:
         15:1f:25:04:f3:6b:06:a4:8a:f4:df:6f:fa:b4:fc:85:95:09:
         f5:e2:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:40:59 2025 by rpki-client