Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
File:                     ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json)
Hash identifier:          Q5FcSZI1CLFUeCpS7KrmlLqlE6s1nToaZx5CkSlmjgk=
Subject key identifier:   3E:76:71:27:F4:82:11:9C:CA:02:26:29:F9:9D:EA:E5:BC:D4:E8:52
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Certificate issuer:       /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial:       05CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
Manifest number:          05C5
Signing time:             Fri 30 May 2025 23:34:15 +0000
Manifest this update:     Fri 30 May 2025 23:34:15 +0000
Manifest next update:     Fri 06 Jun 2025 23:34:15 +0000
Files and hashes:         1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: REprelstBngdhvkIYYCn774upJDN0ROl3HOVE2eJ3wc=)
                          2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: 1LEbeB2sOSy0yXmk2wIYI71rgNCCnZow4wFFO18wbUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
                          rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
        Validity
            Not Before: May 30 23:34:15 2025 GMT
            Not After : Jun  6 23:34:15 2025 GMT
        Subject: CN=683a4077-05fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:2f:b8:7a:2e:3b:bf:98:bb:e7:bb:16:05:
                    7f:8f:ee:3d:cb:2d:77:f0:41:67:81:51:5c:ce:1c:
                    20:c2:eb:55:03:18:b3:80:ee:ea:d9:d7:dd:d6:11:
                    e3:2c:59:27:bb:96:9d:7a:94:52:4b:e8:b9:89:67:
                    c8:dc:47:b2:46:5b:34:a8:64:e3:3e:af:69:b7:82:
                    7a:dc:d4:a7:03:68:ee:24:47:b0:b4:00:ba:c3:e1:
                    c0:39:23:0e:9d:82:95:6d:39:84:be:6b:4b:ad:43:
                    4f:ce:c7:51:42:98:fd:67:cf:35:fa:14:2c:d3:dc:
                    b4:10:03:e3:6d:40:f9:ad:d4:b1:a1:b6:21:5b:b6:
                    56:5a:ba:69:dd:9d:b5:8f:b7:1e:d4:d2:c7:dd:2a:
                    4d:c7:b1:e1:cf:59:d4:ae:ec:9d:aa:f0:cb:75:91:
                    2e:d5:97:18:be:8c:56:bf:5c:cc:f3:14:63:c8:00:
                    ff:6c:51:3c:1f:94:95:a8:5f:13:0c:e1:5a:ab:97:
                    e6:e3:c5:c3:93:8f:10:dd:73:13:36:cd:6a:60:65:
                    27:c9:76:76:41:d4:20:4f:46:7e:35:d4:53:3e:a9:
                    b1:b8:39:ff:e3:e4:e5:e3:2b:36:65:69:0f:8f:d8:
                    0c:50:79:1b:62:3c:eb:c4:1e:90:13:b8:44:3d:e3:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:76:71:27:F4:82:11:9C:CA:02:26:29:F9:9D:EA:E5:BC:D4:E8:52
            X509v3 Authority Key Identifier:
                keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ec:42:b7:f5:14:34:9f:f1:a4:a4:d4:3b:05:da:29:2d:bc:
         8c:e9:bc:89:17:52:ca:32:08:41:11:f6:23:d5:ab:6f:00:f2:
         28:34:a2:c1:16:e4:0b:94:11:f6:5e:54:1b:4d:7b:0f:19:bf:
         2c:76:37:0a:7f:e5:5b:fb:b6:30:58:e9:d7:9d:49:9b:a4:af:
         f1:5d:48:bf:4c:f5:2a:a9:dd:8c:e9:b4:22:24:e1:cb:e0:7d:
         0c:d0:7e:0b:87:ea:62:ef:78:3d:1b:1b:10:ef:dd:5a:0e:a8:
         b1:0f:f0:5b:2d:92:72:06:9e:55:34:f7:47:85:c0:69:ae:80:
         91:77:3e:13:ed:b5:d2:e1:53:58:a2:5b:28:ad:48:99:3c:0e:
         e6:8d:7e:bb:50:b4:d1:01:ef:bb:51:c2:57:8c:ae:d4:28:f8:
         e3:33:e2:9e:84:15:30:74:e1:ac:90:20:73:49:6b:99:73:3a:
         f0:66:af:bd:38:7b:7f:0e:ac:fb:9d:2e:01:d5:da:94:82:20:
         89:63:db:72:c3:4b:e8:86:cc:08:33:39:95:db:15:84:72:1f:
         a1:8d:96:ed:80:9e:35:92:31:86:50:f6:b9:67:ad:42:53:30:
         79:64:6c:7b:b3:23:aa:2b:64:5e:ce:3b:5d:d4:20:97:9a:77:
         5c:d5:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:34:23 2025 by rpki-client