Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          QeF+VtTzU6z6OijAZCK+hNpU+ob6MmJl5MiGwnC9fNI=
Subject key identifier:   57:8F:E1:FA:FB:0F:D2:48:E7:63:95:81:AF:F9:79:EC:84:FB:7A:8A
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          0749
Signing time:             Fri 30 May 2025 21:53:40 +0000
Manifest this update:     Fri 30 May 2025 21:53:39 +0000
Manifest next update:     Fri 06 Jun 2025 21:53:39 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: k1jS/Wv4qLYGtwWzNzqhYGIKn9KpiOwJR3jFe2UDeOI=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: May 30 21:53:39 2025 GMT
            Not After : Jun  6 21:53:39 2025 GMT
        Subject: CN=683a28e4-8092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:87:97:fb:41:2c:6e:a5:32:66:4b:1b:e2:
                    98:0e:38:29:19:e8:39:db:59:d1:ba:c8:83:c4:e5:
                    fd:48:34:57:2d:36:88:72:3e:ea:3d:98:7a:3a:41:
                    ec:f7:67:18:c4:30:17:6b:cc:60:7c:3a:14:76:e3:
                    af:0d:1f:92:84:8d:66:5a:3d:dc:97:5e:d4:18:93:
                    7c:32:6f:80:bd:8a:28:96:83:00:ef:37:39:35:8e:
                    3e:59:0c:f6:39:f0:9c:b8:34:6f:6f:4a:00:37:b5:
                    46:b6:5a:10:7b:0d:46:54:1c:02:c2:1e:ec:01:aa:
                    c2:6e:e1:db:4d:ae:ec:ad:ab:a2:f5:a3:f5:f5:ab:
                    59:3b:db:b2:77:18:c3:32:da:28:b9:65:14:f9:26:
                    92:9c:5e:01:0b:b8:c9:e2:31:e4:25:d8:ec:93:c4:
                    8d:5e:3c:88:25:1d:3f:e0:4a:d7:63:70:1d:d7:0f:
                    2d:52:68:ba:8e:01:86:9f:02:e5:6a:c9:70:17:76:
                    3c:54:8d:3d:17:74:65:e8:29:74:d0:dd:eb:12:96:
                    90:17:b5:1e:0a:6a:b7:37:67:20:29:ae:31:a9:59:
                    20:ef:be:86:e5:4c:1e:86:55:f1:88:b2:48:7f:eb:
                    9a:15:58:3f:a2:72:d0:31:3a:29:85:f2:45:a9:d2:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8F:E1:FA:FB:0F:D2:48:E7:63:95:81:AF:F9:79:EC:84:FB:7A:8A
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bd:75:c4:77:ce:c3:4a:a2:51:fb:35:78:14:71:7f:0e:f1:
         16:7e:9c:ef:2c:6a:03:c3:bb:2b:68:65:e0:bc:c8:3f:c7:e4:
         25:85:1e:56:ac:a2:82:12:79:d7:e2:27:87:b5:4d:65:9b:8a:
         4a:38:ca:e3:e1:a6:9e:6b:12:9a:e1:d3:c6:5c:ef:29:f6:3f:
         3e:cc:47:7f:13:a9:69:25:03:a5:b7:23:4d:11:9c:49:83:9d:
         b7:d6:13:cb:7b:c9:05:af:db:b4:90:8e:e1:44:e8:2f:a1:88:
         ec:21:2c:5d:a6:97:92:66:93:5f:41:90:f0:32:3a:b4:1d:b5:
         0b:8a:eb:d8:20:73:e4:30:08:d5:0c:ef:03:6d:b5:95:56:91:
         da:50:b9:41:0a:6c:eb:e9:d9:9f:75:a5:b6:c1:58:89:9e:46:
         1d:a3:d2:d2:a4:4d:75:1b:6e:3c:ba:a2:75:02:ee:8c:2c:0d:
         72:d2:76:54:d4:26:18:2f:d1:92:16:49:7c:87:c6:3d:4d:14:
         c9:c8:1f:f8:8d:a8:84:43:93:b8:85:ed:88:c8:be:98:0d:7d:
         ac:62:82:bb:af:00:ae:55:91:ab:d9:66:1a:62:a6:d0:4f:cb:
         6c:f7:cb:dc:9f:e8:32:e8:21:2b:c8:b2:b3:19:bd:3b:d7:66:
         bf:3d:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:38:04 2025 by rpki-client