Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
File:                     XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json)
Hash identifier:          oBqUXQmDTiKrdKaU3H+DxXDV29NO5FkJT36PKxhwkVM=
Subject key identifier:   F0:C1:30:0F:07:BC:C5:98:82:84:A2:A3:A7:4F:3C:F8:47:EE:B2:37
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
Manifest number:          0716
Signing time:             Fri 30 May 2025 22:07:35 +0000
Manifest this update:     Fri 30 May 2025 22:07:35 +0000
Manifest next update:     Fri 06 Jun 2025 22:07:35 +0000
Files and hashes:         1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: Q4O0qqkkKsfs/39S8XulMbBPxkxQ01mWN3M9n+FxHVw=)
                          2: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: nqhvH+f7wHKT8bjIs6vVLkOc7U1WY+z2Ysz9HVOAovM=)
                          3: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: RMYTLsjzchYs7RKbF9BO3OVp44cFPqnQKzT6ydktQoo=)
                          4: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: Bcj/iiKxpeGROHNnH2fXMR3kft/+QpPcp29Mc0T3G5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: May 30 22:07:35 2025 GMT
            Not After : Jun  6 22:07:35 2025 GMT
        Subject: CN=683a2c27-a3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:a0:ad:0e:21:66:32:98:75:83:72:4e:a6:
                    8b:6a:6d:39:57:63:9b:ce:1d:ff:89:a2:20:c9:64:
                    48:a1:12:0c:c0:a9:63:cf:eb:d1:2b:a4:e9:2f:1a:
                    67:60:6a:d0:ff:55:d3:7a:75:10:4e:eb:ea:6f:5b:
                    45:46:f2:2b:60:c0:f9:f9:ef:7f:eb:47:58:d7:9a:
                    1c:a2:18:d0:c5:40:63:7c:6f:28:ff:c6:ae:54:56:
                    95:7c:4c:0e:47:23:4b:15:22:7d:dc:58:3b:17:33:
                    ad:cd:e7:85:23:57:b8:99:f3:5b:b8:47:95:e6:ee:
                    44:13:6d:9f:1c:a2:61:31:bb:5c:7f:56:3b:64:08:
                    df:8a:92:5e:33:b2:a9:75:85:63:57:f1:d0:df:22:
                    50:f7:39:d7:c8:09:4b:38:69:0c:a2:33:bc:b9:e2:
                    ef:18:d8:c0:a9:50:3b:d5:4f:82:ec:ee:f5:4f:78:
                    0a:f2:de:fb:7c:db:08:c4:a0:2b:47:09:17:df:a7:
                    af:0e:9a:89:68:e0:50:a0:99:72:db:ca:10:ef:e9:
                    8d:35:31:43:b0:a7:2a:d3:c2:68:5f:40:ff:05:39:
                    a3:db:89:54:6d:dc:b0:08:57:74:29:85:99:fa:47:
                    fc:40:bf:8f:dc:78:ce:ee:20:54:31:e6:a2:d0:69:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C1:30:0F:07:BC:C5:98:82:84:A2:A3:A7:4F:3C:F8:47:EE:B2:37
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:24:ea:6e:19:79:aa:c2:22:1d:fe:9e:b8:9a:8a:63:ae:
         11:6b:a6:de:ba:8f:32:b7:04:44:a5:71:78:6b:4d:61:b8:80:
         e5:c9:3d:2f:de:74:f1:f6:1c:57:0b:0a:d6:f3:04:49:28:82:
         90:8d:67:d0:38:79:59:cf:5e:dc:55:6b:e1:4d:f2:af:47:b7:
         1a:e0:77:cf:be:3a:9f:e3:91:b5:56:5b:31:b7:a2:a9:b1:5c:
         5b:a9:ff:7e:ae:21:c5:af:73:73:53:fc:67:d7:f5:ab:be:e1:
         e9:98:97:9f:b0:40:1f:11:50:f0:16:7d:dc:55:2b:6a:2e:57:
         7d:4f:0f:3f:f4:38:2b:cd:98:76:44:23:d1:a7:ad:f3:17:7e:
         52:aa:ba:20:65:9c:b1:2f:03:56:dc:6e:7d:0d:f5:78:b4:d5:
         01:67:34:cb:06:b0:30:9e:dc:ca:5a:1f:70:73:73:7c:3a:9c:
         a9:da:8b:ca:44:29:af:30:43:e4:ea:dc:a6:30:3e:35:23:30:
         55:24:8e:73:62:86:b0:33:0a:86:e4:f0:03:41:54:49:5c:4d:
         b2:35:d8:25:ae:84:c9:80:64:91:ff:81:6f:9b:5b:e8:93:6f:
         83:3f:c5:5e:ac:4a:74:cb:d5:36:3d:05:8a:e3:78:95:30:c5:
         54:07:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:45:00 2025 by rpki-client