Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
File:                     V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json)
Hash identifier:          8k2ErEWMdxgnH6/TqoWDH7c4IrzabbH5R29gbMJLfU4=
Subject key identifier:   F7:F9:27:72:18:96:D0:4F:E8:F4:24:84:2F:67:83:60:43:0B:67:4D
Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
Certificate issuer:       /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Certificate serial:       2795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
Manifest number:          278D
Signing time:             Fri 30 May 2025 15:47:01 +0000
Manifest this update:     Fri 30 May 2025 15:47:00 +0000
Manifest next update:     Fri 06 Jun 2025 15:47:00 +0000
Files and hashes:         1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: vDlw1B1e7QHMgfj9b1msIryR28TpzCy2I9AI3onz8TE=)
                          2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: 0PS4/rj5Rh5J9qWit0urM3xL4w3DPtmcsnvl2FziSAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
                          rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 15:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10133 (0x2795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
        Validity
            Not Before: May 30 15:47:00 2025 GMT
            Not After : Jun  6 15:47:00 2025 GMT
        Subject: CN=6839d2f4-2e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:82:8e:c9:51:18:38:2c:95:3f:e3:a4:d2:
                    e6:39:d5:f2:88:0f:a8:dd:f3:97:ab:13:cc:0b:74:
                    32:40:0f:a5:97:fa:ec:59:be:34:c5:55:7f:db:27:
                    dc:a6:6f:e8:0e:90:d5:32:02:67:1f:e6:f9:8e:8a:
                    07:b6:85:c7:a1:f3:a1:88:4e:f7:c4:28:02:fa:15:
                    86:b5:f6:11:77:8a:bd:99:60:50:c1:54:7f:91:91:
                    64:c0:18:18:68:c8:8a:f7:52:82:f5:9e:95:d8:00:
                    2e:5b:02:54:3d:6b:11:fc:54:73:2d:26:77:79:53:
                    63:6d:bf:14:7b:f6:d0:03:b2:7d:c3:2f:36:de:49:
                    02:c9:ec:49:c7:a8:81:e8:12:84:0c:2c:b3:37:3c:
                    d3:4b:4b:ce:ae:c2:62:ac:e8:d9:ee:d6:d8:d8:0a:
                    d7:36:0c:6b:62:7e:df:ca:ed:db:d6:f6:fd:f0:e0:
                    4f:9a:77:47:a8:75:fa:0f:c4:ce:de:cd:a1:62:7a:
                    17:1e:05:38:eb:ff:04:23:49:df:f4:bb:2d:01:ad:
                    fd:da:f5:7b:3a:8b:d5:00:61:a6:9b:d1:84:65:c9:
                    b6:13:e9:83:54:c6:2b:f3:7d:9a:75:63:03:00:19:
                    19:68:97:6a:d0:b1:56:01:fe:7d:ca:ad:cd:65:9f:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F9:27:72:18:96:D0:4F:E8:F4:24:84:2F:67:83:60:43:0B:67:4D
            X509v3 Authority Key Identifier:
                keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:97:38:b7:a7:47:a6:82:cf:92:50:61:72:c3:2f:4b:cf:
         81:1d:4c:02:28:48:e6:69:bf:22:2b:c4:16:8d:53:92:58:7d:
         af:d4:57:fc:c5:b7:4c:83:2e:f2:3f:b1:5f:74:a9:4e:12:02:
         b3:9e:37:1e:b8:ee:d7:1c:a1:48:3a:a4:73:cf:71:b7:4a:47:
         a2:65:c4:be:16:69:39:96:24:11:59:36:ba:63:f3:2a:e1:0c:
         9e:4e:d1:6d:be:96:63:2a:62:68:28:ae:43:dd:6e:83:77:e3:
         7b:01:b9:d0:a2:2f:ec:0d:6e:af:c5:49:01:6e:fd:79:44:6e:
         28:b9:87:6d:c8:20:97:2f:83:cf:78:72:9c:a1:7f:d7:ff:bb:
         5f:50:83:a0:f8:78:0a:3f:9c:69:fa:03:e9:52:8b:ae:d9:8d:
         5b:2d:86:12:c5:38:7a:f2:c6:3b:61:f3:6f:d5:35:b6:7c:de:
         54:01:eb:88:61:0d:f0:48:aa:aa:05:bf:91:9b:6f:eb:79:5e:
         a3:ef:60:25:67:d1:57:7f:9e:ec:b3:76:6a:bc:60:33:50:ff:
         43:f5:28:1e:4e:3d:e2:d9:be:09:89:c4:66:de:94:b5:c0:b1:
         e0:e5:10:f2:d0:09:c9:a6:b7:7a:44:e5:f2:de:a0:1f:e1:14:
         f6:22:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:29:35 2025 by rpki-client