Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
File:                     USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json)
Hash identifier:          NONKnzd9Mm1Ytelhf8DFAfm9qZmJ4dQpyKGpOCiYAzI=
Subject key identifier:   8C:8B:85:CA:1D:29:55:F5:CE:99:C0:D8:77:C1:99:EF:80:65:9A:07
Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Certificate issuer:       /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Certificate serial:       06F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
Manifest number:          229E
Signing time:             Sat 31 May 2025 15:49:35 +0000
Manifest this update:     Sat 31 May 2025 15:49:34 +0000
Manifest next update:     Sat 07 Jun 2025 15:49:34 +0000
Files and hashes:         1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: aFei2vC91ZNT0QbI3Vxdf2azSxnuP412JjfZunTdhLg=)
                          2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: oQ+XeX3QPr5MKR/Pv82IWUhiWxAkN4R4paMHXTKKeg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
        Validity
            Not Before: May 31 15:49:34 2025 GMT
            Not After : Jun  7 15:49:34 2025 GMT
        Subject: CN=683b250f-6828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:5f:46:6b:fe:86:cf:14:c5:c7:0e:c5:8e:
                    6f:08:ad:f8:cf:c6:49:c8:05:0f:97:85:dc:d7:0b:
                    24:e1:c6:c3:ed:78:50:d8:c0:f7:99:0f:d4:99:c4:
                    6e:d0:04:b7:fb:a5:ed:f9:fa:76:a1:8a:5e:b4:f5:
                    0a:bc:92:15:f2:a5:a3:7a:22:54:7a:5c:eb:9c:e9:
                    3f:a9:7a:89:98:7c:1d:dc:f6:ca:96:82:13:1b:68:
                    67:cc:51:6d:5c:10:45:cb:ef:39:86:70:ee:26:19:
                    89:5e:41:e2:ed:30:d8:48:51:5f:26:88:34:53:76:
                    e8:b4:50:7b:31:e5:d4:9d:93:bc:b6:1e:e4:78:db:
                    82:ec:de:77:d1:8a:54:58:b9:51:41:ee:4f:12:00:
                    a3:52:e1:56:e8:03:1b:ee:c6:fd:64:8e:5b:60:98:
                    9b:a3:ce:44:c4:4b:75:b3:d8:b2:44:f4:90:18:a5:
                    9e:72:d5:a7:16:8a:7a:d1:67:bd:a0:6d:2a:cc:8d:
                    e1:5c:ad:9f:f2:b0:31:22:a1:67:c4:ca:ad:48:4f:
                    0c:20:cf:4a:71:c0:df:e7:2b:43:92:a3:8f:f3:e1:
                    64:b1:90:1f:2d:5f:e4:c5:b9:2c:e9:23:48:f2:a8:
                    2c:2c:74:b3:de:31:a5:1d:f7:af:b6:b6:cb:b5:d2:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8B:85:CA:1D:29:55:F5:CE:99:C0:D8:77:C1:99:EF:80:65:9A:07
            X509v3 Authority Key Identifier:
                keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:48:51:36:0c:49:bf:c9:36:81:96:bc:8d:80:02:f5:18:49:
         28:d1:fa:90:fe:21:ea:ed:ff:df:2b:40:37:40:d6:22:10:ae:
         1a:6f:28:cc:31:b1:b1:b0:42:8f:7f:37:8b:39:ed:9f:bf:32:
         3d:a0:8a:5f:fc:c2:33:cb:bf:d2:2c:23:2e:ad:4f:1a:8b:34:
         45:0e:eb:eb:36:3d:cf:8b:33:3f:4d:56:52:76:97:0b:a8:08:
         1b:e9:50:74:52:58:67:d7:f7:c1:eb:43:94:2d:f6:e6:ad:d1:
         8f:8d:bf:58:9b:3b:23:96:26:24:28:5b:1e:8f:25:56:b3:e9:
         18:91:76:8a:25:9d:5b:6e:48:18:cc:0f:c5:ae:be:cb:8d:3a:
         39:e8:41:48:5f:e1:a4:66:20:ba:62:98:99:3d:19:2f:5a:a5:
         34:b6:13:b4:80:d3:b8:95:71:a5:aa:b2:e3:4c:42:bd:b4:29:
         cb:9c:8c:21:39:69:67:23:64:09:f5:d6:51:2a:33:5c:1c:a1:
         79:ab:d9:0d:13:8c:7a:e2:b3:4b:d6:79:78:1f:2b:80:d0:da:
         da:18:9f:7b:0c:35:9f:df:e2:7a:96:b1:20:74:aa:f8:6e:0b:
         51:3d:06:59:70:08:cf:21:54:0d:f7:28:6e:3e:6e:96:04:de:
         a9:52:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:33:36 2025 by rpki-client