Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
File:                     RW7qBpLGpPJvU9LSN9HLTc14MwU.mft (raw, json)
Hash identifier:          mzPuNc1MnDk08EFWK1NIdPIwBfmPOw2+AX+v9oKD0BY=
Subject key identifier:   C4:F5:FF:6A:3C:04:C9:6E:97:18:37:74:83:36:7B:E8:F6:FB:A2:51
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
Manifest number:          01E3
Signing time:             Sat 31 May 2025 03:08:29 +0000
Manifest this update:     Sat 31 May 2025 03:08:29 +0000
Manifest next update:     Sat 07 Jun 2025 03:08:29 +0000
Files and hashes:         1: RW7qBpLGpPJvU9LSN9HLTc14MwU.crl (hash: JI5LvZfLracLA6cpjNf/0DNzuR3RilPScLJlBvmHgBI=)
                          2: 99D9487EEAFE11EE9EFB1977C4F9AE02.roa (hash: zFW6A+VsWeVd5y9V/Grmt529yD9xy9nMp+dz1bU8Fj0=)
                          3: C1D6899A766D11EF8DE77D09C4F9AE02.roa (hash: hhDKyyrQxKGGNGFA6ebmUiEAzFW+VilENtN1Yqjy+bg=)
                          4: E4788F02DB4511EE89BB2666C4F9AE02.roa (hash: oox2IAP/EeLsMtT4Ck+SqOcZuXLlKDtKDAVdd069T4g=)
                          5: 63FFD6349A6611EEA0301E57C4F9AE02.roa (hash: z8HOz+dcoFFCcCFSoZRS4fGtZxXcsHPetEWPBXuLWp4=)
                          6: EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa (hash: xa6pFVrj/ez7E87xSyPlkJRg6Pmk7Fs8mSI9yoLX72Q=)
                          7: 6B95D6A4739311EE8FDD5549C4F9AE02.roa (hash: Qd426lYD9XoOEAmz1vWsXU4A7lmIaqfHNjNk4PbK3Hw=)
                          8: 005C56227B2411EEBB6FC444C4F9AE02.roa (hash: T0JzURgbPQAyxXByhNfsj9TRUNcqqPprlp5/NvrciCE=)
                          9: 399302423C8B11EE83400D20C4F9AE02.roa (hash: N2pS8ft3nrcylkyKhXMZRXSMHTWkIIpW9TlSRxcMr/A=)
                          10: F9350C3C326B11EEA39EA051C4F9AE02.roa (hash: l6IS2kpgAAlvqNFhAN1P6ZblqySzuWpYTnlUWX9CEl8=)
                          11: 4DA8B6FA2EC411F0A0F0B91DC4F9AE02.roa (hash: jttV5cx2iHbEDh0fC2dk0oUBZYsTcZNgD/Is6/WTQFs=)
                          12: 2562774A3A1211F08110E80BC4F9AE02.roa (hash: cGKm7AkhC0ch00z5nQoWbM13EYJlHiAu87nho38uxkk=)
                          13: EABEFD16232E11EFA6F6B887C4F9AE02.roa (hash: ia4Ra/GF14x26JDiIjwbkjuR5bTGoRpVxx3Eq8bwfHI=)
                          14: 8A5017E27C3C11EE90BF4044C4F9AE02.roa (hash: 2lj1uUsrRYPyJxpfjrOuYSX+mKrdmUUXbJ/4lkcFuLY=)
                          15: A52438CC4D7B11EE9DA62A3BC4F9AE02.roa (hash: MnXlnBY2ocoNfE08GiysFh2JwZG89iSiF2FMR7I6bbw=)
                          16: 68C24072EAA611EE8F2E643CC4F9AE02.roa (hash: RLu52NHOm+iqiwkIRAwfpGKtzmwjKuI/N13XqqT8Hi0=)
                          17: F6BA96743B5C11F09DAB7E64C4F9AE02.roa (hash: IjW0nnS0QRJLhkhL5FVQB/J1ao7hrroAotaNP9KP7rw=)
                          18: 281775F671A711EE85493C7BC4F9AE02.roa (hash: BACyePdfCThTkkGSMdPNsRpHZtdIdBJX2cl+z8bcJWM=)
                          19: 16C1510E310711EE8328F181C4F9AE02.roa (hash: trP7B45/DlDHDIgNDVOVbjedY2D8psgfhXtS/4UA2n0=)
                          20: 5F5C646C7AE911EFBEF40A3AC4F9AE02.roa (hash: mAow9IFKciqMsYxt1OAxrZ1M2FXSiGw7w8W52WIxbjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: May 31 03:08:29 2025 GMT
            Not After : Jun  7 03:08:29 2025 GMT
        Subject: CN=683a72ad-0918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:05:49:3c:6d:57:fa:c3:af:7d:d3:30:b7:
                    5b:3e:26:a9:aa:e9:9f:95:f6:ee:6a:f0:73:28:65:
                    0d:37:72:c6:7b:b9:04:69:3d:85:79:d8:e4:25:76:
                    a9:93:55:69:c2:d1:a6:6c:54:ba:4e:3a:58:16:c0:
                    b2:69:2c:c1:b2:1a:60:19:b2:aa:4a:e3:c3:56:7f:
                    cd:af:04:04:4b:a4:10:eb:20:12:b1:ab:30:40:95:
                    f1:f1:14:63:3d:51:39:a3:e8:09:b5:51:84:63:3a:
                    a9:42:70:d2:c6:be:1e:e1:dc:b1:85:ec:ca:b4:3e:
                    92:e9:d2:55:2c:61:99:64:15:d5:82:9e:98:47:80:
                    a7:e9:8a:d4:7e:b1:74:bc:0d:e7:b8:15:ad:6a:54:
                    e4:1f:30:0d:1e:87:f4:ca:ce:30:33:3d:4a:71:d5:
                    8e:e8:37:94:88:ef:cb:91:4e:62:5a:dd:f6:f4:9f:
                    23:61:a2:a3:70:5b:1f:f9:54:3e:68:2d:9e:06:73:
                    c3:71:bf:87:9b:7b:b3:87:f0:a4:a2:d8:77:e4:96:
                    86:eb:e4:a1:8a:48:84:fd:b8:8a:ad:1c:00:61:3d:
                    d2:70:6c:69:e9:2b:d3:e3:e8:2b:d3:e0:3a:0f:75:
                    2d:68:dc:9c:33:0d:09:17:19:09:6a:4a:c6:0e:ab:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F5:FF:6A:3C:04:C9:6E:97:18:37:74:83:36:7B:E8:F6:FB:A2:51
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:12:13:f3:82:28:6b:05:58:53:d6:95:29:9d:ca:42:35:4d:
         63:5f:f4:9b:25:36:ca:ca:89:57:ce:fd:b4:fc:26:52:6f:14:
         77:4a:32:94:d4:4b:4d:de:48:aa:ef:d5:32:b4:bb:ad:b9:ce:
         ca:0d:4b:ba:72:53:0e:87:d7:a5:50:8e:45:48:8c:38:c1:84:
         f2:c1:ad:cd:58:0d:2e:aa:53:ba:a8:7d:3c:c8:eb:15:8b:25:
         03:9d:6c:8b:e9:3f:1c:37:5b:0f:86:e4:b8:17:28:b9:51:41:
         5e:57:95:8b:d4:58:3b:b9:e2:b7:83:0a:bd:b3:84:82:d8:aa:
         76:29:49:31:2a:28:39:78:0a:f0:54:ca:31:00:e2:ad:ff:49:
         5a:b8:21:15:0f:b3:26:78:09:48:5a:ff:9e:93:61:61:9f:f5:
         0f:7b:64:40:ad:5e:ce:62:38:26:f5:64:01:95:dd:a8:47:20:
         c3:30:a7:13:9a:6b:8a:1a:7f:99:af:a6:17:30:8e:b3:f2:7d:
         80:7a:4c:7e:95:f8:ba:0b:ad:3c:62:60:0c:a5:6f:0b:e9:5a:
         d7:ea:a5:13:13:64:1c:b7:a7:97:48:84:1a:90:07:03:39:86:
         57:dd:01:c6:4a:ca:dd:34:a3:e1:ed:50:f3:4f:98:7a:39:87:
         d3:38:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:36:05 2025 by rpki-client