Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
File:                     msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json)
Hash identifier:          DUNC8Q/+n+klQjCpc15Q/oUZyaF2iVF9HwnIcRdyRCM=
Subject key identifier:   44:D0:BC:7F:44:16:F0:2A:66:A0:F1:7F:83:93:23:3E:65:CA:51:88
Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
Certificate issuer:       /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
Manifest number:          09D8
Signing time:             Fri 30 May 2025 20:40:12 +0000
Manifest this update:     Fri 30 May 2025 20:40:12 +0000
Manifest next update:     Fri 06 Jun 2025 20:40:12 +0000
Files and hashes:         1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: OzT1eu/DJHsFgCV9Ht95T2g9Nw2R//Bns9I9gu8YdNQ=)
                          2: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: Y+jK0YiITj1fWstmg7VEHVKcSXHK5MXXLGNw5LXxFzk=)
                          3: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (hash: gWIB+Y9hTKP+TMLvq+0rVTxIDDpRJJpgLYlkfQUCFsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
        Validity
            Not Before: May 30 20:40:12 2025 GMT
            Not After : Jun  6 20:40:12 2025 GMT
        Subject: CN=683a17ac-e35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:54:0a:6d:69:08:76:c7:94:55:c2:dd:8e:
                    82:6f:4c:0f:8e:18:36:27:55:45:36:25:65:ec:26:
                    cc:40:8c:1b:f5:3d:e9:95:17:27:84:9a:bb:46:b5:
                    5d:ef:0f:f0:80:bf:c1:81:50:ac:9e:79:25:79:65:
                    9a:fc:8a:c1:f1:4d:60:5e:03:93:cd:ae:35:d1:0d:
                    d5:29:bd:fe:5b:85:2d:e2:ce:c8:27:49:b6:c1:51:
                    ef:2d:90:25:4f:ec:8a:bf:19:91:93:39:75:81:33:
                    3a:43:a8:5e:2a:41:79:f2:d0:4a:81:48:f3:bb:9d:
                    e5:0b:7b:c3:e1:a3:47:76:23:a1:25:8e:81:d4:25:
                    6e:01:a6:1a:ef:35:1d:57:f9:46:4a:bc:a0:dc:02:
                    05:22:76:d2:66:85:48:ac:c5:82:d1:83:02:3d:af:
                    2c:12:3d:71:c7:22:ac:a8:8d:97:bb:a2:72:fc:e8:
                    02:7b:34:8e:c7:73:4f:4c:66:22:57:8c:12:17:a7:
                    b7:99:e8:7b:04:52:31:46:16:c5:d5:26:16:04:55:
                    ce:f6:92:0a:c3:2c:06:e1:70:d5:4a:30:69:41:22:
                    0f:10:7b:e4:3d:b2:92:36:46:69:a2:a2:32:e2:7d:
                    07:42:bf:8e:ec:12:b6:79:94:24:71:95:59:2c:08:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D0:BC:7F:44:16:F0:2A:66:A0:F1:7F:83:93:23:3E:65:CA:51:88
            X509v3 Authority Key Identifier:
                keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ee:96:46:c7:ef:8d:e8:e9:68:a3:14:d0:87:09:d5:77:bb:
         51:a8:1f:5d:2b:c3:ae:8e:5e:9c:85:7d:df:13:e8:c0:60:e1:
         18:f4:4a:bd:13:94:7a:bb:09:3e:f6:55:22:6c:07:06:36:cd:
         9f:50:66:8c:97:71:78:7d:bd:6f:58:cd:3a:ed:90:5e:90:ea:
         70:a6:56:31:28:6c:6f:6e:6e:95:82:60:9d:de:bc:91:94:80:
         56:fa:ae:5e:3d:04:56:a8:f9:02:51:b4:09:2d:bb:93:c7:19:
         03:0c:9c:7f:51:9f:c7:fc:43:1c:de:54:e2:d2:a6:01:88:65:
         33:3a:60:45:a4:a2:41:0b:2e:66:25:94:4c:a3:86:9f:84:7d:
         c9:22:2d:68:cb:76:a6:2f:b9:2b:fb:d7:31:db:8a:eb:b4:64:
         7b:a1:74:a5:65:46:28:9a:d5:6b:d5:97:52:94:37:6a:ca:34:
         e9:ea:10:e4:aa:a2:96:ea:b9:61:15:6e:96:30:46:1d:e3:0a:
         29:2d:cf:38:44:26:4e:50:1f:96:c9:31:72:77:52:8d:2f:17:
         7d:21:f3:11:f3:80:d5:f1:1e:e8:6d:57:7c:80:1b:c1:e1:8b:
         15:59:0f:b9:ce:27:68:f5:fa:fa:8b:27:df:72:3b:6a:54:be:
         b2:bd:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:28:57 2025 by rpki-client