Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          MnPlPEk/90qhwb9FCZ/5Sua6H7EXHNStjn6U/QfZCUU=
Subject key identifier:   03:FA:2D:1D:43:11:96:5B:30:48:11:CF:52:CF:42:05:2F:24:F9:39
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       099C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number:          0995
Signing time:             Fri 30 May 2025 20:16:46 +0000
Manifest this update:     Fri 30 May 2025 20:16:46 +0000
Manifest next update:     Fri 06 Jun 2025 20:16:46 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: HDz3B3w1j+rt/61AgaJfvrygd61f4yHx/Xdv3aTtUdM=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460 (0x99c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: May 30 20:16:46 2025 GMT
            Not After : Jun  6 20:16:46 2025 GMT
        Subject: CN=683a122e-9b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:e8:f5:01:21:00:00:1d:37:36:43:e9:4b:
                    2e:f8:68:0b:75:e2:26:5d:4c:28:11:e0:dd:22:04:
                    93:16:49:93:dd:4f:fd:f4:a1:28:13:b3:1a:a4:66:
                    92:5a:d3:8b:20:48:8f:3f:59:28:2a:87:30:cf:a3:
                    30:d3:6d:5b:66:f1:f7:5d:47:48:db:1a:49:e2:ea:
                    b4:62:ef:de:fd:61:a4:26:34:18:28:ae:1f:87:25:
                    1b:45:9e:6c:a9:c1:0b:79:76:39:12:37:a4:52:90:
                    09:21:1c:b7:f7:4c:82:df:4d:ff:56:09:21:e5:fe:
                    38:0d:b3:b5:62:8d:90:e6:a5:a0:d5:a0:ac:f9:d1:
                    af:20:ae:51:d9:eb:f8:28:ce:81:05:0a:60:a5:19:
                    f0:d0:af:9f:b3:03:8d:27:94:7b:ad:b1:1a:15:e0:
                    54:7a:f2:78:62:e1:a2:8a:44:3f:50:ce:66:38:93:
                    5b:39:88:d6:a7:90:f4:e8:37:8c:3f:7d:1a:bf:68:
                    e2:78:7a:0e:68:ce:1d:36:5f:ec:30:d8:ba:56:1c:
                    34:42:96:17:0d:7e:b2:59:8f:33:53:9a:a2:ce:48:
                    94:b6:31:24:71:4b:d2:c3:38:64:46:ea:14:9a:4a:
                    7e:a4:c9:7c:64:59:47:57:7a:26:6f:36:16:1c:a8:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FA:2D:1D:43:11:96:5B:30:48:11:CF:52:CF:42:05:2F:24:F9:39
            X509v3 Authority Key Identifier:
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:14:5c:69:5e:1d:45:42:c3:d8:61:9b:8a:37:cb:64:9e:f8:
         ec:c2:a8:77:65:9f:73:b3:1d:b3:50:59:dd:b9:6b:4c:bc:61:
         42:79:fa:00:67:9a:d8:18:7e:b5:08:f2:36:af:6d:44:94:e1:
         6d:48:4e:0f:10:7f:c5:5b:a7:19:8f:68:1b:c8:7f:bf:0f:cc:
         66:8b:ec:43:c2:3e:f6:8f:a1:3a:21:7d:bd:f6:be:a2:6d:b0:
         86:67:e5:a1:32:81:83:3b:10:5e:da:a1:02:b8:7d:aa:a1:23:
         cf:c1:4c:5c:48:de:00:6b:c3:c9:c2:17:16:d9:97:ac:3a:8c:
         d7:a6:d1:0c:00:d6:35:b3:15:c9:b4:18:33:9e:c0:7d:6f:75:
         ec:09:dd:97:d2:bc:e7:38:09:1b:16:e8:e7:62:81:4b:ac:cf:
         21:23:66:d8:c0:d6:bd:9b:65:0a:3a:ea:2b:87:c5:20:fa:d7:
         bc:79:c8:8d:0b:bd:67:2d:97:6a:d7:31:3f:4e:de:6c:14:b1:
         95:e8:38:5b:ab:76:ad:bf:5c:64:f6:d8:5e:70:5b:a5:a6:68:
         a4:24:52:e6:79:96:93:9e:fa:62:72:d3:d6:53:a8:18:24:88:
         5b:e3:d5:08:d4:48:62:2c:7c:90:3c:e6:7e:e0:5d:df:74:8e:
         67:78:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:14:43 2025 by rpki-client