Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          Hs4bUC1bKTqTYFpbD16gm3najkqqff3hgNsKXqwjYII=
Subject key identifier:   59:0C:74:41:94:02:C7:7D:99:21:A0:8C:14:F7:67:53:CD:BB:28:33
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       08D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          08BF
Signing time:             Fri 30 May 2025 20:43:46 +0000
Manifest this update:     Fri 30 May 2025 20:43:45 +0000
Manifest next update:     Fri 06 Jun 2025 20:43:45 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: WR/Cl0FL2mEd9fyzN8SX1ZIXw1alAMdrDqAD1eE+kxE=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: f8jut1BjubAtyXtCTXzr4YjM1IoW+OqJ6ONFoVgC57s=)
                          3: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: e87UO/bBM1qotzcb+px968JO8+qdT33ozHUSLg/50Ao=)
                          4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: oQXY2oaPmh/e06H6CcARZA2+TLztnodxvYW6Bm4bXO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: May 30 20:43:45 2025 GMT
            Not After : Jun  6 20:43:45 2025 GMT
        Subject: CN=683a1882-67d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:70:66:0d:8f:fc:b1:fe:2f:cc:18:82:9f:
                    b5:06:10:6e:01:d2:88:c7:a0:96:f2:89:60:af:eb:
                    3e:19:07:9a:1e:5b:b7:e3:a4:6f:cb:82:87:c7:94:
                    6b:e1:ba:9c:2f:75:52:e0:e3:37:58:71:2e:24:f3:
                    db:d9:ce:9a:f4:b5:2c:77:af:3b:22:50:76:ae:61:
                    21:7b:14:f5:cb:bc:09:da:b9:eb:c8:f7:32:dc:d8:
                    7c:5e:b8:05:b9:34:a9:60:93:4c:4b:80:e2:d5:fc:
                    19:5e:63:39:2e:fc:ae:1b:da:49:20:b8:29:5d:72:
                    51:bd:02:5c:3f:03:8c:e7:46:c1:7b:5a:2e:0a:c8:
                    0d:01:09:05:a2:3b:ec:bd:3e:ca:f5:fa:91:e0:53:
                    04:23:dd:f5:72:21:93:33:37:e8:dd:87:5d:15:1f:
                    29:3c:74:f2:54:b8:86:4b:a3:35:de:4c:94:8e:51:
                    e9:8d:3c:22:eb:ed:8c:72:13:24:14:51:5e:13:62:
                    80:f6:2e:42:c9:91:06:7e:87:c2:cb:d0:57:22:ac:
                    b8:0e:4c:c7:d7:34:9a:ac:34:ac:c5:0d:82:24:d4:
                    c3:01:47:29:2c:b7:d8:48:c9:4b:07:84:85:c3:4c:
                    18:19:ee:9b:8a:b0:1c:20:29:cb:7d:f1:27:28:9d:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0C:74:41:94:02:C7:7D:99:21:A0:8C:14:F7:67:53:CD:BB:28:33
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c8:3d:61:70:39:38:6a:30:ba:9f:69:8f:aa:ef:bd:1b:9f:
         2a:b7:d0:7f:4a:bc:82:77:72:20:fe:01:17:a5:84:1b:de:44:
         fe:d9:61:8e:ba:24:e0:1b:cb:c7:35:29:14:c2:0a:a9:16:36:
         be:3d:b9:3d:73:b1:54:9c:bc:49:b9:d6:db:0b:aa:4a:10:fc:
         4e:72:16:d1:19:64:d1:59:68:c1:79:70:7d:73:ba:67:f6:8d:
         cd:02:43:6a:55:ce:f2:b4:7b:80:f2:5c:69:3f:dc:d6:46:ab:
         74:27:82:c7:d3:5e:8e:38:40:46:d4:be:1a:fa:ce:9f:ec:fe:
         2c:b8:a3:30:4d:27:03:a3:f6:a9:ec:62:b3:e8:a7:cc:f5:f0:
         a4:9f:c0:4a:b3:d8:7f:73:03:ef:c3:f2:34:ad:02:ce:bc:77:
         a7:96:68:92:dd:94:3f:27:f5:0b:bd:6d:9f:45:0c:e2:c9:cb:
         a2:51:6f:97:af:d7:bd:26:47:34:d5:d2:82:73:00:7a:a6:81:
         89:6e:15:19:22:4d:e1:ee:5f:7f:66:1f:4e:5b:b6:e4:dc:5f:
         12:eb:9c:66:ff:ea:07:85:1f:d5:3e:1d:25:24:bf:7d:5b:5d:
         2b:1a:33:34:07:d9:df:31:e9:66:43:bd:e7:e9:87:41:db:f4:
         29:87:5d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:33:05 2025 by rpki-client