Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
File:                     bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json)
Hash identifier:          Q1f7BpXbrtkf5aovRrHiKgpKoCuTlDNaMu5iPnaRexk=
Subject key identifier:   EE:AC:5F:2D:49:4C:A8:2A:9C:B5:01:D8:3E:F4:2C:C9:41:40:D2:5A
Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Certificate issuer:       /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Certificate serial:       0520
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
Manifest number:          051A
Signing time:             Fri 30 May 2025 23:49:18 +0000
Manifest this update:     Fri 30 May 2025 23:49:17 +0000
Manifest next update:     Fri 06 Jun 2025 23:49:17 +0000
Files and hashes:         1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: g1v8QnZjoJcs9Z9Kkj1o6ngL6bOYL/2M/K4PA1VpaLs=)
                          2: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: V99zGIESWxaCWwIsK3BcjNwowjB6iy3p26jrLpwkePQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
                          rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
        Validity
            Not Before: May 30 23:49:17 2025 GMT
            Not After : Jun  6 23:49:17 2025 GMT
        Subject: CN=683a43fe-645e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:b8:23:9b:f1:6f:4f:8e:82:b5:79:ef:bf:
                    57:4e:79:cb:44:b1:87:46:d1:79:c9:b5:ec:59:63:
                    7f:8c:01:d9:2f:09:8c:0f:26:85:ed:28:6b:30:52:
                    69:36:23:28:e9:c0:54:e4:43:52:92:48:e4:26:00:
                    f6:00:8f:b3:f2:fc:f5:6a:2e:57:f2:62:9c:37:b5:
                    c9:3e:76:29:26:a9:fb:23:5e:4f:f3:3a:cf:9b:13:
                    8d:e7:ef:8b:e4:a4:23:32:10:0c:6e:31:73:e7:18:
                    ef:8d:79:2f:b6:d8:b2:30:d2:39:00:4a:ff:b5:43:
                    a0:47:9e:c3:69:47:14:ff:62:4e:a6:83:60:b2:5f:
                    89:2e:ef:51:7c:c7:69:29:3f:9f:20:1b:35:c2:10:
                    99:2b:7e:c0:95:a7:a1:d2:3f:17:71:46:ab:e7:a7:
                    94:9d:ef:42:0c:05:91:91:c6:82:88:89:2e:7a:f3:
                    1b:6d:28:14:93:1c:e7:51:4f:25:51:df:45:9f:96:
                    1e:f9:a4:38:e3:1b:98:f1:aa:d9:6e:a5:ac:51:74:
                    66:85:9a:21:e1:15:dd:d2:3e:c2:7a:ec:08:ec:3e:
                    66:7c:83:e4:53:6c:5e:fb:48:41:14:e6:56:c9:75:
                    bd:06:dd:08:4f:b4:53:55:b2:74:c6:e4:1e:c8:ce:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:5F:2D:49:4C:A8:2A:9C:B5:01:D8:3E:F4:2C:C9:41:40:D2:5A
            X509v3 Authority Key Identifier:
                keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:77:2f:b7:2e:bf:ff:77:ba:d1:d7:d3:c5:d3:93:54:85:
         ec:f4:1f:95:6b:57:11:d9:e4:52:5d:7d:85:11:54:9f:74:b4:
         c2:c6:da:f1:20:80:2f:b5:34:bb:3d:cf:fd:b2:a1:a2:f8:05:
         64:99:f6:54:88:99:44:16:82:7a:76:d7:49:1c:3a:dc:32:40:
         5b:06:f6:0e:eb:b2:80:95:d5:59:72:22:5a:51:4f:07:d9:c7:
         27:bd:75:89:d7:f8:80:b0:bc:25:67:c0:05:5c:dd:5a:fa:59:
         44:bf:b3:30:1c:90:c1:e5:fb:b6:1e:85:f4:e8:5f:56:54:37:
         51:f2:56:0d:80:5f:26:6d:89:44:86:e8:6c:07:f7:e0:92:5c:
         0e:ba:26:1b:4e:e5:24:14:a7:64:f9:a9:c9:ec:91:56:94:7f:
         bb:12:5a:97:d8:e8:4a:62:2e:b8:d6:8c:5b:e1:ff:36:f6:9d:
         50:45:cc:91:f3:76:7f:3e:f1:65:1e:fe:b6:e8:62:f4:8d:48:
         65:d1:bf:2d:7a:3d:55:de:41:e0:5c:60:53:23:5e:79:ae:b6:
         1a:9a:76:58:5d:22:36:31:9e:c7:b7:cc:5b:fc:f1:bf:2f:10:
         15:5f:4a:a3:63:c5:b0:b5:ad:f7:e7:6a:86:78:06:9e:58:59:
         9a:00:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:39:55 2025 by rpki-client