Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File:                     -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier:          uFFXKZepT9g3yHsLRaTNEFhTP5O5bCLYO7S8sjHb5LQ=
Subject key identifier:   96:ED:16:32:AA:22:FF:1A:AE:A7:E7:A2:7A:DD:2D:16:60:56:9E:C9
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number:          0160
Signing time:             Sat 31 May 2025 03:44:35 +0000
Manifest this update:     Sat 31 May 2025 03:44:34 +0000
Manifest next update:     Sat 07 Jun 2025 03:44:34 +0000
Files and hashes:         1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: ddoFWzq5a3YzzNNAtzMWi1DfFqW5nVq0IIcsI+0cSC4=)
                          2: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: u2g7zPvUKLKfN0HGmqqEcC8SKK5ZutcT7DtbZgDdUks=)
                          3: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: mjOOkG8qUpO+xbmYGSj1aPD8sXpbieWikDw9vb+D/OA=)
                          4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: 3Dli7pFjerFJHZdvZGuoM+mTT8Fntf3sMb0Ui6DVQHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: May 31 03:44:34 2025 GMT
            Not After : Jun  7 03:44:34 2025 GMT
        Subject: CN=683a7b23-b9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:2a:b8:70:23:e0:ad:96:7a:3f:e2:5a:4c:
                    bb:22:22:c3:89:58:f7:d7:47:63:fb:f4:34:dc:d0:
                    02:0e:af:01:4b:5b:04:6d:70:34:2a:f9:5e:6f:c4:
                    2e:03:8a:cf:97:c8:bc:f4:00:98:84:b4:28:97:57:
                    c3:59:5d:32:74:3a:fb:a0:a7:99:2e:67:fe:3d:48:
                    ca:05:1b:38:88:78:6f:1c:d9:c2:b5:85:f5:74:30:
                    c8:16:e7:b4:12:98:26:83:8f:2d:c3:2a:6d:50:87:
                    36:d4:e9:c3:a0:bb:63:0d:45:47:bd:98:62:fb:16:
                    60:b7:ed:e4:7d:39:4f:09:2b:95:86:5b:08:d3:a2:
                    22:d2:19:6d:26:17:15:51:e4:60:cf:fc:ab:7e:b9:
                    5f:a2:81:3f:1e:91:71:ec:6d:99:42:18:cc:af:1a:
                    7a:32:2d:7b:59:08:ac:b7:c7:1a:f4:d0:b1:6b:c6:
                    b5:b9:86:08:ec:63:de:4d:5b:4e:e4:1e:c5:d0:a3:
                    29:bd:fe:97:51:49:85:5d:c9:8e:91:92:df:8e:b5:
                    fb:9a:b7:70:bc:ec:0f:b4:75:f5:30:41:96:df:5b:
                    dc:e3:d5:cb:05:17:cc:b0:10:63:28:02:12:44:d4:
                    ca:3c:67:ab:eb:4d:a0:e3:b3:b4:4f:d1:75:2a:8d:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:16:32:AA:22:FF:1A:AE:A7:E7:A2:7A:DD:2D:16:60:56:9E:C9
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:ae:a9:95:55:36:e0:0b:12:45:13:5f:d9:ba:e6:c4:60:
         07:c1:d5:1f:2b:23:6a:45:5e:fd:ba:67:48:09:d8:2e:95:6e:
         90:86:0d:71:e1:0d:2d:16:eb:0b:d8:f0:4b:5c:30:f3:2d:16:
         b2:a9:53:d1:49:da:11:00:de:eb:74:17:50:d4:00:ca:47:ee:
         06:ee:13:ab:d4:9d:e8:d4:f6:02:5c:31:2d:55:f3:b6:15:a7:
         22:c6:c2:79:47:c8:34:d8:ed:01:63:4c:dd:33:8e:36:6d:52:
         d8:9d:b8:b6:27:75:d2:e8:a9:6a:3c:d5:a9:bd:36:48:b0:27:
         75:09:b6:37:cf:f2:17:85:97:35:cf:3a:f1:c7:6c:cf:f8:5c:
         c9:1e:fb:85:d8:ab:ea:1d:94:72:28:8d:ff:af:0b:fe:19:a6:
         4b:03:13:10:09:7f:69:b8:d4:3b:41:97:b8:7e:08:52:88:c5:
         4c:7e:f0:24:fa:a3:5f:02:2f:28:f3:90:36:56:6f:bf:2e:22:
         45:a1:86:37:82:fc:9c:92:33:fb:db:87:48:d8:81:f1:fd:18:
         e4:70:ba:44:4b:82:2d:96:dc:64:27:2d:09:52:a1:b9:24:93:
         1b:c2:80:39:0e:b4:7d:f4:07:fd:e4:9a:25:72:d5:7e:0f:c3:
         2b:c9:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:33:03 2025 by rpki-client