Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
File:                     g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json)
Hash identifier:          HgPFrCFYmmz9sGkPF7fjWM4Y+TpzvrZtn3dJcTf9zCI=
Subject key identifier:   AE:1F:F6:9E:6E:34:EB:9E:61:35:25:50:63:91:11:8E:EA:C1:9B:8B
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Certificate issuer:       /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
Manifest number:          94
Signing time:             Thu 13 Mar 2025 04:26:39 +0000
Manifest this update:     Thu 13 Mar 2025 04:26:38 +0000
Manifest next update:     Thu 20 Mar 2025 04:26:38 +0000
Files and hashes:         1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: RO1gHrUPU/0njc2gljNi/bFY6KqOnu5vglQapigPyH0=)
                          2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: sXijOKbCJmo7Vc9siLjMj6vbNj9IjkbsFg/cetJYPUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 04:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091
        Validity
            Not Before: Mar 13 04:26:38 2025 GMT
            Not After : Mar 20 04:26:38 2025 GMT
        Subject: CN=67d25e7f-9ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:fe:2b:16:77:a3:b8:49:6a:a4:2f:78:26:
                    60:b6:9a:cd:04:c6:b1:58:f1:ed:92:49:de:97:ad:
                    4d:ed:78:81:1a:c5:5e:2e:f6:5c:7b:2d:21:2c:10:
                    8f:60:98:f4:ff:40:c6:07:56:8b:1d:66:dc:69:63:
                    42:44:87:f8:b8:05:cd:f4:6a:5b:1f:3c:1e:52:b8:
                    d3:34:41:ed:bb:a9:7a:a6:7a:24:52:48:6f:1f:aa:
                    a5:54:f3:40:81:20:c4:4e:cb:71:8f:8a:4a:33:66:
                    17:17:bb:5d:69:70:31:9a:17:2b:a3:98:14:48:08:
                    8e:a9:b9:55:a0:24:66:f0:ed:11:6d:09:f0:61:dc:
                    a9:cb:41:ac:d3:bc:19:7d:45:bc:31:36:2d:50:81:
                    5a:b6:4c:8d:d4:57:e8:e3:54:24:e0:3f:80:20:df:
                    ba:20:d8:65:7d:9c:83:f8:c8:2c:9f:70:1c:34:5d:
                    a5:e9:56:e2:1d:44:ba:c7:88:78:11:0b:3e:27:19:
                    12:de:98:2a:c7:39:99:01:66:12:6d:84:9b:17:e4:
                    be:10:b2:b0:26:78:54:ad:7f:bb:b2:d9:09:9b:78:
                    ec:6a:39:14:bb:2d:8c:7e:df:18:2f:dd:73:96:04:
                    ef:1a:3f:43:26:c3:55:4d:cb:61:cb:44:e5:93:03:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1F:F6:9E:6E:34:EB:9E:61:35:25:50:63:91:11:8E:EA:C1:9B:8B
            X509v3 Authority Key Identifier:
                keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:df:46:eb:2f:dc:37:0b:84:b8:0a:28:82:b7:24:6f:c0:64:
         e3:2e:02:9b:3f:13:b4:7d:ba:a0:f9:4f:f7:ac:38:bd:95:a1:
         d5:47:e3:48:89:6a:1b:f2:58:ae:f2:23:06:0b:29:b6:ca:2b:
         81:7f:e5:4f:91:35:3f:e5:5e:a5:8f:94:a0:8b:f1:40:46:45:
         c0:2b:ab:69:07:f9:d4:49:45:8e:30:c8:9d:4a:5f:6d:3c:16:
         0b:0e:f6:7a:74:3d:89:bb:0e:bb:ad:5b:e2:3d:9d:59:57:1e:
         39:cf:1a:20:c7:4a:dd:2d:88:04:e1:fe:fc:b5:88:a5:49:0a:
         22:d9:b4:6a:2a:98:25:0e:c3:09:27:9f:1c:c6:49:4e:e1:04:
         ad:85:fd:a7:5a:a7:8d:cd:5d:12:d6:fb:f7:83:09:9a:00:7c:
         1a:9f:7b:c9:33:ee:2e:c1:f1:72:e7:d1:a1:46:8b:a1:1a:7e:
         f3:bd:e7:29:81:b2:78:e4:d9:a6:e6:f7:b8:14:f8:97:55:67:
         0f:97:09:4b:0b:80:b2:be:7a:77:80:1d:6a:11:a5:ba:6f:fd:
         cf:52:49:f6:8b:28:89:1e:e1:b5:0f:3a:62:83:cf:f2:34:3c:
         8f:a1:e5:13:5d:29:b0:11:64:1e:71:92:6f:f1:44:f5:5c:9e:
         93:a3:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:42 2025 by rpki-client