Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          6pGJJnWYrGoGVIK58jx2a6Ml0wFOOTSiB1FXVsBlQfA=
Subject key identifier:   05:75:89:82:A8:2A:8B:78:DD:DC:3C:62:8E:98:9E:AC:BD:DD:D8:68
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          0555
Signing time:             Sat 31 May 2025 00:25:23 +0000
Manifest this update:     Sat 31 May 2025 00:25:23 +0000
Manifest next update:     Sat 07 Jun 2025 00:25:23 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: jNeSTTa9PV98ubE7aLG9+hCAZNjsc56fEzErFidZ310=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: C9U0iPB8A/9VqWcnQG5AxuP08um0L5X8KsDf++uFfPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: May 31 00:25:23 2025 GMT
            Not After : Jun  7 00:25:23 2025 GMT
        Subject: CN=683a4c73-7ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:6f:75:27:e6:f9:da:91:62:2e:d6:14:04:
                    3d:0c:ab:b0:87:fc:5e:c7:58:42:00:7f:94:18:5e:
                    8c:03:b3:23:40:ed:be:8a:b3:41:57:78:80:e2:f3:
                    89:6c:18:a8:af:2d:04:8f:1e:b8:e0:fa:ee:1b:a0:
                    b9:6d:e4:f0:cc:7b:c3:ad:03:cf:db:b0:64:b1:96:
                    66:54:b7:4f:9a:bd:c6:db:68:3b:be:99:89:c3:fe:
                    0d:00:30:9a:2e:4e:74:a7:14:94:09:a9:91:51:9d:
                    fe:de:b3:12:92:4d:e4:d9:2b:52:dc:58:70:e9:2a:
                    09:b7:6f:0f:00:00:83:c3:f0:5d:01:e7:b0:fc:44:
                    d4:5b:51:c0:47:1d:13:2c:38:4e:fe:65:1d:2d:f1:
                    92:6a:a7:67:e8:cc:3b:75:6e:06:b0:ff:70:14:49:
                    35:d6:2f:fc:de:4a:64:8e:5f:1e:bd:f9:72:7a:94:
                    20:52:4a:e4:ec:3f:c1:ac:c4:42:3d:74:3c:ab:ea:
                    59:29:61:50:49:7a:27:da:5b:60:00:c4:cb:9c:eb:
                    00:1e:00:93:b2:8d:f2:32:90:66:cc:d6:b9:12:c7:
                    7c:c7:6f:c5:26:7c:af:80:86:bf:84:b6:96:38:48:
                    b6:0d:07:73:84:c1:59:5f:0f:9a:5b:f1:f7:86:ca:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:75:89:82:A8:2A:8B:78:DD:DC:3C:62:8E:98:9E:AC:BD:DD:D8:68
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:b2:9f:f7:6d:12:5e:dd:ce:dd:4e:7d:ec:52:36:64:67:
         a8:ca:ee:63:91:0d:d0:07:29:a4:3b:4f:86:ea:51:8a:06:9d:
         a2:89:64:66:c9:b2:9d:8c:53:78:2d:26:99:2b:32:18:0f:11:
         3a:d6:95:ba:30:5f:c1:34:8c:a8:06:50:5f:c5:4e:fa:47:5e:
         b3:54:b0:bc:03:d1:da:81:70:c3:a7:f2:77:cf:3b:db:07:15:
         9b:28:26:87:cf:c2:ee:38:d2:7f:44:07:f3:30:c2:9e:ae:05:
         ec:32:39:e7:af:5a:5e:bc:6e:a6:cc:8d:d3:75:94:7e:54:57:
         53:9d:ed:70:68:0e:48:5f:22:62:8b:66:af:44:07:95:ea:20:
         c6:c5:a6:1d:94:66:f0:d0:b2:6b:e7:a7:e8:ef:d0:0e:73:d5:
         64:62:07:bf:99:e1:09:82:23:d6:3c:81:0e:62:34:22:55:95:
         80:ad:fb:7c:27:83:2b:b7:d9:f5:2b:61:a0:22:9f:d3:2b:97:
         c3:91:73:f7:8c:3b:9d:28:a1:e3:d1:f3:23:e9:86:53:b3:a6:
         8b:44:27:f2:94:82:85:9d:94:e3:57:8a:59:ba:5c:f2:e0:7c:
         78:34:af:1a:b2:0b:33:ae:41:7d:24:d2:42:53:9c:bb:22:aa:
         7d:35:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:36:47 2025 by rpki-client