Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
File:                     53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json)
Hash identifier:          KPk5idMyIdQv/d7OnUhkdhkiYu2tizNLFcT7aPac4Jw=
Subject key identifier:   22:99:F1:C9:FA:3F:11:15:1F:DD:9D:A0:17:2A:91:AC:43:BC:D7:0F
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Certificate issuer:       /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
Manifest number:          0124
Signing time:             Sat 15 Feb 2025 05:55:48 +0000
Manifest this update:     Sat 15 Feb 2025 05:55:48 +0000
Manifest next update:     Sat 22 Feb 2025 05:55:48 +0000
Files and hashes:         1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: pGtBB2l5h9iDWWlGkAOMYuVtGMWE6x3DefeBBO+pSRk=)
                          2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: qiuU93Lc7YatLMlsGPtovUfT87zuHB3bZX8CwFGs5GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
                          rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F715C
        Validity
            Not Before: Feb 15 05:55:48 2025 GMT
            Not After : Feb 22 05:55:48 2025 GMT
        Subject: CN=67b02c64-6afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:ed:0c:12:e4:4e:2e:c0:f2:fd:b5:55:d7:
                    95:c5:9c:60:95:e0:53:48:c5:e9:a9:b5:37:1e:7f:
                    36:77:ae:e0:9c:78:27:a8:ac:d1:80:d4:fb:0b:26:
                    c1:69:dd:ed:8d:77:a5:2b:69:54:e2:98:0d:ce:fd:
                    90:18:75:38:6e:44:1d:7b:30:97:ed:95:c8:e8:b8:
                    fe:4d:14:e4:47:49:eb:d9:62:a0:13:2e:61:3b:d4:
                    ef:96:9e:8f:60:0c:11:ad:01:d6:85:17:8b:7f:d1:
                    c2:7c:f8:d7:64:01:83:17:61:b0:41:38:f0:ba:e3:
                    d5:5e:b9:34:07:3d:9f:5f:29:f2:cd:fa:96:ea:fd:
                    10:98:69:e0:c0:8a:d4:db:00:54:0b:69:a4:6a:b4:
                    58:65:db:32:6c:21:bb:31:9d:d3:59:16:a2:d6:a5:
                    d3:86:b7:4a:89:66:ec:eb:c1:b4:b4:0a:3d:d0:7f:
                    0d:b3:dc:20:4e:a6:80:18:a4:c1:4f:53:f6:b3:29:
                    44:bd:98:fe:59:a5:1c:c0:26:0c:8f:61:6d:c5:03:
                    e8:3c:de:db:68:37:49:25:75:db:df:05:0f:a0:d7:
                    8c:fb:89:3f:74:1b:02:a4:b6:30:8c:4a:19:5c:35:
                    52:b3:8e:de:31:74:c1:7d:b5:bb:54:6b:1a:5b:6f:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:F1:C9:FA:3F:11:15:1F:DD:9D:A0:17:2A:91:AC:43:BC:D7:0F
            X509v3 Authority Key Identifier:
                keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:37:33:66:aa:78:23:df:a2:86:64:3d:09:0c:97:92:ec:4f:
         95:10:d7:b6:a3:48:bb:37:df:dc:c7:80:29:db:1b:c9:10:4b:
         66:ca:d6:da:31:5e:72:ca:41:cf:b2:96:df:d5:a0:05:f8:63:
         62:55:83:43:cf:65:77:06:76:2e:af:f0:ba:26:6e:00:83:7b:
         cd:85:47:27:c4:5a:61:c4:98:20:51:3f:03:e5:45:db:5a:2e:
         a9:77:bb:44:4a:a5:2d:0d:a8:8f:a1:fc:f1:23:8d:25:5e:08:
         c0:91:c3:08:83:97:72:88:da:60:55:f3:8b:7d:7b:af:d2:62:
         6c:92:38:7c:49:22:f8:c1:66:a4:a4:18:a2:dd:79:0a:a4:73:
         67:18:c7:d1:58:25:b0:a9:9f:b6:b4:c6:f2:0a:d4:74:b0:1f:
         3f:41:c1:b5:e2:e6:af:85:c6:17:d6:f1:6d:b6:bb:4c:ba:fe:
         71:13:08:55:f9:e4:ad:09:9c:05:d1:4b:3e:aa:84:f6:64:d7:
         72:7e:55:1e:59:d8:ad:db:7d:6a:5a:cb:57:9c:2e:b3:b6:64:
         b6:1d:e5:e5:94:b7:d9:80:80:a8:72:65:43:67:c0:f2:d0:bf:
         f4:bf:53:50:f6:37:04:8c:09:61:b5:ea:59:2c:da:e2:a9:d5:
         cd:8e:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:13 2025 by rpki-client