Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File:                     Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier:          PAEhRi0+6IMq+e9RbfUHNCNzIRYi3E6yAcWq4w7pAlo=
Subject key identifier:   BE:7D:DC:8D:EB:FB:1D:B9:31:09:36:25:1F:A7:E3:D3:2E:87:E1:B5
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number:          86
Signing time:             Sat 15 Feb 2025 07:47:48 +0000
Manifest this update:     Sat 15 Feb 2025 07:47:47 +0000
Manifest next update:     Sat 22 Feb 2025 07:47:47 +0000
Files and hashes:         1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: +RSXOdra95QrVKxs48jHVOltJ6u64aMsId8wRrZo6GE=)
                          2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: TmyUhAAOaU6CYroA57XlncbnofjVXGoZ5jM7LnuMB/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC
        Validity
            Not Before: Feb 15 07:47:47 2025 GMT
            Not After : Feb 22 07:47:47 2025 GMT
        Subject: CN=67b046a4-b82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:ab:b6:84:1c:0c:b1:6b:ac:ee:5a:29:1d:
                    5e:c8:d2:fd:7e:52:42:51:04:dc:af:51:8d:65:0e:
                    74:8f:41:52:fb:cc:5c:4e:c4:ba:70:34:a1:ae:b9:
                    d1:27:24:00:ec:9e:48:ca:7a:8b:5b:af:2b:1a:45:
                    4e:59:7f:62:de:ca:45:82:06:28:b2:98:ea:33:db:
                    3d:26:39:a5:29:e6:c0:bf:d4:51:f8:6f:ef:50:b0:
                    84:f0:b0:6a:b5:e6:d2:29:42:85:70:92:c7:d9:bd:
                    0d:c6:2d:51:2f:49:22:1d:6c:bd:6c:f9:3b:ce:ee:
                    3c:bf:0a:6d:d7:f2:3c:0c:c8:db:ca:85:2c:8f:ed:
                    a2:38:35:68:90:8a:c1:b2:57:dd:14:07:a0:14:ec:
                    0a:ee:e5:7e:46:61:31:6d:d0:5b:6c:34:3f:45:ac:
                    44:ba:7f:4f:86:bf:1c:2e:c7:63:cc:2b:3c:50:b8:
                    dc:b6:fd:ea:f8:a8:e2:bb:78:38:a6:0f:f2:26:2c:
                    46:d8:6d:8d:b2:10:e7:e0:b3:1d:32:15:17:24:c5:
                    bc:c1:3b:b3:6f:76:42:e5:c7:e2:88:07:7b:b5:78:
                    38:a8:20:5c:98:04:c3:66:2a:22:0c:69:2c:4e:c7:
                    cf:bf:d3:69:e1:51:d2:f1:5f:74:df:43:d8:ee:86:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7D:DC:8D:EB:FB:1D:B9:31:09:36:25:1F:A7:E3:D3:2E:87:E1:B5
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:01:58:16:ee:e6:91:d5:1d:ac:7e:66:d5:9c:5d:5f:0e:73:
         44:83:6d:fe:e7:9d:ac:a3:42:02:28:fc:00:07:8a:c6:e1:99:
         2f:65:05:03:3f:b0:d9:4a:b7:11:5c:af:2a:31:35:35:af:ae:
         15:a2:e4:27:62:5c:71:c2:2e:b8:84:22:b3:1a:ce:ea:f8:8f:
         8c:23:9d:3e:26:d0:24:e3:07:f5:cd:08:86:d2:ce:99:a1:05:
         63:d1:8e:90:f9:09:56:da:17:ed:48:5b:94:05:34:e7:6e:72:
         c9:ab:97:a6:72:d3:ea:4b:21:3f:fd:cc:ea:1e:24:8f:0f:e2:
         e2:0d:88:d9:1f:f1:bd:ac:9a:17:7d:35:12:71:51:dc:8f:8f:
         f4:14:76:c4:dd:a8:0d:04:e9:6f:c9:39:96:cc:8c:54:ea:c4:
         1d:1d:2c:5c:d3:41:93:62:a7:a4:1b:95:03:b8:56:6c:bd:63:
         ac:3a:7a:29:18:8c:6f:86:24:42:a8:a1:1a:4b:86:02:13:35:
         99:95:94:3a:18:63:27:a8:03:8b:69:b5:04:84:bb:e9:3e:fd:
         a3:2b:2e:3b:d7:5f:e9:f5:c0:ac:0b:72:dc:e5:49:12:ab:58:
         59:c1:96:70:92:45:4c:95:46:e0:9c:8e:54:d6:34:96:22:3d:
         80:76:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:05 2025 by rpki-client