Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File:                     5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier:          HpIaWrbl+BLnHYmsf1qtjPrzzLoJEC2fweXAAb4KCPE=
Subject key identifier:   FC:63:59:D4:3B:89:7A:92:92:43:AC:4A:E8:E8:D3:C3:69:05:39:4B
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number:          023A
Signing time:             Sat 31 May 2025 02:05:15 +0000
Manifest this update:     Sat 31 May 2025 02:05:15 +0000
Manifest next update:     Sat 07 Jun 2025 02:05:15 +0000
Files and hashes:         1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: Npnxb6SSpXgtTDfDoEL40zyMneBY/g+dKcUL7aqO2bE=)
                          2: C578C852218A11EFB28E7B82C4F9AE02.roa (hash: kTzsqNEXZTEaSzrPrWyUs9cD3MM8KSq3zyWoBQVDjyE=)
                          3: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=)
                          4: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: May 31 02:05:15 2025 GMT
            Not After : Jun  7 02:05:15 2025 GMT
        Subject: CN=683a63db-9ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:d6:17:65:58:e9:78:12:12:ca:b3:63:ae:
                    38:c4:7e:d2:c5:93:f9:17:a7:fe:77:b6:dc:d3:bb:
                    c2:61:a2:76:d2:e3:c8:99:44:8b:d3:16:3c:65:0e:
                    68:9f:3a:d0:04:d1:4a:bb:18:a8:fd:ed:43:49:e0:
                    7f:1b:20:cc:9c:91:fb:31:37:53:98:19:1a:eb:f1:
                    4c:f4:7a:db:b9:f8:1c:4e:53:db:ff:a3:ef:e4:14:
                    b8:2f:73:02:17:47:27:b3:73:02:e7:80:ae:9b:1f:
                    5d:ed:a8:2c:86:f3:c4:65:8b:31:bd:77:5b:00:36:
                    2c:13:7e:32:c7:6d:52:6c:7e:be:64:8e:d5:96:f6:
                    00:ba:b8:f2:e7:60:d3:95:f4:83:cd:f8:0c:68:88:
                    03:05:d7:b1:2b:63:80:9c:0e:13:44:f1:35:f8:5e:
                    ea:78:e5:48:c8:56:76:56:f8:62:21:98:83:f3:1f:
                    84:42:25:0c:75:6e:ea:2f:6a:c7:57:bc:f0:6b:a7:
                    ad:7c:88:02:6d:17:15:5e:80:92:37:16:0b:a7:46:
                    44:a5:ac:31:75:f8:89:c2:15:9a:be:57:d5:19:4e:
                    a0:69:e3:1c:cc:af:57:b1:9f:90:ec:13:a8:ed:8c:
                    b8:58:d8:2c:79:08:f9:ac:0e:2f:70:f0:6e:a8:01:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:63:59:D4:3B:89:7A:92:92:43:AC:4A:E8:E8:D3:C3:69:05:39:4B
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:42:90:bc:df:c3:31:8c:b8:3e:38:ec:c9:d6:4b:d9:dd:97:
         a2:60:9d:fa:b9:36:6c:fa:fb:7c:25:fa:80:b3:f4:c4:62:b0:
         ae:c0:9c:4d:32:38:77:25:d3:c1:e6:68:69:c4:60:be:bf:7e:
         91:b2:7f:b9:e5:80:55:07:9c:ad:d6:14:19:d4:c6:c0:1f:6a:
         f8:94:91:36:0a:3c:9d:4a:ac:a5:b8:bd:e1:d4:2a:46:3a:78:
         93:c1:ab:fa:b5:86:33:fb:76:1c:bf:6d:c1:88:95:ee:9a:7f:
         d7:40:bd:f0:16:fd:51:73:37:80:d3:3a:78:a6:92:f5:ab:6c:
         e7:a0:4b:f2:1d:c8:24:21:5d:74:75:52:40:a7:29:86:0a:e1:
         ea:fd:02:3e:2f:05:b8:aa:b1:3d:16:e7:37:0f:d2:94:78:28:
         73:80:72:5b:80:34:02:94:86:c5:ff:84:cf:d5:ff:c0:4b:b8:
         06:a4:ff:f6:72:5c:3a:1c:3f:8c:a7:4c:72:d0:84:e4:8d:4e:
         4c:35:39:07:47:b5:2a:8f:64:3a:2f:0c:9a:75:f3:39:70:6c:
         3a:cc:1e:6f:19:b6:a1:de:7c:7e:8d:ab:ea:ff:36:78:db:44:
         08:ef:22:43:47:9a:3a:58:1e:50:d6:e5:07:86:a9:39:ff:51:
         81:71:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:53:44 2025 by rpki-client