Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
File:                     5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json)
Hash identifier:          dr4u2AZ1u5G5XJLGvNO8R2bIK0/EJ7X72NoVNKCsnJE=
Subject key identifier:   14:31:CE:01:CE:66:FD:10:14:39:FC:3D:44:9A:15:C5:E8:29:62:74
Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
Certificate issuer:       /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
Manifest number:          0176
Signing time:             Sun 15 Jun 2025 03:07:22 +0000
Manifest this update:     Sun 15 Jun 2025 03:07:21 +0000
Manifest next update:     Sun 22 Jun 2025 03:07:21 +0000
Files and hashes:         1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: mCfhKqI3CGOf9nNQG38mZ6IZgBCOI/2VKyqutAoUG8g=)
                          2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: epExzgPr36sDhlRxRH5MQNOpHIGT7+cJfb/YyVTxfcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
                          rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
        Validity
            Not Before: Jun 15 03:07:21 2025 GMT
            Not After : Jun 22 03:07:21 2025 GMT
        Subject: CN=684e38ea-cee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:3b:07:ca:0a:81:75:53:7a:b7:13:e8:1e:
                    3a:7a:ef:8c:97:e3:84:74:b7:1e:0c:c6:fc:96:34:
                    13:e2:3a:b4:82:0d:ee:21:e3:63:85:cc:ed:e5:58:
                    79:96:84:b4:0d:36:8f:d2:c1:ef:06:3e:82:71:97:
                    26:05:d8:fa:3b:97:8c:44:9d:4a:79:95:9b:2a:ca:
                    cb:7d:2c:f5:53:c8:ed:23:75:3e:da:0d:5f:af:f8:
                    0d:e1:59:11:ab:aa:de:ea:67:b7:28:9a:56:7b:f2:
                    60:9a:bc:39:98:e9:7a:13:d2:88:51:0c:4b:2d:ae:
                    7e:51:bd:62:68:63:a1:39:b0:39:75:6c:b7:12:4f:
                    cb:24:3d:5f:c9:d3:7b:20:cb:78:f2:6d:6b:b7:b9:
                    14:56:3e:95:1c:9a:7a:66:25:46:84:ab:d5:43:a0:
                    83:25:2f:e2:b0:dd:54:ba:6a:27:7c:04:fd:9d:28:
                    27:af:4d:5d:83:81:f5:3a:47:61:94:46:e4:e9:4e:
                    48:0d:1e:17:fa:98:65:8e:7f:dd:bd:2a:e1:38:68:
                    02:cc:38:1f:83:76:8e:f1:a2:3b:bb:9f:70:64:d8:
                    a1:8a:6a:f1:2f:49:ab:c1:9f:36:04:40:6c:cc:3f:
                    06:8f:af:b3:62:00:0c:39:1a:77:f8:07:eb:a0:e2:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:31:CE:01:CE:66:FD:10:14:39:FC:3D:44:9A:15:C5:E8:29:62:74
            X509v3 Authority Key Identifier:
                keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:47:86:23:88:3f:5d:54:c3:88:49:15:f4:4f:58:a5:cc:79:
         b4:a4:c1:65:73:88:99:36:4a:ea:a0:95:0f:1e:49:24:bb:77:
         40:ef:31:25:8b:9d:4e:d5:6e:fc:42:15:01:05:2a:ef:79:66:
         a6:51:9c:36:f2:37:1e:1f:ee:e9:4b:5c:5b:6d:88:bd:ac:c3:
         8b:f5:76:ae:d5:a8:3d:9c:96:b6:af:43:32:da:75:82:4d:61:
         a3:c1:b4:3e:4f:77:ac:53:ac:e0:3d:80:3d:7e:57:f7:fe:3d:
         5a:87:19:9b:10:a7:ea:56:71:a2:29:ed:44:32:53:26:0d:10:
         a1:8b:b9:24:61:ec:da:fe:1b:a5:53:e3:36:42:85:ef:74:81:
         b8:a7:e3:7a:75:60:9b:ee:af:9b:a8:cb:e6:6a:b2:c0:5b:e4:
         18:9c:cc:47:15:01:89:c4:33:1f:e5:f6:26:39:c0:90:14:84:
         98:2e:8e:76:38:c9:39:54:db:46:d8:f2:5b:e9:13:82:0e:d5:
         9f:1c:09:5e:fc:b8:4c:e6:7b:04:e3:14:e2:9d:0f:19:4f:7c:
         30:c7:2f:74:39:de:4d:cd:fa:c5:2d:4f:f7:b9:8b:76:fc:d0:
         7e:02:46:8a:8c:96:e4:7c:ed:bf:86:36:f5:df:d2:bc:22:4e:
         ff:49:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:38:32 2025 by rpki-client