Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          KmCVQIiZg3TUXPxidNNaP7t/nmDNY1Lte7mZt4NqnoQ=
Subject key identifier:   E0:36:2D:CF:C8:9E:33:3D:8F:B5:04:B7:25:A9:D1:B0:1F:4C:E7:17
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          054E
Signing time:             Thu 24 Apr 2025 23:21:13 +0000
Manifest this update:     Thu 24 Apr 2025 23:21:13 +0000
Manifest next update:     Thu 01 May 2025 23:21:13 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: wkkaBLXpvyJeHSsODn4PPa4HXddGFqrPgF06DwJoI44=)
                          2: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: +FHx1Rcmiw2Cfk5r6pkki5E5DN80dE1EMz6qZ6ArXQ8=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: azztU6jGWGkJ9XE0wv+vwlMZ1OuwZlxTMNo/JPXSCFM=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: KiUHl6uGGniLvYgVccNgvCIPRBq7X96S1xDDUjJ+aSw=)
                          5: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: FPSQ8p1kwZ3vXAQbffUHxGVHKyRBni/t9uDlhC1ac7I=)
                          6: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: DXFu7/3s3dZZufQfCR7FXNUXUWGkobLBbIzZTN9Mp7k=)
                          7: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: pI7ua1FostnjJb7ZIqAIfoEGZMv41AhlErmhbZ8SW+0=)
                          8: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: zOp+pmoPEmD9FqhHLLTWspA0hasdoDJWm9XMS78WorI=)
                          9: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: fV3NIiz/nP1VFmLUqpUHxb/qO3YbAJnR1/hn6cqYalA=)
                          10: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: /5vaFU/movPiNcrsjCj3H2p31M+BSywFDXfC27bwtzs=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: Rtj2YZUzcKfkgTDcvh/sESq8bL/Thyrlj4Jg24VeLAs=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: xyrw8EmHYaazvYNSzHgYLMsIR2DQgj7hYHdBqp8rGQY=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: YomnTGjnYQfGm6lXnJ1sPxZZ35epRd9BPyzWwaToY+I=)
                          14: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: zujVYZo1Gy2knnWLbno31U8SLXqyX16vRQYdNEeh8/g=)
                          15: 3B398B8A178411EC83735974C4F9AE02.roa (hash: SksUcxMguSSsYgsTOlV2nGlosz5GcrNGDJ2VSXMrlE0=)
                          16: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: B82Un+DU6B7NyuhVj1V9v///1zPVJ3rXRY6EcEaq0ew=)
                          17: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: P9HR6alaLKKcvAvinbQN/9aMjtdjm5ZAoDIUPrfljRg=)
                          18: 3BE907D6178411EC83735974C4F9AE02.roa (hash: ceitiXpUr0OmO04261kMJXcBcKDZSuQ6TyY/na8WY3c=)
                          19: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: QcEFCbKzSrsMklkI1eWiqnxmw/ZSSPLydpwjTEuoR+k=)
                          20: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: MQyExLb7Mr7D0TumhjujEz9GIqRyF/YS1SDy3bPilrg=)
                          21: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: PT9TyyH2chY28D7xFpiGeKe73ZXXzfI6IzydINCCygw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464 (0x5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Apr 24 23:21:13 2025 GMT
            Not After : May  1 23:21:13 2025 GMT
        Subject: CN=680ac769-bab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:5c:b7:cb:c9:2a:b3:03:66:8c:95:7c:d7:
                    04:0f:16:5b:a3:97:91:5d:aa:4d:54:77:e1:b5:65:
                    43:c6:e2:4d:f8:62:ae:ec:4f:a7:c4:b2:04:14:16:
                    96:ba:37:97:fc:78:45:d0:50:da:58:ad:57:42:57:
                    5b:7f:4c:4b:65:7b:b1:35:39:39:13:99:a6:5a:f1:
                    0b:f8:23:eb:60:80:87:ee:20:ad:c3:bc:c8:69:62:
                    0e:c4:9a:43:84:5b:87:51:15:c9:5c:41:d7:1a:ff:
                    cb:26:cd:fe:24:e7:32:93:48:5c:fe:9a:56:db:c6:
                    ca:83:80:1e:94:90:8c:ed:6f:89:e8:2d:23:93:6f:
                    99:a6:af:0f:d6:1b:bc:87:f0:96:d1:97:ce:0b:2d:
                    9e:db:36:ce:17:f5:48:72:8d:6e:95:3c:fe:94:ba:
                    66:41:f7:10:40:fd:6b:04:96:5a:c5:34:df:5a:82:
                    c0:b6:66:78:e5:a3:40:a7:49:91:8a:52:da:02:43:
                    52:0f:1f:75:35:7b:d3:a5:07:72:f0:d9:d1:3e:73:
                    a9:71:59:00:53:35:f7:e1:39:62:b7:d6:8d:54:7e:
                    b5:c9:6f:7e:5f:01:ee:9f:1d:88:4a:0d:b7:27:0a:
                    b4:0e:6f:be:b3:ae:46:4d:a4:51:9f:0f:00:61:f6:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:2D:CF:C8:9E:33:3D:8F:B5:04:B7:25:A9:D1:B0:1F:4C:E7:17
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:65:c3:fd:dd:3f:a7:82:70:22:bb:b0:09:76:34:88:3a:0a:
         44:fe:eb:33:0c:6a:c3:83:3c:57:db:27:c0:0f:87:9f:fe:bc:
         d5:ae:e7:43:9a:0d:56:91:99:2a:e7:ec:77:60:2b:db:9e:1d:
         34:cd:9c:0f:49:fd:97:56:df:a2:13:0f:a3:68:a1:e1:7b:ea:
         1b:fd:c4:24:df:93:c4:44:6b:d7:cd:50:19:dd:f7:06:26:c5:
         88:ea:d3:ca:0b:db:ba:e2:9e:76:48:fd:21:ed:74:35:e6:ef:
         a0:79:b5:0c:74:31:5a:a5:d7:21:63:eb:bb:20:5f:30:0d:49:
         b6:8a:8f:1b:5a:03:ac:7f:63:72:e5:78:b0:15:25:2e:d0:f6:
         9b:e0:56:cd:25:da:56:c5:ea:1d:2c:45:bd:ac:a2:b4:53:9d:
         d3:4b:19:57:35:1e:b5:d3:ad:87:13:17:6f:2e:7a:d7:4a:3c:
         45:64:8e:b4:ca:36:dc:3f:e7:d9:07:b1:d4:9b:e5:f7:b5:67:
         b9:c4:da:42:b5:ea:7c:52:a3:b9:e1:5f:68:0b:68:28:8a:b9:
         f6:99:d7:f4:9c:d6:a2:d1:8e:f0:10:96:35:e4:63:d2:ab:85:
         09:8d:27:6f:21:92:ef:ec:a1:9e:61:d0:5b:21:81:ef:2f:cd:
         5c:8e:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:33 2025 by rpki-client