Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File:                     g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier:          bdZ2ChIRxJxPC5cTDj6UiO7Ufm7/gBo5ORylkbaXYNE=
Subject key identifier:   17:11:0A:08:72:94:5C:52:CF:6B:60:F8:31:83:4C:EC:D7:9C:CB:A9
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer:       /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number:          45
Signing time:             Sat 03 May 2025 06:45:22 +0000
Manifest this update:     Sat 03 May 2025 06:45:22 +0000
Manifest next update:     Sat 10 May 2025 06:45:22 +0000
Files and hashes:         1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: cY+js+FzCiY5hwFz2xz605bhsw7qaR9FkilZSDg8qR0=)
                          2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 9VTnLi5T+YYltF+k17fA4MmiG8WRs/lt6DHBJeHF2Cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 06:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
        Validity
            Not Before: May  3 06:45:22 2025 GMT
            Not After : May 10 06:45:22 2025 GMT
        Subject: CN=6815bb82-01d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:90:ae:b9:80:ff:bd:a3:da:12:84:33:fb:
                    d5:50:22:b8:89:6d:07:ea:3d:96:0a:ca:f0:e4:6b:
                    80:17:a4:87:b7:6c:ef:4a:d7:4c:c0:e1:34:ef:bd:
                    41:94:92:8d:a5:0f:2b:3b:f9:5b:4b:1b:54:92:2a:
                    12:9e:e6:ed:ba:f6:4c:24:75:67:d5:3c:b9:08:cb:
                    36:15:0f:ba:3e:d6:4b:3f:81:83:f9:50:8f:7f:54:
                    ae:ed:10:c7:97:54:a5:12:15:1c:83:49:ca:37:c6:
                    bd:7e:07:07:05:bf:f2:e3:03:bf:69:4e:21:6c:53:
                    a1:22:6a:48:f2:e7:65:a3:34:e5:46:79:96:5f:65:
                    0a:16:62:bc:50:99:e2:b9:93:9f:54:dd:bb:2a:9e:
                    8b:d4:d8:12:3c:53:88:7b:cd:91:f0:46:c8:fe:61:
                    4f:07:a9:59:78:f7:2e:28:7d:b5:6c:ab:b2:ae:0b:
                    b0:e7:68:8f:62:bb:da:b4:cc:9f:02:a6:ae:30:b4:
                    e3:11:d4:ff:7c:9b:57:49:c2:e5:cb:d2:75:47:8d:
                    a2:5a:0c:44:be:74:20:15:34:ad:9e:28:0c:32:d6:
                    12:ea:03:6e:df:cf:c6:f9:64:08:7f:4d:b8:72:58:
                    23:6e:cc:1c:c4:ae:4a:4d:2e:e8:09:d6:3a:75:c3:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:11:0A:08:72:94:5C:52:CF:6B:60:F8:31:83:4C:EC:D7:9C:CB:A9
            X509v3 Authority Key Identifier:
                keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:ca:c9:7c:3e:eb:09:48:5b:6c:c0:4c:a1:67:87:43:d9:
         f6:56:9f:df:50:b8:65:64:cb:3d:b5:18:76:d4:54:22:19:dd:
         da:6a:6e:8a:14:ac:d7:ce:33:c5:7b:c7:d5:00:06:d2:1c:ba:
         c3:68:04:61:c9:87:ed:81:ba:8b:2e:70:03:9e:b8:ab:19:7b:
         03:79:b0:31:a2:13:c2:15:b7:fb:f7:7a:6f:f2:1a:35:a4:cd:
         76:ed:5e:b8:60:69:c3:5f:0c:14:4a:65:92:f4:70:67:9e:57:
         78:1c:52:6e:94:8e:cf:12:57:c1:c4:95:2c:19:1c:ce:3d:2b:
         9c:a7:4b:b6:d6:83:db:8a:aa:c1:ba:07:75:b9:87:b0:13:65:
         37:0e:19:6e:d0:3c:c1:da:65:ed:d9:fe:76:3e:72:6f:ca:b9:
         71:fd:73:64:83:ac:25:cb:fa:a5:4e:1d:24:4e:21:06:73:50:
         8c:87:aa:d5:22:7a:88:bd:2b:59:4f:58:89:43:a6:7a:38:72:
         32:45:e9:1c:a5:ed:a2:6c:49:93:e7:43:2f:4b:1b:0a:b0:93:
         58:45:46:c9:a8:a6:cf:e8:55:47:2a:fb:f4:85:4e:66:f1:45:
         83:3c:15:50:c2:b4:b2:1a:eb:42:4e:8a:25:eb:3d:8b:98:0e:
         44:ee:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:36:37 2025 by rpki-client