Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File:                     _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier:          DWLK6uFS16O5+CLtcZYxMsi2rEHSxPk7d/GQwsoJqYg=
Subject key identifier:   22:5C:D9:CB:3C:02:99:89:96:1A:5A:21:66:C1:1A:1E:E1:18:E5:3B
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer:       /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number:          91
Signing time:             Fri 13 Jun 2025 05:24:14 +0000
Manifest this update:     Fri 13 Jun 2025 05:24:14 +0000
Manifest next update:     Fri 20 Jun 2025 05:24:14 +0000
Files and hashes:         1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: zjplEg+y1jpsMcdzUT4sqwol+XAojjwGKsu9uRk2kpQ=)
                          2: B538B552701211EFB6868329C4F9AE02.roa (hash: 29NsNsEH3hS+ytz7V80jP+Hgfwg6ZXrunR8Rxp6hBOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
                          rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
        Validity
            Not Before: Jun 13 05:24:14 2025 GMT
            Not After : Jun 20 05:24:14 2025 GMT
        Subject: CN=684bb5fe-1580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:4b:86:03:90:c8:34:c2:1c:52:f9:09:6e:
                    0e:9a:2a:e4:84:01:56:01:a8:28:3c:07:88:84:44:
                    a3:a3:50:53:86:dd:09:5c:6a:2e:a1:2d:78:16:ef:
                    4e:b2:4c:4e:b9:0a:e5:cd:9f:74:0e:18:58:3e:95:
                    bf:7b:0b:75:46:a4:09:c3:a4:4a:3b:58:a3:f6:b1:
                    28:3f:55:e0:df:f7:23:9a:63:5f:ac:c7:a3:28:71:
                    c8:3f:08:a2:85:14:af:a1:4a:63:7e:50:7d:98:a2:
                    22:b5:e5:40:75:09:da:c5:34:b9:89:54:86:da:2e:
                    38:6b:f1:6e:c5:a8:70:dc:c6:cb:0f:d6:a8:fe:bb:
                    28:98:85:73:46:a2:6f:fa:a1:7b:f8:34:76:3c:19:
                    2a:6c:2c:7e:ad:c6:3c:4b:ed:e9:ed:3d:08:56:6a:
                    35:3b:da:6f:1c:0d:4d:10:49:4c:a0:18:ce:fc:e8:
                    ab:54:c5:fe:8e:61:35:75:0d:66:f5:c3:d3:c9:93:
                    70:49:3d:af:af:29:81:38:ed:7f:61:31:e9:53:45:
                    2c:8e:a8:18:39:3d:35:d5:37:0b:90:ab:c8:62:a5:
                    60:fd:bb:a3:f0:38:42:ba:cf:2f:e7:d9:5c:f6:99:
                    40:12:8d:7b:52:8a:c9:bc:b7:10:71:e8:2a:88:5a:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:D9:CB:3C:02:99:89:96:1A:5A:21:66:C1:1A:1E:E1:18:E5:3B
            X509v3 Authority Key Identifier:
                keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a3:e6:28:71:bf:34:53:3f:dd:ce:ef:3a:6c:5b:bb:36:a1:
         5e:ad:21:d6:a5:59:76:a1:f5:ec:11:69:91:fc:45:33:c5:2f:
         b9:66:11:b2:1d:94:31:19:ca:0a:9c:5e:48:e7:67:63:71:34:
         42:94:56:7b:63:22:7b:26:6a:0f:92:3e:40:71:1f:5d:a5:83:
         63:a5:ed:10:68:8f:71:69:56:dd:e2:be:0c:2a:dc:9c:55:dd:
         fc:65:17:45:bb:59:dd:19:84:16:8e:d0:cc:62:2c:a9:a2:59:
         f9:7e:3d:00:cf:24:10:c2:d2:a6:6b:26:ff:a3:1b:8d:76:95:
         97:17:f0:d5:20:17:2d:06:06:17:8f:c1:ab:f4:be:62:4e:a6:
         3b:e3:57:f0:5a:66:a9:cd:41:cd:19:0c:e3:1e:9a:5f:86:ec:
         e0:50:02:2f:e1:54:89:23:bb:ad:a4:98:d2:4d:61:88:aa:7f:
         e4:9e:f1:42:9d:a3:72:fc:22:44:b2:5d:17:07:44:24:23:ef:
         c6:bb:4c:68:4f:d3:d0:33:8c:98:92:6c:1e:56:97:fa:f3:7c:
         e1:91:73:ee:1b:7d:68:f5:db:01:c2:9f:cd:95:4a:4c:14:90:
         76:8f:51:19:47:86:3e:c7:25:a9:5d:b1:a8:39:73:19:eb:f3:
         d0:c6:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:39:19 2025 by rpki-client