Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
File:                     U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json)
Hash identifier:          +Vn/0K+AhSwCfMBHyiHcwC8HNJcVTVJFVo5ENgxrR5I=
Subject key identifier:   6D:A8:9A:2A:BB:3D:E4:65:0D:0A:43:49:9F:79:5E:CD:C7:5D:4B:D7
Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95
Certificate issuer:       /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
Manifest number:          58
Signing time:             Fri 25 Apr 2025 06:14:38 +0000
Manifest this update:     Fri 25 Apr 2025 06:14:37 +0000
Manifest next update:     Fri 02 May 2025 06:14:37 +0000
Files and hashes:         1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: 8uElff6ZRgz0UN4mObwjZ9qNBxGVypKD6/BHxJih/xc=)
                          2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl
                          rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95
        Validity
            Not Before: Apr 25 06:14:37 2025 GMT
            Not After : May  2 06:14:37 2025 GMT
        Subject: CN=680b284e-a60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d1:13:65:19:47:77:94:ba:9c:f1:bf:3a:dc:
                    2d:94:59:89:f0:9e:8c:64:81:2a:2a:d2:30:47:11:
                    3c:c9:03:5d:ef:97:ad:27:9b:05:b8:8d:ed:f3:60:
                    e3:a8:94:76:07:74:f7:9e:47:4e:f4:c0:73:c6:b4:
                    bb:43:94:11:8b:2e:de:8b:cf:61:94:b5:a1:f9:84:
                    dd:7d:80:bb:bc:be:6d:d9:c2:f8:47:01:a7:ad:be:
                    9c:f8:f6:dc:46:3e:0b:7a:51:a4:33:1e:87:fe:c4:
                    90:cb:e2:01:58:dc:a6:af:9a:58:89:f4:e8:c1:36:
                    d2:62:af:96:2e:4c:74:4a:1c:42:08:ee:41:f6:8e:
                    15:a1:2e:a9:86:1d:08:9f:70:e3:4a:08:37:da:be:
                    6e:56:3c:08:93:cf:c5:5d:5b:94:87:e7:92:6f:cb:
                    59:97:99:c8:5f:28:92:17:e4:8a:3a:74:05:a2:07:
                    a3:90:e2:dd:ef:15:fc:85:8b:23:6c:f7:9a:de:b6:
                    09:f7:a4:4e:0e:2c:f9:04:88:e7:09:1b:77:c1:fa:
                    2d:ef:d4:9f:6f:54:6b:05:6d:1b:23:af:df:92:cc:
                    c1:7d:83:c5:3b:13:a0:d0:7b:ff:12:c6:b2:60:e6:
                    4d:2b:9f:65:13:aa:df:1a:ed:56:eb:24:a2:7a:30:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A8:9A:2A:BB:3D:E4:65:0D:0A:43:49:9F:79:5E:CD:C7:5D:4B:D7
            X509v3 Authority Key Identifier:
                keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:61:f8:52:ff:ce:46:cd:80:e9:71:0e:66:31:16:25:b9:
         28:be:40:df:3b:87:da:09:7b:8f:c9:7d:e4:f0:28:38:d1:95:
         fe:49:e1:70:45:77:95:0d:23:3d:42:be:0f:d4:21:49:f2:3e:
         b5:03:d5:cf:dd:81:83:89:62:11:34:df:d0:3a:61:d0:b7:8a:
         ba:40:a9:61:74:a6:cc:f9:f8:1a:fc:ad:00:4d:6b:05:bb:2b:
         05:23:7b:c4:a4:23:65:bd:2e:61:af:ad:11:eb:ce:32:a1:b5:
         d8:a5:00:5d:df:3f:32:bb:48:da:ff:86:d3:dc:f4:d0:5b:96:
         09:db:ef:aa:67:29:88:87:f4:6b:71:7d:6e:4d:eb:42:10:ce:
         bc:9f:26:78:dd:db:91:c6:25:7f:8a:3c:05:24:32:b8:c9:6d:
         a8:54:6f:f2:01:29:d3:25:7e:23:a8:f9:0a:46:b8:70:32:20:
         c6:3b:08:e9:c0:c8:86:09:6f:6d:04:93:f8:3d:ea:48:4f:c7:
         c7:88:21:26:9e:10:2d:a3:26:55:3b:90:a4:17:05:13:8f:4c:
         38:81:2c:50:e9:11:1a:ea:54:f6:b6:7c:45:6e:8f:21:62:cd:
         61:11:8b:62:8e:52:0f:d0:3f:4f:e0:e6:b0:86:49:db:b9:57:
         e6:27:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:20:56 2025 by rpki-client