Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
File:                     eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json)
Hash identifier:          K8U9veQ0f1+O1f5n6Xklhff66eP/VJ/sNocSywPxLRE=
Subject key identifier:   C4:59:63:54:E9:3C:22:DC:52:9B:34:D9:5A:4F:1D:AE:43:88:19:BB
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Certificate issuer:       /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial:       05BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
Manifest number:          05B2
Signing time:             Thu 12 Jun 2025 22:46:02 +0000
Manifest this update:     Thu 12 Jun 2025 22:46:01 +0000
Manifest next update:     Thu 19 Jun 2025 22:46:01 +0000
Files and hashes:         1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: v3AmM2uiyJc5mqf9B2lVgyykufI2OeWRg4PldU3gqs8=)
                          2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=)
                          3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
        Validity
            Not Before: Jun 12 22:46:01 2025 GMT
            Not After : Jun 19 22:46:01 2025 GMT
        Subject: CN=684b58aa-d01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:13:e4:9e:fd:44:0d:48:f5:8c:15:20:2a:
                    37:4c:87:32:dd:c4:a1:87:2c:a6:d5:7f:94:a7:47:
                    e1:fa:b5:f5:05:47:f8:f2:8f:ea:68:31:f4:36:4f:
                    c6:15:81:d0:11:6c:b3:8a:88:50:3d:fb:ef:13:2f:
                    13:35:7d:03:ab:bb:1f:21:cb:f8:c3:6a:6e:f5:28:
                    dc:8f:de:09:96:9a:7f:ed:9c:43:3b:18:c3:15:c4:
                    e7:08:60:a0:9c:4b:d4:de:58:36:f9:53:a6:95:b6:
                    72:ad:39:29:60:95:a1:ab:5a:4b:c4:39:e8:a7:14:
                    c4:43:09:28:99:28:98:54:ad:9e:44:24:4c:f4:2c:
                    f0:33:bb:27:19:6e:75:2b:2d:58:ca:ab:e9:9f:d5:
                    ed:1b:e4:fb:d2:0a:6e:64:41:ee:3f:8d:c8:a9:7a:
                    bc:a9:87:ac:b2:1d:22:92:25:39:da:b1:2c:8a:e0:
                    38:8d:28:4e:29:a9:52:06:8e:cf:b7:b4:10:11:46:
                    a4:7f:3d:07:60:5b:1f:81:f3:91:27:60:2f:19:7b:
                    66:c2:d4:19:a5:62:32:91:1b:29:20:87:bd:d5:9a:
                    de:0c:59:e9:cf:f6:80:49:fb:a2:76:15:0d:e1:5b:
                    a3:57:48:46:58:19:6e:5f:80:b2:07:2c:ea:e2:91:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:63:54:E9:3C:22:DC:52:9B:34:D9:5A:4F:1D:AE:43:88:19:BB
            X509v3 Authority Key Identifier:
                keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:00:43:96:62:62:f8:eb:bd:98:03:3c:17:6e:61:43:94:1a:
         2d:70:bf:cb:42:6c:c8:8f:cd:d1:c2:fd:3c:ed:a9:05:67:cc:
         db:47:52:58:72:35:a3:9f:d5:2a:61:57:fa:3f:2e:c8:5d:29:
         d7:86:ea:bc:06:3a:69:9b:0e:1c:7d:0a:ff:5e:d9:80:ac:3c:
         76:49:d6:97:5f:ae:4f:74:e1:cf:e0:2d:39:4e:5c:d5:b0:96:
         c4:ad:b1:1f:15:f9:45:28:22:73:c7:26:e4:b4:f2:db:3a:61:
         2a:53:60:a2:0b:7b:1a:12:69:38:d6:71:0a:5f:48:12:5f:b4:
         82:27:7f:39:b1:a4:b1:a5:5a:9a:36:a1:a6:5c:82:c3:0f:10:
         3b:4a:5a:da:c4:06:46:bb:91:ae:fd:65:6f:0a:cf:91:27:6a:
         1a:4f:f6:02:b8:e7:62:23:2f:62:d0:bb:b9:2d:bb:98:f4:63:
         60:33:98:1d:78:8a:21:68:e9:24:82:d4:21:4a:16:0b:41:02:
         e8:36:f8:5f:41:f5:49:14:45:60:ef:ab:41:c9:96:51:4b:b8:
         96:17:8b:b7:48:f4:e4:3f:29:c5:4c:32:e0:dc:6f:54:26:c0:
         be:af:7d:7d:b8:ab:f8:a6:81:e3:45:46:1a:15:f1:44:bd:7b:
         bc:76:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:23:02 2025 by rpki-client