Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
File:                     5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft (raw, json)
Hash identifier:          tJOtOxhodUKuHKVrFqo3mgjZzWcUGq6gQri0qXos2U4=
Subject key identifier:   28:D2:7A:78:03:99:06:04:AD:C6:A0:B5:49:24:78:E0:0F:1B:33:AD
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
Manifest number:          EC
Signing time:             Fri 13 Jun 2025 04:25:26 +0000
Manifest this update:     Fri 13 Jun 2025 04:25:25 +0000
Manifest next update:     Fri 20 Jun 2025 04:25:25 +0000
Files and hashes:         1: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl (hash: qybQnfIl69xRmrxDrcId3CyJVdLrRzzVGzo0pjIPLDE=)
                          2: 6C8EAC7A195F11F08408FA45C4F9AE02.roa (hash: PVyptvEA9oDmZ+16c45INtfKH4dLidk+Ve918aGMKUo=)
                          3: C27C0758916B11EF81BBB521C4F9AE02.roa (hash: 0diVW8dy9wFSEzk96glJFk8zdqR8H6Y/olMf4xxS0Yk=)
                          4: 6D3C9D30195F11F08408FA45C4F9AE02.roa (hash: u21rWUof2U1PBXjuSU7vsXrJ/r/iU3pUFhpXLQAZEN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jun 13 04:25:25 2025 GMT
            Not After : Jun 20 04:25:25 2025 GMT
        Subject: CN=684ba836-2967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:77:d4:7a:02:89:15:a1:e0:b0:a3:12:26:
                    bf:43:8f:f1:f9:72:37:f7:c1:86:e3:9b:b4:d8:be:
                    c5:f1:28:1a:a7:5c:f7:c2:e8:1e:20:9c:56:2e:9a:
                    c8:b1:32:e9:5d:b7:43:61:e0:ad:88:a8:f8:13:1c:
                    dd:aa:e5:dd:2e:ce:81:71:a2:97:bd:4e:86:64:f1:
                    f1:53:ca:e9:10:9d:01:57:fd:5e:1c:16:22:55:77:
                    93:ab:2f:b4:8d:94:95:be:4d:3e:ad:8b:3c:ef:7b:
                    ae:0c:2a:ce:e6:af:a6:42:7a:7f:38:bc:c8:fc:2d:
                    ef:1d:00:a8:a4:ae:51:45:d1:94:ec:2e:12:fc:07:
                    5c:20:8e:15:82:6d:6f:ac:a1:3d:6e:02:26:87:1c:
                    0a:d2:b2:b1:9a:da:33:32:99:4d:3e:ec:fa:5e:e6:
                    67:80:3c:69:82:84:dc:f1:22:2c:8e:07:9e:95:8b:
                    1f:15:2f:8a:3e:16:a4:01:02:5f:8e:06:b0:d6:1b:
                    b5:10:23:ad:d2:43:31:04:b3:01:cf:d4:a0:da:5e:
                    82:86:28:32:a4:37:c9:c4:b6:de:44:5e:32:ae:92:
                    d0:13:e9:eb:79:37:7d:6c:9d:0b:a0:fc:c6:7f:5b:
                    59:31:a5:5c:9d:99:17:fb:38:e5:79:b7:ed:18:45:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D2:7A:78:03:99:06:04:AD:C6:A0:B5:49:24:78:E0:0F:1B:33:AD
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:af:a4:ce:9a:af:f6:25:8d:30:66:e2:9d:89:eb:a8:d3:
         6e:81:8e:91:0e:bd:82:cc:5b:6f:2c:ed:30:48:8a:71:85:a0:
         16:96:73:ce:19:45:ac:86:cc:5c:b1:bf:e8:29:ca:1c:88:9f:
         a6:b2:53:c5:a2:c4:90:10:47:51:49:4d:84:7f:7d:d6:44:ea:
         47:04:c5:6d:ef:a8:9f:c3:0f:55:de:3a:ff:24:e9:65:57:53:
         80:50:04:b7:4a:0e:b0:77:a0:55:bd:df:85:97:d3:c1:15:c8:
         97:48:da:47:73:59:94:05:82:93:ab:e7:9a:46:7f:98:f7:7f:
         3c:14:2d:21:79:d4:73:7a:93:55:32:bd:d2:ef:ac:10:77:72:
         97:b8:c1:24:47:d7:31:71:79:b0:76:cd:66:b5:65:71:e7:06:
         ab:14:ac:4c:53:19:58:59:ca:4a:6e:8a:45:92:d8:34:dc:84:
         57:0e:df:ef:e2:38:01:51:9d:85:3e:b2:73:c4:5f:92:f9:9d:
         bc:6e:5f:46:1c:50:7c:eb:f5:64:d0:93:65:5d:b6:f4:4f:5e:
         75:48:a5:e7:6f:9a:fc:3e:53:26:22:a8:d8:d1:ed:71:cf:c6:
         74:db:eb:91:ca:36:6b:78:e4:84:55:cb:c4:94:f0:cd:a9:2e:
         22:db:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:29:25 2025 by rpki-client