Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
File:                     AWWp3MArwOh2h-4GcFwObJkt6TI.mft (raw, json)
Hash identifier:          j8kcWxVf1hfGVyMAZWblNk+BHdiqUY1OHpPETg0O5Zc=
Subject key identifier:   94:2C:BB:07:46:C6:70:8C:21:C4:02:05:36:4B:C5:53:63:2B:B2:F3
Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
Certificate issuer:       /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
Certificate serial:       0675
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
Manifest number:          066F
Signing time:             Thu 24 Apr 2025 22:07:42 +0000
Manifest this update:     Thu 24 Apr 2025 22:07:41 +0000
Manifest next update:     Thu 01 May 2025 22:07:41 +0000
Files and hashes:         1: AWWp3MArwOh2h-4GcFwObJkt6TI.crl (hash: Sww2njzZ0EyxETzQPTTfSzMXhWwsZUNA1/Ci9QqRoGI=)
                          2: 206DDC4A77AF11EB8E972C66C4F9AE02.roa (hash: zqG4bc06KvBhxn6QFTh7x4mtk1td0qh6Ee0/kRUb20s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl
                          rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD544, serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
        Validity
            Not Before: Apr 24 22:07:41 2025 GMT
            Not After : May  1 22:07:41 2025 GMT
        Subject: CN=680ab62d-8b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:e8:93:ee:92:ca:16:da:c1:1b:1f:38:96:
                    1e:2e:85:90:75:22:2c:d6:52:82:f2:b2:99:4a:27:
                    d5:ba:b0:a8:1f:22:c9:b6:d5:d7:ca:5f:d8:f7:ca:
                    0e:be:00:ac:74:95:67:1b:2d:05:2b:b9:8d:68:ae:
                    de:36:44:c9:5d:0f:1c:67:63:7f:7b:90:16:d6:7b:
                    63:49:51:40:c2:dd:a3:43:41:9a:27:48:fc:e8:0a:
                    fd:b6:7c:49:7f:50:b6:59:9f:2d:50:48:16:3b:d5:
                    12:d1:6f:38:64:09:c0:f2:67:44:55:81:8f:ab:be:
                    60:de:b1:66:6a:fe:19:1b:00:94:44:2f:02:38:a6:
                    6f:24:a1:2b:4d:e7:49:ab:ab:c5:97:b1:60:01:c5:
                    1e:7c:a8:22:a4:59:21:27:93:3d:0f:c4:02:e7:b2:
                    61:c9:31:b2:68:bd:70:64:17:31:0d:6b:6f:5d:65:
                    54:ca:3c:06:a1:bc:ca:12:18:bb:ec:41:bc:9d:b8:
                    18:83:d1:e8:a3:1d:9a:9f:28:63:90:0f:4f:30:2d:
                    1f:75:7e:20:3e:70:23:e0:40:5f:b3:27:47:55:89:
                    d2:2f:54:a9:3d:73:b9:08:03:48:d6:d3:4f:e2:4d:
                    48:6d:e7:60:d0:51:3a:7d:b5:b4:7a:44:50:9f:8f:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:BB:07:46:C6:70:8C:21:C4:02:05:36:4B:C5:53:63:2B:B2:F3
            X509v3 Authority Key Identifier:
                keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:80:18:c9:77:51:24:4b:8f:07:1a:94:2c:02:8e:8d:00:5d:
         66:1a:9a:4f:2d:f3:2b:8e:6c:4b:a6:5c:c1:85:33:dc:fd:de:
         d5:48:4e:2a:d0:0d:b4:43:50:f9:6d:1c:0b:00:52:8e:14:06:
         d5:a0:8c:3f:dc:8d:03:2e:e6:b7:1b:b9:9b:93:d2:6a:25:bb:
         59:90:4a:3e:79:b1:ca:5d:5c:7a:d6:37:79:f9:98:38:12:c4:
         c6:6a:b7:80:18:24:f3:b6:9c:13:03:8a:f2:e9:43:55:68:9e:
         ec:43:6c:2b:3f:0b:87:8a:78:8a:5c:ff:40:7e:c3:05:ff:fe:
         b7:31:08:9e:24:4f:a7:e7:10:e2:a3:65:86:26:e7:22:24:82:
         c5:7e:5d:56:a1:fb:ef:0d:33:4e:7f:0c:36:22:47:ce:e7:a9:
         e0:d6:f9:72:4f:b0:fd:01:33:47:3f:bb:8f:29:5c:d0:78:4f:
         60:b7:5f:ee:df:cd:f1:e9:46:a0:42:d3:e9:e4:5d:a6:e8:99:
         d5:56:da:f0:ed:11:e8:6e:cd:f3:d5:1e:e1:82:0f:61:37:f3:
         20:f8:00:e7:00:17:c6:93:ac:10:0f:87:1c:bb:17:b7:ce:72:
         4c:db:20:17:d2:32:0e:b2:94:d4:4b:65:d1:ae:43:9a:e7:2f:
         2b:56:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:30:13 2025 by rpki-client