Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.mft (raw, json)
Hash identifier:          Yi8tM1yWhYq6DfY0H1AU6aD6TCJTuwFZUxoZsAcshpQ=
Subject key identifier:   79:11:75:5B:E7:12:2C:5C:7F:48:96:9A:FB:AA:33:0E:5D:20:BB:D0
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       0670
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
Manifest number:          0665
Signing time:             Thu 24 Apr 2025 22:10:42 +0000
Manifest this update:     Thu 24 Apr 2025 22:10:41 +0000
Manifest next update:     Thu 01 May 2025 22:10:41 +0000
Files and hashes:         1: sEu6HxjA5wgx81T3RV7hXTIpQbM.crl (hash: LtC0KL+oEzOEgGY0dfwCud+LvAyIdFEf7OiiY+hPPvU=)
                          2: DA33C49E08E211ED8B10721AC4F9AE02.roa (hash: Rk/+lADA6gcgkQ0X84YplZfwCDuN0k5YWfT7OkmFseI=)
                          3: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (hash: qQOIJ0lcwqmCJOnDFoB5aMDri/0+odCLlhKVJ/uxcsQ=)
                          4: 710DB204831D11ECA37CC12EC4F9AE02.roa (hash: /OB040tMw9qyOdBlNACkUKZ8Xy3MrWKpNRv3p9KED/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
                          rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: Apr 24 22:10:41 2025 GMT
            Not After : May  1 22:10:41 2025 GMT
        Subject: CN=680ab6e1-dec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:55:69:ad:11:fb:d1:dd:45:1a:d6:cc:63:
                    ca:89:1f:b0:27:b1:bd:92:42:7f:de:3e:f6:8a:71:
                    9d:1f:d4:25:93:5d:58:3d:e8:09:5f:98:81:b9:e0:
                    89:00:37:12:f8:da:58:2a:89:4d:c7:54:ae:87:be:
                    54:43:6f:b2:13:d5:50:1c:94:f9:e0:3a:24:d5:7f:
                    f1:97:3a:5a:bf:28:9d:4c:cb:e0:58:20:06:fd:14:
                    3d:bd:3a:7e:22:de:0a:74:a1:3a:85:c8:38:fd:cf:
                    07:4c:2c:ed:67:f5:00:35:24:20:25:c1:ce:d2:39:
                    1d:b1:c0:09:29:ef:94:46:e2:3e:e7:3c:c6:e6:24:
                    6c:30:c7:71:57:44:03:ac:77:f4:c7:18:1b:09:92:
                    24:4c:53:a7:59:90:3c:a1:7a:81:cf:63:e8:92:e8:
                    2f:3b:b6:06:03:85:7a:e0:84:34:6b:38:cd:10:83:
                    62:2e:be:8b:15:9e:73:28:10:5d:93:75:22:de:ed:
                    c7:a8:8b:dc:bc:5f:bb:a4:82:c4:74:c6:55:15:cd:
                    44:6f:d2:c6:fb:20:b1:aa:65:e0:23:13:6a:d1:81:
                    aa:4f:0c:9a:98:91:92:3c:f7:20:c3:a4:c9:35:78:
                    29:e9:97:06:37:15:3e:39:44:24:84:b3:4d:5b:18:
                    25:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:75:5B:E7:12:2C:5C:7F:48:96:9A:FB:AA:33:0E:5D:20:BB:D0
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:84:81:db:e4:98:a0:e7:9f:af:ae:b0:5e:5d:b3:65:cc:80:
         a9:ac:8a:31:61:23:18:9e:0f:dc:e5:80:be:0c:35:4d:9e:ae:
         a5:5f:73:f2:0e:3f:a5:4f:f2:d0:71:4d:e3:e1:f6:b3:db:28:
         d7:6f:1e:ce:13:8f:56:85:d7:a9:4b:ac:c3:15:01:fa:7f:e2:
         04:7f:38:52:de:61:d9:6a:e5:fd:25:2f:1e:5c:3b:77:21:b7:
         f4:92:d7:62:b3:77:d2:3b:92:b2:86:e6:74:6a:78:40:f3:1e:
         d9:af:c3:7a:28:0b:0b:db:6d:9f:b0:2a:ac:6c:fb:79:4d:7f:
         f3:d1:5d:74:ad:d2:ca:74:41:ea:df:19:2a:57:69:b1:ac:aa:
         f5:cc:53:d9:8f:d7:39:0e:c8:6f:b2:d3:b2:49:3c:1e:2e:1c:
         0a:c0:0f:fb:60:fa:6b:23:a6:9a:30:9c:65:04:e0:a1:e7:c9:
         a1:43:10:ea:dc:0e:17:69:6f:e7:c9:fa:ee:8b:67:92:71:5f:
         dd:cc:0b:94:29:6c:45:bd:8c:74:94:f2:33:bb:b6:cb:4f:85:
         66:8e:2d:da:f0:66:18:17:82:a1:27:73:b5:4d:97:bd:29:aa:
         a6:15:7e:70:83:ee:30:b2:2d:d8:80:59:40:ed:e3:b6:79:0d:
         28:d5:cf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:32:47 2025 by rpki-client