Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          /IO2G/Qf8jMnElRLCaAuDOoBAlbsKoDsiUkIoDc26/o=
Subject key identifier:   FF:A8:56:EF:87:D9:4F:D3:34:71:3C:FA:97:9C:5E:8E:AD:E4:9F:BD
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       08C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          08AD
Signing time:             Thu 24 Apr 2025 20:24:51 +0000
Manifest this update:     Thu 24 Apr 2025 20:24:51 +0000
Manifest next update:     Thu 01 May 2025 20:24:51 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: Pbz9YVAtewMZRk5MtSLrh4J89iT74bRVv9z0qfuMzVI=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: f8jut1BjubAtyXtCTXzr4YjM1IoW+OqJ6ONFoVgC57s=)
                          3: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: e87UO/bBM1qotzcb+px968JO8+qdT33ozHUSLg/50Ao=)
                          4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: oQXY2oaPmh/e06H6CcARZA2+TLztnodxvYW6Bm4bXO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Apr 24 20:24:51 2025 GMT
            Not After : May  1 20:24:51 2025 GMT
        Subject: CN=680a9e13-dd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:9b:59:9b:19:f8:3d:dc:4d:4b:22:c4:88:
                    2d:60:96:38:01:b8:f1:24:44:76:90:c1:34:39:48:
                    33:3a:17:c3:4c:ff:c2:86:aa:69:44:a0:f9:3c:e7:
                    0b:75:4c:d9:65:fe:7a:36:4c:23:28:cd:64:fe:50:
                    be:c6:c5:e8:51:f2:60:7d:6e:41:22:cc:4f:00:dc:
                    cf:af:81:9a:b9:1a:1f:a5:43:dd:c3:82:72:2b:de:
                    28:f7:fb:84:dd:e6:6e:b4:9e:43:8a:f4:13:3b:7f:
                    c5:06:3f:b7:e9:aa:0c:44:f9:32:93:fe:2c:43:d6:
                    9a:0e:ae:c7:ba:97:21:11:37:8a:65:5d:49:92:aa:
                    82:c6:12:9d:64:6e:4a:ef:31:e0:6c:26:98:0a:25:
                    49:ea:17:6e:6b:45:96:0a:cc:2e:1d:aa:c4:79:a5:
                    08:ab:80:12:81:9f:26:2a:58:c5:fb:4e:4d:74:d2:
                    61:2e:7d:ba:53:a5:43:2b:89:ee:d6:37:9f:db:41:
                    f4:c1:88:98:87:b4:7e:d3:66:db:64:62:22:4c:b1:
                    c3:0c:83:d3:59:4e:9d:97:d4:68:79:88:92:a2:74:
                    a6:5f:bc:c3:bb:7f:46:a3:50:42:d0:f1:e9:3c:29:
                    20:6f:18:ad:a1:03:9c:7e:f4:34:ac:4a:9d:a7:a8:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:56:EF:87:D9:4F:D3:34:71:3C:FA:97:9C:5E:8E:AD:E4:9F:BD
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:cf:f2:6c:f7:34:18:9d:55:13:f0:c8:2d:72:de:ad:d3:
         31:a1:11:23:89:00:a9:48:fa:f5:54:ab:a5:b0:a3:99:bd:2c:
         ad:c2:d9:d8:ec:cc:21:71:27:37:ff:e8:39:96:98:a8:37:20:
         54:48:b0:96:d8:3e:84:ad:ec:af:ad:c2:1e:d8:b9:75:8b:44:
         e2:76:02:07:ef:1d:75:9f:a6:fb:42:8e:b0:82:a0:73:37:53:
         7c:90:d3:5c:dc:b3:83:11:92:96:3a:cb:93:fd:a1:d7:ad:75:
         34:db:e9:dd:0d:bb:42:ab:0f:fc:6b:b4:59:e8:fc:dd:49:42:
         3c:21:b4:cb:1a:1e:34:3c:b4:41:73:8a:57:01:7b:b3:28:d0:
         14:90:03:96:ec:4b:56:d0:f0:3f:57:5d:9c:19:00:fb:7e:15:
         04:46:d9:6c:1f:29:c2:ec:e9:d1:65:9e:df:82:5b:e1:e7:81:
         7b:1b:d1:b8:2b:9b:46:31:63:70:e6:42:ba:5f:7d:ec:73:e9:
         b4:e8:30:40:a7:42:27:d2:25:e3:e0:7b:0e:28:1c:24:b8:1e:
         c0:43:70:48:4b:2f:4c:22:14:3f:5b:de:d4:72:14:ff:35:1a:
         a5:60:ad:9c:50:7d:9b:12:27:e5:72:2f:75:a1:df:8b:3a:c6:
         c0:c3:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:59 2025 by rpki-client