Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
File:                     w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json)
Hash identifier:          nQWjHBfS97+GbKN/uoJQRvQSLDQ8979+78Hymy/MaDM=
Subject key identifier:   66:74:66:10:9A:B2:1F:41:95:92:14:0D:25:F7:CA:F1:30:F7:C9:05
Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95
Certificate issuer:       /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
Certificate serial:       04A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
Manifest number:          049E
Signing time:             Thu 24 Apr 2025 23:46:10 +0000
Manifest this update:     Thu 24 Apr 2025 23:46:10 +0000
Manifest next update:     Thu 01 May 2025 23:46:10 +0000
Files and hashes:         1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: CyOOfgheqGv/rk+FdKkMpJFK5mC7jQOPxN9wPN8Zo9U=)
                          2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
        Validity
            Not Before: Apr 24 23:46:10 2025 GMT
            Not After : May  1 23:46:10 2025 GMT
        Subject: CN=680acd42-0a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:14:25:83:28:af:21:a9:ae:1d:94:eb:cc:
                    9a:1a:8d:45:40:7a:92:a5:b5:eb:4e:45:33:c6:31:
                    28:31:c1:7c:b2:c2:5b:5d:c3:fe:4a:df:74:f0:e6:
                    29:28:0d:92:9e:e7:bc:bb:a9:1f:64:c0:09:2f:98:
                    78:92:94:42:be:64:2b:98:05:46:41:d4:fb:ef:80:
                    41:6e:09:85:0d:ed:5a:6a:4f:2d:92:90:a2:3d:85:
                    8c:e3:2a:96:1d:af:1d:c3:45:a5:57:92:4c:a2:82:
                    36:a3:44:ee:49:d8:cf:82:28:79:4a:b9:52:56:04:
                    0c:16:0d:49:bf:93:62:ce:db:7b:5c:7e:45:be:30:
                    22:4c:0c:bf:12:fe:5d:84:87:17:ae:83:43:40:ee:
                    35:73:86:76:ec:5e:33:7d:8f:d3:cb:6c:ae:bf:dc:
                    57:df:44:72:1b:27:86:0a:d2:c9:d8:9f:2a:e8:db:
                    fa:df:63:5d:3b:93:e7:67:2d:08:b5:63:ce:74:a3:
                    34:06:e9:05:59:60:54:d5:e1:0b:2d:a5:b7:bc:38:
                    4a:62:b8:84:f0:46:c3:c7:62:6a:12:e9:f2:5f:13:
                    5d:78:7e:4a:fa:d6:a0:db:18:80:5d:0e:ad:de:a3:
                    8a:92:63:7f:d8:77:0b:19:92:af:1d:87:2b:59:38:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:74:66:10:9A:B2:1F:41:95:92:14:0D:25:F7:CA:F1:30:F7:C9:05
            X509v3 Authority Key Identifier:
                keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:56:59:08:8e:1b:eb:cf:a9:06:b6:cc:ca:dc:54:cf:aa:48:
         ed:0e:ac:69:d2:e7:6e:9f:4d:d9:2d:85:df:15:b1:1b:6b:15:
         da:66:fb:fa:25:4f:5c:5e:7b:bb:38:d9:52:02:7c:a8:a4:73:
         f0:0d:dd:f5:15:45:5b:91:b6:41:1d:36:2c:92:91:72:8a:77:
         d0:7e:b0:d4:f7:d0:3f:20:df:de:8f:8e:89:ec:ab:04:7e:c8:
         b0:7d:e6:c6:fa:80:99:29:8e:17:b4:3f:77:4c:40:c5:17:4d:
         db:2a:f1:95:28:1b:9e:ac:40:c7:6b:37:08:56:b7:dd:e6:a9:
         08:00:4e:55:eb:a1:30:b1:59:c9:dd:51:b4:60:38:d3:24:8d:
         ef:28:de:38:02:09:b3:39:fd:ec:16:98:05:7f:3d:45:fc:ce:
         d9:1d:ee:bb:97:71:68:f2:b9:b6:6e:dc:f8:62:14:6e:0d:ad:
         15:2c:d7:60:13:27:ef:b6:4f:0b:ad:4b:ee:fd:bb:d6:2d:ec:
         25:ab:2e:bc:81:ca:2a:7b:c9:a5:f4:d8:a8:bd:be:37:47:ca:
         16:ca:dc:19:5b:bb:33:0c:40:98:78:35:10:03:2f:a1:89:9c:
         7a:af:43:1a:c2:15:b8:00:44:1c:07:a2:d7:6e:c1:72:af:7e:
         41:60:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:39 2025 by rpki-client