Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File:                     5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier:          kJ6SswGTUF/2ApcvYJrwrCsBgZ/JrqSC7yyLXC4xuQY=
Subject key identifier:   85:AD:DE:1A:F2:BA:4D:19:CC:EC:1C:31:79:62:5F:20:06:96:E2:51
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer:       /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial:       7CD0EEE700E6B04A4147DDA5726F6A16B6F17E40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number:          F8
Signing time:             Sun 15 Jun 2025 16:05:38 +0000
Manifest this update:     Sun 15 Jun 2025 16:00:38 +0000
Manifest next update:     Mon 16 Jun 2025 16:10:38 +0000
Files and hashes:         1: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: lh0a38K8JAllhrAcZvOqWh+3NCJyyj25skARvaE+EWo=)
                          2: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: baGBWXcDrtK+cAVKGJBMAmZee53ol0gPCj9NO0O551w=)
                          3: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: z7JCUgcc7RDwEnug0qYCY0240Ce6DZ39EIqmLvh39pw=)
                          4: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: LfF8fU+QkX6d5K08nkQmulF4/9qGZmobs40531E0EuE=)
                          5: 34332e3235322e32302e302f32342d3234203d3e2037323234.roa (hash: xYue4w2wkAleXxGW4xAr0l0Ri4xd4/JeSpxq5osVBR8=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
                          rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 16:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d0:ee:e7:00:e6:b0:4a:41:47:dd:a5:72:6f:6a:16:b6:f1:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
        Validity
            Not Before: Jun 15 16:00:38 2025 GMT
            Not After : Jun 16 16:10:38 2025 GMT
        Subject: CN=85ADDE1AF2BA4D19CCEC1C3179625F200696E251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:ff:ba:37:73:df:e8:87:d6:2a:f1:43:22:
                    9f:c4:84:b7:0a:a5:e5:f5:db:5e:61:95:9d:b3:c6:
                    f4:9a:71:0e:b3:72:b0:56:8d:bf:6c:18:12:55:5b:
                    fd:8c:89:77:9a:8e:26:69:b7:f0:24:d4:66:5a:4b:
                    51:b8:d6:ba:d9:ee:bc:7a:c4:93:4f:0f:77:04:7c:
                    fd:41:e8:15:e8:4f:12:c2:75:b8:bc:63:8a:8f:f1:
                    85:f0:53:f0:be:b8:ce:49:f4:80:fb:3e:71:2d:04:
                    e9:81:3e:cd:75:16:ec:db:31:bd:8a:d0:e2:4d:b5:
                    c2:2f:15:9c:5c:41:61:7e:5d:58:83:68:76:17:cb:
                    2b:53:b2:23:88:75:c4:9d:3e:70:0b:bf:99:03:8f:
                    e6:dc:54:63:87:b4:47:19:a0:a3:99:c8:7a:74:0b:
                    b6:da:2d:21:53:43:b2:41:38:c1:8a:fa:8e:4d:ec:
                    30:b0:3b:fa:59:fb:b0:ba:68:af:67:73:a7:dc:35:
                    d5:be:86:e9:69:70:1b:89:1d:76:ea:fb:24:42:e7:
                    4d:5c:4d:3c:9e:50:1a:16:20:21:e8:ca:93:4f:f8:
                    2d:69:7c:0c:f9:74:bf:97:18:3f:a0:42:2d:22:35:
                    2a:32:03:33:bd:e0:48:ab:e8:c4:1e:da:ea:cc:78:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AD:DE:1A:F2:BA:4D:19:CC:EC:1C:31:79:62:5F:20:06:96:E2:51
            X509v3 Authority Key Identifier:
                keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:ab:bf:88:3d:9d:20:6e:98:43:2a:11:58:c9:af:f7:69:
         4e:7f:ba:87:6c:3f:08:42:95:a7:61:59:16:06:a8:f9:72:04:
         94:9f:f8:dc:ee:bc:8a:09:42:2d:d0:79:21:e6:a4:f9:08:c3:
         56:8c:8f:20:7c:d1:f8:b4:90:e2:6f:6c:b9:f7:3d:e6:01:a5:
         6e:2a:ec:7d:c1:3b:45:37:f2:f5:b0:46:17:2e:4c:be:a9:62:
         2f:73:d4:c9:6f:4b:af:c1:1d:48:fd:4c:4a:1f:f1:8e:1b:c3:
         7a:ac:bb:f4:d6:61:78:51:5a:69:f9:9d:82:b1:75:ec:3f:af:
         6e:d5:6b:bc:d0:72:d8:1c:c4:20:e9:19:0c:97:89:8c:5a:7d:
         f5:8d:6c:66:37:62:23:69:b6:c7:68:15:77:74:20:01:1a:a6:
         b0:ef:b0:16:ed:57:b4:e3:45:bf:b1:91:54:22:cf:d4:b8:1a:
         99:27:9d:14:3b:4f:aa:86:f2:a8:fa:5a:f9:e2:6a:8a:00:b6:
         7c:fb:7c:ae:19:d6:9f:5f:47:71:0d:7c:af:5e:93:75:dd:b3:
         71:68:d8:b9:4a:22:16:30:d8:07:d7:63:f8:aa:7e:4e:f3:b8:
         c2:f4:71:07:d1:2d:b7:b6:17:a9:ff:8c:16:51:bd:5c:e2:44:
         55:f7:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:20:19 2025 by rpki-client