Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File:                     Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier:          NwQsWRzgMH+jm7GMLKPV1jRf/n6ePlN6k2HwUEHOmmk=
Subject key identifier:   AF:A5:DB:11:8E:F9:63:12:E9:26:00:3F:12:0B:6A:D3:C6:1D:04:50
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer:       /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number:          BF
Signing time:             Thu 19 Jun 2025 05:15:23 +0000
Manifest this update:     Thu 19 Jun 2025 05:15:23 +0000
Manifest next update:     Thu 26 Jun 2025 05:15:23 +0000
Files and hashes:         1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: X6Jo/VQkgMZnvMWCIuYxORIb/zMQK0ji/R32O72fDK8=)
                          2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: dMGUJzn8JEaLVtlahCfI1tJWzgz3MatxC3huyiMpG8U=)
                          3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: Lj7oe1PG2x11wd3w8JgQmVhkgZC0GIoGb3aNynIb3Ac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
        Validity
            Not Before: Jun 19 05:15:23 2025 GMT
            Not After : Jun 26 05:15:23 2025 GMT
        Subject: CN=68539ceb-b253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:ce:fc:28:d4:d9:74:f5:ee:ab:b4:00:2e:
                    ad:ea:ca:4f:af:bb:79:fe:45:af:8a:e3:43:79:4b:
                    0e:32:f7:2d:2d:45:07:86:ee:12:ec:89:5f:52:5d:
                    e6:c8:1f:5d:a1:c6:f0:5c:bd:1b:bd:e7:bc:83:52:
                    8b:97:f0:ec:9f:66:2e:0e:e6:b2:ae:01:a4:ad:c6:
                    f3:1f:c1:04:79:21:ea:29:cc:f0:f5:1b:2c:dc:85:
                    84:f9:6b:2f:e2:b8:dd:e6:db:3b:14:ee:17:26:ac:
                    a8:09:a6:9b:83:12:47:8d:b5:9b:b6:3b:df:f4:4a:
                    fa:5b:0f:4d:18:bb:1e:1f:d1:e7:72:06:ea:b6:d6:
                    b3:f0:a4:0f:90:d5:da:fd:f1:5d:9c:8e:ee:a6:3b:
                    ed:bc:61:4d:ce:b4:d5:4f:b4:40:bd:bd:d9:4e:08:
                    51:f8:5a:a6:cd:95:91:bc:3b:54:09:11:1e:9f:52:
                    02:51:f5:f0:4e:01:b5:87:42:18:34:ab:e8:37:87:
                    87:16:5a:f2:2e:b2:c5:92:ec:3e:07:7a:41:4c:63:
                    d2:49:9b:bb:6d:0b:20:6d:67:44:fc:96:59:ef:7a:
                    9b:ac:71:7c:77:7a:dc:91:7c:c3:d0:36:be:3f:f0:
                    af:20:70:1d:6c:68:ac:23:1f:49:cd:91:ec:f0:d1:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A5:DB:11:8E:F9:63:12:E9:26:00:3F:12:0B:6A:D3:C6:1D:04:50
            X509v3 Authority Key Identifier:
                keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:50:d2:e8:a5:5d:eb:a6:99:93:92:c9:58:ae:59:8b:1a:cd:
         3e:e1:0d:37:61:23:85:06:33:da:c0:7f:d4:14:2a:9a:05:91:
         51:e0:90:de:f7:20:57:0a:dc:6e:01:dc:7c:22:64:83:ae:f6:
         2b:5d:a6:a3:3b:29:05:4a:a8:7b:ba:a6:8c:6c:92:a9:c3:d1:
         d8:07:38:bd:73:50:c4:ff:07:40:c4:a4:77:31:03:cd:ae:4c:
         17:3c:2a:40:71:21:fb:06:16:9d:53:f7:03:ec:81:a2:e9:a9:
         f2:48:03:ab:ac:ac:07:3c:58:58:44:88:72:8c:6c:c8:2c:a4:
         eb:e5:bb:b7:73:81:61:a0:ab:d7:ff:0b:18:5b:34:eb:ef:38:
         61:36:d8:51:1f:0f:f4:17:d1:3b:ee:4a:18:c8:61:ae:3a:e2:
         df:87:e0:56:5b:7a:cd:96:e3:9c:31:c8:80:9a:22:75:e5:c4:
         92:a1:72:1d:53:64:53:01:14:58:cc:97:53:27:3a:13:9b:e4:
         37:ef:b4:83:57:96:2c:7d:5f:ec:a2:7d:ed:da:91:b1:0f:8e:
         0c:f2:47:a1:0d:32:22:fe:ab:3b:52:83:51:f2:8a:b2:de:d5:
         f6:75:9e:25:7d:3d:8f:30:2b:7d:ad:16:1b:47:6a:0f:e7:c2:
         9b:04:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:10:49 2025 by rpki-client