Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
File:                     R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json)
Hash identifier:          SF//nVDY20MkRMhjMdgfkCYqbaZyxNNspW9WYUtclWU=
Subject key identifier:   68:63:5C:D5:24:23:24:7B:26:FE:13:A0:35:2C:47:48:50:D4:0E:B9
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Certificate issuer:       /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial:       12A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
Manifest number:          1281
Signing time:             Wed 18 Jun 2025 17:04:51 +0000
Manifest this update:     Wed 18 Jun 2025 17:04:51 +0000
Manifest next update:     Wed 25 Jun 2025 17:04:51 +0000
Files and hashes:         1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: VYTAyJGkTRGa6sqJJabgUN8FH+oVF2Lz9iFUBFwObvQ=)
                          2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=)
                          3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
                          rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 17:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4771 (0x12a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
        Validity
            Not Before: Jun 18 17:04:51 2025 GMT
            Not After : Jun 25 17:04:51 2025 GMT
        Subject: CN=6852f1b3-c007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:53:3f:a7:ec:ea:73:1b:a6:66:2b:ff:70:
                    59:6c:53:d3:ca:13:bb:6d:86:50:00:14:5f:04:4a:
                    df:dd:e5:e1:cc:86:ef:f0:1a:fc:6b:03:81:ab:02:
                    e0:60:c6:da:58:c6:b8:fb:eb:02:24:6a:79:34:e3:
                    69:1f:8c:ce:ee:92:40:96:06:6b:fd:49:03:d8:d6:
                    88:77:f4:52:84:3d:a1:93:7e:2d:d6:53:03:0a:ad:
                    4f:04:ca:b0:90:92:0d:7b:61:5a:c9:0b:8d:59:4c:
                    ba:11:f4:63:4c:02:a3:79:02:19:a4:48:fd:b7:21:
                    4e:77:1e:be:f9:00:b9:b0:aa:45:50:bd:79:e0:ae:
                    6f:12:de:ae:0a:39:e7:72:19:51:b7:49:19:14:21:
                    f0:3d:09:dd:a3:b5:e9:b9:10:fd:d8:1a:b3:b3:2e:
                    0e:1e:7d:2b:1a:57:3f:7c:c0:2e:77:6d:f9:84:cc:
                    cf:c5:75:c4:83:67:3d:ae:02:68:4c:26:39:cf:cc:
                    5f:5d:c6:ba:18:27:cf:75:15:cf:3f:5b:96:b6:fc:
                    0b:9c:3e:9d:87:b5:30:6e:b9:45:f8:39:ba:12:88:
                    b9:46:9d:44:09:c3:0a:84:d0:58:8f:58:77:bc:96:
                    eb:ef:f9:64:38:fd:d6:cb:ed:c4:53:d3:15:fb:61:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:5C:D5:24:23:24:7B:26:FE:13:A0:35:2C:47:48:50:D4:0E:B9
            X509v3 Authority Key Identifier:
                keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:bb:81:3e:b0:43:65:3a:dc:80:86:20:c1:85:f9:07:67:
         a4:d0:01:8e:40:d9:6d:5d:b7:af:5d:f2:d8:2e:a1:8e:ea:d6:
         62:85:7f:0e:bf:30:0b:e8:7c:ea:e7:ad:74:3d:fe:3b:9c:f0:
         8d:11:d4:d5:0e:c1:c9:52:5e:4f:cb:54:0e:18:36:33:5b:6a:
         bf:91:07:7f:b0:af:dc:eb:78:d8:0b:95:b3:a2:07:2b:32:db:
         87:23:54:ff:11:a6:e8:31:31:8c:89:42:a2:4c:96:a9:af:89:
         ab:88:67:d0:20:47:c6:21:61:3f:bb:ac:a5:ca:23:12:82:ea:
         a4:0b:a8:5e:cd:cb:14:2a:06:f5:ea:6b:e2:5f:24:aa:db:66:
         84:f4:61:71:0b:53:ad:c4:8f:c0:07:45:58:1a:86:0c:31:3d:
         63:06:be:8e:92:db:99:f5:5e:68:7b:92:63:23:61:57:df:63:
         08:7f:ab:d7:ec:c3:0c:0a:99:ee:fd:14:3c:2c:28:7e:a6:b1:
         df:10:10:96:5c:8d:a8:eb:0a:6f:58:3d:56:bc:54:94:45:9e:
         5c:6e:ab:cd:9e:c3:d2:b8:c7:24:c6:b7:d2:60:f8:25:08:65:
         8d:8c:dc:0e:92:1d:b0:8f:b3:31:b6:62:fb:73:ca:01:4f:48:
         44:c2:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:13:00 2025 by rpki-client