Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          NASyj/5t3ugE7rZ+gyatpsN+ABRewhS6PuMVAfjrEJs=
Subject key identifier:   2B:8F:BF:F3:43:71:A0:E8:B7:51:96:77:C7:1D:3F:65:BA:63:49:16
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0EF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0EEC
Signing time:             Sat 14 Jun 2025 17:34:16 +0000
Manifest this update:     Sat 14 Jun 2025 17:34:15 +0000
Manifest next update:     Sat 21 Jun 2025 17:34:15 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: ejYHKPRQ0q28as8eSfwjimNy5J+8yORP9gQpcLUbDWk=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3829 (0xef5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Jun 14 17:34:15 2025 GMT
            Not After : Jun 21 17:34:15 2025 GMT
        Subject: CN=684db298-d6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:76:69:c4:8b:6a:29:d6:b5:fd:7b:1a:d9:
                    b9:5d:2f:32:1c:b4:dd:81:41:63:a4:bb:07:47:44:
                    c9:e1:e4:e3:ab:1f:2f:fa:06:a7:ae:78:f5:52:e4:
                    c9:90:4c:c2:64:90:4a:6a:5b:00:01:6b:56:62:da:
                    c9:72:76:d8:76:9d:66:69:59:20:8c:f3:78:32:82:
                    ab:6c:1b:d3:e3:2b:80:e6:8c:bb:ee:4c:4b:0d:79:
                    e1:f6:f1:46:16:69:7c:f1:53:c0:13:c7:cc:91:ae:
                    a0:f9:56:df:68:46:94:11:f1:be:f7:0d:ab:36:24:
                    4c:48:ee:3e:fd:65:71:e9:8b:23:12:b7:d2:7c:4e:
                    98:d7:05:cf:1b:55:4c:2a:43:b8:dd:09:89:d2:23:
                    4d:15:8e:51:f5:ac:e0:da:e8:4a:a9:50:2d:78:f5:
                    fd:00:d8:b3:5e:1c:15:86:98:ff:b6:2f:9a:aa:af:
                    77:3d:4d:43:81:d6:43:99:d1:fb:d4:ef:66:f0:ba:
                    3d:b4:8f:0a:7c:63:bc:65:d4:6a:c2:2c:f9:78:ed:
                    d2:e3:92:ee:9f:1c:9b:92:9e:f2:22:73:f6:41:f6:
                    c2:6f:82:c6:9b:73:1a:7c:f1:04:d9:f1:b4:d3:b7:
                    ee:c6:5a:16:a4:c8:99:de:5d:53:26:64:0e:1e:d9:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8F:BF:F3:43:71:A0:E8:B7:51:96:77:C7:1D:3F:65:BA:63:49:16
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:59:23:36:01:ff:e1:c6:09:dd:2c:53:e3:51:de:9e:a0:
         07:79:32:92:27:f7:dd:1c:36:e1:20:87:55:c7:a0:c2:fb:e3:
         45:b1:8e:12:e7:d7:78:c7:83:0f:4a:42:36:c0:a6:34:7a:54:
         96:c7:4a:cb:6b:e7:3a:64:98:c8:dd:18:38:92:7a:6d:d7:bb:
         f5:48:fe:e4:4c:0b:ea:e5:00:d9:1b:65:de:c5:fd:34:4c:43:
         43:da:6b:96:26:6a:9c:09:b8:2f:da:11:29:15:09:90:8e:3a:
         11:08:73:20:fa:94:48:2a:bf:d6:69:fa:b5:1f:7b:10:08:d1:
         9e:e4:44:ab:c1:be:d0:b1:ae:9f:30:86:75:dd:30:c4:1e:c7:
         74:a2:34:19:2c:0f:ff:ca:53:20:b4:9e:8d:72:ac:98:09:07:
         08:18:47:4e:fb:0e:78:7c:2e:8d:67:5d:45:47:60:48:fa:1f:
         9c:52:19:f8:b3:44:5a:7e:30:e2:b1:4a:f6:90:87:fb:2f:78:
         0c:85:8b:bb:e6:7c:fa:67:96:2e:63:35:97:df:85:f1:39:7c:
         21:e6:12:f7:96:ca:2a:f8:1e:bf:9e:f7:21:de:2c:1e:82:6e:
         f8:d7:49:f1:71:cf:67:60:ba:a5:dc:7f:ff:f5:b8:f3:fc:6d:
         6b:b3:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:15:49 2025 by rpki-client