Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File:                     at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier:          pNfdd1hDKLU1SZBTkVb3ozFEyxZxBSua6oW56qORFQs=
Subject key identifier:   04:65:65:A8:46:BC:BF:8A:DE:43:57:33:06:A8:73:E5:B8:4D:55:E5
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       071F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number:          0712
Signing time:             Thu 12 Jun 2025 21:33:24 +0000
Manifest this update:     Thu 12 Jun 2025 21:33:24 +0000
Manifest next update:     Thu 19 Jun 2025 21:33:24 +0000
Files and hashes:         1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: V+X2Xm++95Dmp3Dx0Rgkepjj4f1vvnHHJPZAGcTwLtE=)
                          2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=)
                          3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: Jun 12 21:33:24 2025 GMT
            Not After : Jun 19 21:33:24 2025 GMT
        Subject: CN=684b47a4-6106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:e0:48:8a:90:63:97:6b:1e:1a:4a:b6:78:
                    c8:f8:3d:e9:3f:e4:d8:c7:a4:b4:71:d5:ba:9a:55:
                    b5:cf:59:d5:dc:ce:5a:95:39:5c:5c:11:27:24:61:
                    45:e7:ae:68:71:2a:55:79:84:bf:dc:be:9f:4f:dd:
                    91:09:29:24:63:a6:ac:73:a3:09:52:21:d6:1a:2d:
                    6a:81:aa:ae:ac:30:02:c5:51:5c:c3:19:90:f4:89:
                    e3:27:3e:0e:63:4a:64:69:51:36:b0:07:3d:1f:ea:
                    f1:78:17:1e:12:41:93:ca:99:78:00:c4:1f:e1:72:
                    f9:a3:8c:54:67:98:99:11:5b:dd:43:19:f6:48:a4:
                    fc:99:92:b5:61:1e:a0:c6:8d:d6:b5:be:6c:9e:cc:
                    60:88:9e:ce:c9:71:76:db:71:a4:dc:a6:54:fe:eb:
                    56:97:d6:ec:1e:ab:05:89:32:e4:cb:46:a5:ba:fd:
                    81:ea:f7:d5:e1:ed:72:d9:fd:52:53:b3:0c:ed:c6:
                    74:ec:4d:9b:90:71:3f:48:76:0d:4c:b0:54:df:3c:
                    b2:e8:71:64:af:f2:ff:08:6a:0f:f4:d5:ca:4f:1f:
                    bc:30:a7:9f:7a:59:98:fa:1c:0d:ee:d7:23:3e:2d:
                    24:cb:76:2e:b1:db:e9:cb:1e:f1:65:5c:34:71:62:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:65:65:A8:46:BC:BF:8A:DE:43:57:33:06:A8:73:E5:B8:4D:55:E5
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e7:f1:15:df:77:86:6d:d5:99:f5:d8:f7:39:d5:43:13:21:
         cd:77:c8:66:ee:6c:50:6d:91:34:3c:95:8d:f8:a7:68:c1:76:
         c1:19:a2:17:e6:ec:50:2d:ad:19:a2:c6:4d:6e:7c:aa:8d:0c:
         34:b1:50:31:a5:3c:34:35:f5:f4:a4:cc:f1:5c:e8:64:87:0f:
         9e:2b:00:08:35:4c:e6:3c:55:15:41:d4:35:45:fd:31:87:8d:
         c5:05:a4:8e:da:6d:66:17:17:2e:fa:3a:26:35:a9:2b:34:cc:
         5d:42:65:3b:14:48:61:1c:32:39:13:7f:c9:74:0f:ae:aa:52:
         d3:4e:cc:96:d8:02:a4:cb:cc:90:53:f9:c8:3f:12:a8:68:41:
         6c:c0:49:ae:dc:24:02:b4:45:19:41:f2:61:d5:f3:39:ee:d0:
         cb:d4:4f:3c:81:9b:a4:5f:79:23:34:30:97:d2:21:33:e4:ec:
         43:4c:43:6c:bd:0b:bb:9e:98:b2:c0:99:8d:5f:92:87:19:eb:
         9d:60:fa:6a:83:20:3a:06:d5:12:a7:a7:28:23:32:de:68:c9:
         34:52:cf:ea:57:d8:c0:86:fb:f6:86:87:03:e4:18:88:45:06:
         6e:16:08:51:07:7c:0d:c6:02:7e:3f:60:cb:c9:0c:bd:d6:54:
         16:38:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:31:39 2025 by rpki-client