Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
File:                     baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json)
Hash identifier:          teAMqRhrspYeDg1WDqbQbSrhpTjCL50vpLKDRyGJa6s=
Subject key identifier:   A4:D9:37:5E:B0:AD:2E:4C:23:F1:8F:1B:01:4F:B1:97:AA:AA:B3:7D
Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72
Certificate issuer:       /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
Manifest number:          013B
Signing time:             Fri 13 Jun 2025 03:23:11 +0000
Manifest this update:     Fri 13 Jun 2025 03:23:10 +0000
Manifest next update:     Fri 20 Jun 2025 03:23:10 +0000
Files and hashes:         1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: mkYGTFUOLWe2aRaHmUgYgdO4t2BclQRx6xb4diREf88=)
                          2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl
                          rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D415, serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172
        Validity
            Not Before: Jun 13 03:23:10 2025 GMT
            Not After : Jun 20 03:23:10 2025 GMT
        Subject: CN=684b999e-845b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:f5:78:a0:9d:11:05:f2:21:1b:8a:3b:86:
                    2e:fc:ea:42:0e:b3:55:45:a5:f6:0c:e7:44:b4:4b:
                    fc:56:d7:9d:f0:c2:6a:95:cb:85:44:c5:55:1e:43:
                    ce:46:6a:b3:38:03:f7:90:f8:7c:30:90:e4:e1:ed:
                    6b:d0:bb:c5:42:15:87:f8:b3:f8:75:cf:58:c0:47:
                    59:e7:2e:dc:bb:91:e7:fc:c7:bb:a3:19:57:de:b7:
                    41:4d:a3:1c:aa:27:68:55:b2:e7:c6:c9:a0:11:1f:
                    37:15:d4:9b:b9:da:cd:28:da:47:29:f0:ca:cd:4d:
                    ab:a6:cd:06:f5:6f:b3:20:37:eb:bf:e4:ac:ac:84:
                    85:ba:d8:c5:e3:ad:ba:18:3f:ab:ae:85:2d:83:3a:
                    41:0f:5d:e9:ae:4b:ea:0c:6a:83:d9:ec:82:62:52:
                    26:51:b1:ce:f8:25:f7:a9:5b:fe:59:aa:a2:a9:ad:
                    7b:b4:50:bd:c5:a4:76:9d:58:78:8f:b1:93:1e:38:
                    21:0d:e3:3a:20:06:75:82:fe:07:51:b5:4e:96:ae:
                    be:86:9e:00:36:ed:94:1b:20:ce:89:fa:e2:4c:dd:
                    2c:d8:68:9f:37:af:50:2a:af:3d:e5:8e:00:28:2b:
                    4b:f9:86:07:26:f1:b6:d5:f2:78:67:be:7b:87:6b:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:37:5E:B0:AD:2E:4C:23:F1:8F:1B:01:4F:B1:97:AA:AA:B3:7D
            X509v3 Authority Key Identifier:
                keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:f5:da:d0:27:05:13:34:94:68:99:50:6e:46:a6:0d:0a:
         52:67:15:59:d5:a8:fb:40:b7:ec:7b:71:93:f5:2d:10:8e:4b:
         c1:68:31:85:ef:6b:ec:a8:69:13:03:5e:11:f4:d1:3d:d8:73:
         df:b0:60:a0:52:54:f1:69:b3:cf:cb:0c:87:82:72:77:eb:5c:
         75:30:d8:fa:87:6b:fa:86:b9:b4:23:a8:80:9f:c4:07:86:f6:
         43:2a:82:79:43:f0:da:9c:dd:4d:06:6a:56:3e:4d:a0:6b:0e:
         14:32:47:58:62:79:60:ed:4d:28:46:25:46:cf:37:53:fa:b5:
         e2:81:cb:80:a5:2a:80:98:5a:3f:44:74:bd:76:a8:71:29:27:
         8a:0e:3c:7b:fa:f2:60:17:5d:a9:b1:b5:c0:44:05:56:4e:e5:
         87:8f:a2:2e:be:71:c1:b4:4d:50:93:9f:08:03:80:ea:b9:57:
         55:4c:c6:70:53:8d:07:0b:4a:94:3e:16:cd:15:95:d5:2f:97:
         cc:0f:0a:ce:25:b8:b1:28:04:ae:eb:75:35:d3:cf:6b:7a:37:
         bd:5b:29:50:ec:aa:fb:c6:04:d5:34:50:c7:fd:5b:54:14:4e:
         6d:48:de:fb:da:65:f9:4f:b0:a2:42:db:0d:06:47:40:77:a8:
         ee:37:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:19:56 2025 by rpki-client