Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
File:                     _hORwLImyM6_pKKtZpauS4K_fic.mft (raw, json)
Hash identifier:          +svL3WkNZf7urK2FuBjldNJaTGUpu2Ga8JdX0Hax7d8=
Subject key identifier:   BF:F6:AA:81:F7:1E:1F:EF:57:61:2F:10:D7:31:2B:FC:81:E9:A1:FA
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Certificate issuer:       /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
Manifest number:          01CF
Signing time:             Sun 15 Jun 2025 02:09:58 +0000
Manifest this update:     Sun 15 Jun 2025 02:09:57 +0000
Manifest next update:     Sun 22 Jun 2025 02:09:57 +0000
Files and hashes:         1: _hORwLImyM6_pKKtZpauS4K_fic.crl (hash: 9zv36HCVzRo+lnqHM2zKcAlqjCU2b9wLxEZKkDRe6bY=)
                          2: 7369922E680A11EEA25B1D1FC4F9AE02.roa (hash: 24GbMLp8DMTZ3h6VXw3inwkNu/B522DsUckUsbm7BTg=)
                          3: 7AEB97D2A45011ED8AB8A437C4F9AE02.roa (hash: onrdwOUBSMf30DMB2gEtxkD8C7GCfvol8JynThaYBqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl
                          rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E369, serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
        Validity
            Not Before: Jun 15 02:09:57 2025 GMT
            Not After : Jun 22 02:09:57 2025 GMT
        Subject: CN=684e2b75-22b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:07:56:ee:06:b4:54:57:e9:c0:38:da:65:
                    98:f8:99:ad:09:fa:72:6e:4d:7f:80:bc:5f:34:d9:
                    e6:5a:c8:53:9b:a8:b3:42:97:0c:97:60:c3:a6:11:
                    c3:b2:04:f4:91:09:25:27:68:0e:25:af:f7:c9:b9:
                    7c:f2:0a:04:36:33:ce:89:fd:25:9f:db:63:e4:4b:
                    38:f1:2d:be:bc:51:68:0e:49:69:2d:a1:95:c4:db:
                    72:99:44:3f:c8:4c:e0:51:21:e8:0a:c5:c1:63:a2:
                    89:97:94:d7:b3:f4:a7:77:c3:56:bd:a1:e6:6c:6f:
                    0a:77:2c:81:a4:ca:2f:c4:99:f6:21:b6:58:f8:59:
                    30:68:68:9e:6c:6c:c8:82:a8:01:ee:50:15:61:12:
                    23:5c:af:b8:0e:55:59:85:f0:da:ee:d3:81:21:a4:
                    26:07:e0:fa:f9:67:18:80:fd:b9:4f:65:5a:2a:b6:
                    41:f2:ad:fa:5a:27:09:ff:ca:94:3c:ba:2b:e3:e2:
                    09:b1:72:de:46:58:fc:1c:0d:6c:49:c7:4c:9e:74:
                    fa:ef:a9:bf:69:1d:cd:c6:c8:d1:80:3a:06:9e:b6:
                    0f:f1:be:63:60:31:fe:d8:92:65:82:a3:85:68:2b:
                    70:f6:ca:9c:86:99:01:c2:dc:17:32:ce:d8:9b:39:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F6:AA:81:F7:1E:1F:EF:57:61:2F:10:D7:31:2B:FC:81:E9:A1:FA
            X509v3 Authority Key Identifier:
                keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:2c:a1:b8:a8:7d:55:67:24:7b:b0:60:af:8e:ea:4f:14:
         41:75:63:71:f6:0c:3d:42:26:db:66:3b:e9:fc:ac:eb:bc:81:
         39:33:11:9d:9c:c6:ba:f1:d8:b6:85:96:e2:cc:cd:83:22:e2:
         f9:2d:f9:05:67:05:da:8a:08:59:af:1d:b7:44:b1:5f:0d:e7:
         53:74:3b:58:88:0b:83:e4:9e:55:8e:53:b8:a9:4f:db:25:71:
         7b:d3:96:11:19:af:c1:a3:c2:d9:1e:33:f6:a8:bc:c3:4c:78:
         39:fc:5b:0a:3b:fe:91:5b:af:a1:e1:8b:99:15:0e:f1:00:61:
         b4:5a:e5:ac:7e:8c:90:89:2d:cd:a8:d9:c3:4f:3a:3e:ce:7a:
         2c:92:e1:d8:82:28:81:28:57:d7:6f:3a:a7:48:61:7e:6b:7f:
         ba:c7:37:a5:0a:c2:bc:e9:68:49:dc:d0:b3:af:1d:34:1d:0c:
         d9:40:b2:fd:f3:f3:19:37:10:4b:b7:50:65:5a:ab:22:fb:1d:
         09:e3:12:70:ba:bc:ab:e0:31:6a:37:c5:53:d9:b9:4a:49:dc:
         84:46:18:0a:1c:f7:a6:f8:e8:63:2e:4f:68:7e:2e:0a:72:83:
         61:25:52:98:c7:c9:b0:13:17:82:1e:e8:d2:87:c0:9b:13:3a:
         c3:7d:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:11:30 2025 by rpki-client