Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
File:                     RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json)
Hash identifier:          8fZ+cPdk12EBCV6YE/eU/clqyXodvQVczqA6dFjVUMA=
Subject key identifier:   7B:8D:39:0E:DA:C4:F6:A1:DB:91:02:66:2B:7A:63:66:79:35:D8:2E
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       36CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
Manifest number:          356E
Signing time:             Sat 14 Jun 2025 14:20:27 +0000
Manifest this update:     Sat 14 Jun 2025 14:20:27 +0000
Manifest next update:     Sat 21 Jun 2025 14:20:27 +0000
Files and hashes:         1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: HoPvvL5l4JwZGFmTD+B5aXsLhkoH/2JZBkaaBhVkTNM=)
                          2: 8ECE13F244FC11F08FADF180C4F9AE02.roa (hash: Wqmw9k2tUUV+JpUW2UkJgSyC1pP6oE8rtXQ0CSxbtRk=)
                          3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=)
                          4: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=)
                          5: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=)
                          6: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=)
                          7: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=)
                          8: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=)
                          9: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=)
                          10: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=)
                          11: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=)
                          12: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=)
                          13: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=)
                          14: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=)
                          15: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=)
                          16: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=)
                          17: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=)
                          18: 7179245C619311EE9B52D046C4F9AE02.roa (hash: UNWWiixe7D0hC7+k0ni4RN//93pBfhiLfmqDqnPNyLE=)
                          19: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=)
                          20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=)
                          21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=)
                          22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=)
                          23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=)
                          24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=)
                          25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=)
                          26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=)
                          27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=)
                          28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=)
                          29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=)
                          30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=)
                          31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=)
                          32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=)
                          33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14030 (0x36ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Jun 14 14:20:27 2025 GMT
            Not After : Jun 21 14:20:27 2025 GMT
        Subject: CN=684d852b-d679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:b1:6e:54:58:8c:c4:51:44:a7:29:fe:17:
                    e0:e6:5f:de:b9:55:9a:a1:66:21:18:07:3f:47:08:
                    34:96:a1:2f:1b:25:2d:b1:dd:57:3c:15:db:b9:85:
                    9b:03:c9:47:23:a8:87:6b:e4:ef:ba:5a:ec:1a:d6:
                    e2:23:e2:e7:dd:48:8e:9c:40:07:98:c1:77:5f:88:
                    20:e6:09:46:d7:a4:2f:36:f4:ee:b7:74:ca:0a:22:
                    ff:ea:e8:9b:83:42:ea:9d:30:97:23:6a:0c:e4:d0:
                    9a:3d:42:a8:e3:a2:84:91:c7:3b:20:3b:99:13:5c:
                    5f:18:24:a5:ec:5a:35:2b:87:2e:c8:61:ea:c3:c6:
                    61:ec:b3:5d:56:69:e4:df:e7:19:7b:e2:d8:e9:0b:
                    17:9b:28:37:6b:e2:c2:e3:55:82:4f:84:86:6d:9e:
                    cb:a0:a1:f5:92:29:fc:a9:13:d8:6c:79:cc:a3:e9:
                    0c:85:8e:82:de:34:eb:9b:dc:d7:be:07:b9:45:e6:
                    05:66:17:1c:d4:97:53:82:01:bc:18:2f:37:07:f9:
                    50:4b:ae:1f:ce:85:f9:51:0e:b2:9c:1e:4a:9d:0c:
                    ce:93:29:c8:c4:b1:c1:61:de:30:7b:c8:1f:88:09:
                    ff:2b:60:ec:c5:81:c3:70:df:2c:b4:ce:ae:ab:4c:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:39:0E:DA:C4:F6:A1:DB:91:02:66:2B:7A:63:66:79:35:D8:2E
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:93:77:45:45:81:04:f5:23:5a:aa:40:8e:aa:1f:be:9e:
         cf:30:35:29:dc:0f:05:61:f9:1e:6b:e9:f3:5f:7e:56:3f:d6:
         1e:1c:ef:3a:a5:3a:c0:ec:33:e6:d7:4a:ca:0d:92:92:b0:1c:
         0d:36:de:7e:e3:40:a6:ee:64:0f:1f:53:43:71:07:87:46:94:
         fe:cf:eb:05:e1:9c:34:2a:24:18:2a:6d:02:d0:03:3b:a6:8b:
         ac:23:c4:1c:f6:10:32:04:90:ba:34:e1:5a:35:01:8e:84:54:
         f2:3f:99:56:27:f5:36:0d:f5:1b:9d:30:bc:28:ee:b3:29:94:
         d5:4b:28:9a:c6:16:d6:a7:5b:1a:ff:a3:21:2a:b6:02:73:14:
         f3:c4:1e:35:e6:4c:ad:77:11:8e:bb:3b:b1:8a:b0:f1:2f:23:
         82:f2:ef:70:fb:37:c4:ce:1a:d7:6e:a3:34:a6:e3:ec:b4:45:
         82:76:74:0f:e6:c7:2c:7e:c3:25:a9:10:60:00:60:8b:ea:73:
         49:63:46:b2:bb:2f:9a:87:25:35:bb:86:0c:d8:b7:1a:d7:bc:
         0b:5d:e8:12:9d:1d:e5:a5:48:2d:6c:9e:c2:59:a3:cb:5c:b8:
         9f:0a:1e:a0:ea:e5:94:d9:2b:52:23:1a:c8:61:3a:58:ee:ff:
         5f:c6:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:35:31 2025 by rpki-client