Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
File:                     pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json)
Hash identifier:          6z8BaDUQbDs8zgr6XYT3QJsAf646xPd5D7zO55tLyUM=
Subject key identifier:   EA:3F:02:EC:E1:DF:3C:02:01:E3:55:2C:AB:D2:1F:A9:2D:D9:43:09
Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
Certificate issuer:       /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Certificate serial:       349F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
Manifest number:          3498
Signing time:             Mon 16 Jun 2025 14:43:08 +0000
Manifest this update:     Mon 16 Jun 2025 14:43:07 +0000
Manifest next update:     Mon 23 Jun 2025 14:43:07 +0000
Files and hashes:         1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: oP98efdLSSGr1nXGkJ9R57STloGO9qK4PdUoCSKKK0w=)
                          2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
                          rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 14:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13471 (0x349f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
        Validity
            Not Before: Jun 16 14:43:07 2025 GMT
            Not After : Jun 23 14:43:07 2025 GMT
        Subject: CN=68502d7c-69d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:e5:48:3b:d0:92:e1:12:96:5f:8e:2f:f0:
                    28:9e:ec:db:31:e7:f3:17:d6:b9:23:29:28:84:6c:
                    1a:56:ff:d6:0b:27:c3:16:d5:4b:4c:e7:21:bd:4a:
                    a1:3c:57:74:55:09:e6:6c:ab:e2:7d:e2:bd:d9:7a:
                    b6:6c:b8:b7:c4:06:99:83:37:c4:a4:35:09:90:66:
                    03:3a:0b:03:22:95:f1:c5:53:7f:dd:af:b9:85:2b:
                    f5:97:94:70:1f:a5:1b:53:b3:7c:52:f9:4f:e5:db:
                    8c:46:9e:e8:b0:e6:bf:c7:ee:81:c9:65:b0:cf:ab:
                    6b:b2:92:ea:7b:23:65:6a:7e:c5:f1:14:0e:a2:86:
                    94:7f:1f:88:43:7b:18:d5:85:f7:d2:76:55:97:2c:
                    5e:ec:9c:c2:a5:42:ee:f6:9b:ca:00:05:69:ad:80:
                    1d:44:f0:10:61:1f:1d:73:c1:f4:29:25:89:e1:e0:
                    fb:e4:ec:a6:c1:f0:ef:20:70:2b:dd:cd:e6:f3:83:
                    9c:2a:4b:ef:49:ee:d0:a6:71:d9:75:45:9f:f9:4e:
                    c8:e2:c6:e0:50:78:23:ac:c3:0a:5a:24:8f:22:ec:
                    b8:6d:60:e0:3a:60:b9:ff:68:60:36:5c:d6:5d:c5:
                    0b:31:00:43:f5:d4:72:44:4d:dd:07:7c:36:38:46:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3F:02:EC:E1:DF:3C:02:01:E3:55:2C:AB:D2:1F:A9:2D:D9:43:09
            X509v3 Authority Key Identifier:
                keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:b7:f3:df:42:df:29:6c:a9:a9:85:34:3d:2d:57:94:1f:
         37:8f:e4:be:cd:ab:82:94:62:9f:7e:b8:55:f7:1d:85:29:85:
         33:ba:77:b8:8a:7f:eb:f8:ba:91:f2:69:a7:4f:25:dd:45:c1:
         a9:39:87:d4:c4:cd:e4:59:fb:92:a0:b7:95:50:62:76:36:eb:
         7d:14:fe:6f:65:e0:25:67:dc:be:73:c7:6d:ee:06:02:fc:03:
         43:ae:8b:6c:a3:72:35:32:48:d6:96:b1:42:53:58:43:c5:7b:
         b5:e9:d6:1a:70:34:6d:b2:93:f5:4b:e8:d0:7d:9c:bb:40:22:
         f4:37:2b:5e:42:fd:2d:52:a1:54:95:43:6f:be:2b:07:2d:fd:
         92:5c:6d:7c:88:98:a8:7a:78:68:0b:16:88:fb:22:11:bb:59:
         0f:84:eb:b0:08:2b:64:53:c0:fd:7a:ff:e7:23:ee:a3:e9:ab:
         52:36:e6:ef:04:52:89:f4:a7:72:df:22:49:8a:e0:07:d5:a0:
         d8:d2:28:44:c5:5c:34:d1:56:a5:1e:7a:f9:fc:b6:65:fb:c7:
         0e:87:f3:65:8d:bf:d2:2d:2d:4f:f9:9d:74:68:12:f0:ea:83:
         c5:57:36:02:42:9f:86:39:08:a3:78:14:50:22:1e:d7:a9:5e:
         cb:82:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:57:01 2025 by rpki-client