Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File:                     f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier:          aUsNXKwiTUxE1xSB3yZKTp9s4zlptXcBTRfjn3GjOhw=
Subject key identifier:   4E:C9:A3:6C:35:23:0D:B2:33:9E:53:E8:98:88:27:0C:44:CB:E3:A8
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer:       /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial:       05CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number:          05C0
Signing time:             Thu 12 Jun 2025 22:44:56 +0000
Manifest this update:     Thu 12 Jun 2025 22:44:56 +0000
Manifest next update:     Thu 19 Jun 2025 22:44:56 +0000
Files and hashes:         1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: Uic3vcuvDZZR5Xfx3UV1g9gRYqESY5OknpbBTMz+uzY=)
                          2: 85ED6FDE476E11F0ABD0B828C4F9AE02.roa (hash: T7K5hlXhiQKLbHefN8F1BTawvXJvcTGAVy+jievS/vQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
        Validity
            Not Before: Jun 12 22:44:56 2025 GMT
            Not After : Jun 19 22:44:56 2025 GMT
        Subject: CN=684b5868-aeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0d:a5:ad:85:bf:40:b8:fc:f8:ac:48:61:b6:
                    28:b5:55:33:0c:4d:8a:b2:0d:69:8f:59:e3:e2:47:
                    ae:00:9c:9c:c8:71:9f:fc:16:01:fe:02:9f:04:86:
                    d8:06:e3:30:02:83:fb:c9:5e:58:cf:9c:08:73:ce:
                    ba:90:5d:1e:6b:9e:32:d7:74:e9:ff:02:be:7e:78:
                    af:2e:4a:38:44:1d:2a:8d:b2:da:ce:e8:1a:aa:36:
                    b7:0b:4b:12:3f:88:d8:c2:e3:55:2d:30:04:9d:1f:
                    00:2d:44:9d:b8:c2:d3:0c:16:72:03:da:c5:8a:39:
                    ce:05:4d:a4:85:cf:d6:32:50:00:28:e2:a3:31:6a:
                    1e:88:49:24:fa:aa:0d:30:fb:1b:08:4f:52:ac:eb:
                    e6:6b:63:c0:5c:20:50:19:5a:28:a2:a4:ff:63:26:
                    ba:15:12:cd:2b:15:2e:dc:36:71:37:48:96:86:7c:
                    37:cd:5b:c0:e7:ff:4a:b5:60:ec:d3:23:6d:60:9f:
                    73:ef:0c:a6:a5:4d:e6:a5:a9:1e:72:2d:d8:57:15:
                    cf:5a:b6:24:e4:1c:17:fa:05:54:e0:c0:8a:7f:75:
                    e3:c0:95:f8:a0:4f:b6:64:4d:e8:ed:be:3e:a8:3a:
                    31:b3:21:e5:64:4c:93:ce:a8:8b:53:b7:e5:6b:83:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:A3:6C:35:23:0D:B2:33:9E:53:E8:98:88:27:0C:44:CB:E3:A8
            X509v3 Authority Key Identifier:
                keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:5a:c4:c7:59:18:69:a8:d2:cf:47:de:f5:24:09:78:eb:
         92:ed:84:0f:84:bb:73:06:f4:b0:c2:92:7b:03:30:23:4a:ca:
         db:f6:4c:d4:4c:60:7b:a8:60:7c:18:ee:96:21:df:27:06:66:
         3d:f1:37:9d:31:cf:dc:5b:5c:78:07:b4:d9:3d:09:5a:6a:75:
         54:b6:00:72:c5:91:e6:17:6e:82:96:17:4b:f7:25:78:a6:8a:
         5d:d9:ee:2e:3e:fa:14:b6:dd:67:26:e9:0d:0c:b3:7d:f6:b2:
         94:f0:74:17:ce:78:1a:1c:51:35:8c:c3:81:fb:63:f3:60:bb:
         4d:8e:dc:5a:b9:c1:4d:f3:32:a2:bc:f2:88:3b:b1:da:49:86:
         37:71:6e:96:d4:85:d3:5a:bf:65:da:f8:79:15:bc:93:33:ac:
         4e:eb:e4:49:28:97:05:6c:61:f4:6e:54:b9:46:f6:91:f2:4e:
         25:1d:b5:02:4a:a9:64:03:03:25:f3:dd:14:78:56:37:35:30:
         0b:19:f6:ba:92:9a:c8:1e:6c:69:85:19:7f:48:96:36:48:82:
         c8:76:b0:d6:fd:48:c9:07:54:dd:16:b3:49:bf:63:2d:3f:09:
         da:3b:d7:62:85:9c:c9:21:b7:ac:91:4c:e0:67:95:c6:6f:44:
         d5:79:63:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:12:50 2025 by rpki-client