Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File:                     VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier:          F+8YV5vRvk7Un87npoWvzangqVEtKEp1DGb277bGoJo=
Subject key identifier:   27:62:97:48:51:06:FB:7C:33:95:26:16:53:6E:C6:59:CF:5F:CF:8E
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer:       /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial:       0416
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number:          0412
Signing time:             Thu 12 Jun 2025 23:58:33 +0000
Manifest this update:     Thu 12 Jun 2025 23:58:33 +0000
Manifest next update:     Thu 19 Jun 2025 23:58:33 +0000
Files and hashes:         1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: rurw6d4FBND2FCiTap+RM8affiau4vutWk7SbxXgTZE=)
                          2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
        Validity
            Not Before: Jun 12 23:58:33 2025 GMT
            Not After : Jun 19 23:58:33 2025 GMT
        Subject: CN=684b69a9-c9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:8f:30:60:35:5b:42:f4:a4:22:96:aa:8f:
                    3a:8f:43:67:ac:8a:9e:e7:34:e4:64:d6:d5:1c:c1:
                    1e:52:eb:2a:9d:d3:c3:3d:63:2a:66:09:9f:f9:74:
                    ea:96:84:88:b2:27:fa:f2:d0:5e:40:e1:c0:d0:67:
                    d0:15:e3:9e:65:f7:9c:27:4a:92:09:3d:86:f2:c3:
                    ba:76:62:19:33:2d:da:38:29:b4:40:7b:4a:33:93:
                    4a:b1:75:3b:c4:51:c9:e0:a6:6e:36:76:7d:a7:33:
                    81:a2:48:93:45:55:11:97:06:88:67:72:d1:d5:bd:
                    8a:fe:d4:f6:14:c6:28:fe:d5:66:5a:40:61:86:92:
                    87:66:46:41:97:f0:56:a1:8c:1c:94:83:2f:8d:c5:
                    8c:68:64:4a:93:cd:7f:96:0d:45:ea:03:19:1a:cc:
                    d5:45:9c:18:db:7a:1a:b5:17:ac:64:cc:e4:e4:ac:
                    70:d0:93:dc:6d:66:90:31:f2:41:6b:dc:89:de:7a:
                    27:78:bb:5c:fd:1d:15:59:79:82:7c:e0:8e:e2:57:
                    dc:ff:4f:27:4c:f8:8b:0a:9a:24:11:08:0c:e3:eb:
                    c8:21:7d:84:e9:a9:c4:97:2a:35:3a:79:ed:25:0b:
                    44:12:77:00:03:bb:57:5b:ba:8d:f9:a5:7e:b4:ee:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:62:97:48:51:06:FB:7C:33:95:26:16:53:6E:C6:59:CF:5F:CF:8E
            X509v3 Authority Key Identifier:
                keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:90:ac:c3:25:a4:1f:b8:9c:25:49:3e:13:fc:4c:30:68:ec:
         d9:40:05:ca:48:ce:07:0e:b7:5d:54:52:1b:a8:b2:d2:19:26:
         4a:af:7b:f4:f9:80:ee:8e:a9:44:20:e8:91:9c:9a:12:8c:fd:
         c5:bb:91:f6:84:e2:09:95:fb:53:a2:15:dd:75:dc:70:6f:a0:
         06:f2:21:f3:ed:69:27:d7:74:40:77:56:de:33:d9:e4:1a:43:
         9c:05:54:ac:41:f6:63:73:15:44:70:61:f4:26:87:44:02:de:
         2f:10:59:11:65:50:e8:22:05:aa:57:84:2a:88:2a:2c:82:0d:
         59:4c:75:d5:26:e0:5e:2f:0f:fb:72:0c:ee:51:ae:d1:d0:f5:
         05:ee:83:e9:34:cd:69:39:46:12:b3:94:bf:5b:b4:ff:3b:2d:
         71:86:c1:a9:d6:b7:08:33:1c:de:c8:14:6e:b8:07:21:e9:d9:
         43:dd:e7:db:02:55:18:de:4a:16:f8:55:aa:4c:e4:f4:ce:81:
         3f:56:f7:c1:27:1f:14:73:db:9f:00:04:ff:64:02:85:f5:0d:
         a7:65:0e:f9:93:7f:41:2c:83:87:c0:42:88:6c:03:7e:6e:2c:
         58:68:5a:95:c7:a8:08:1f:eb:22:f9:24:d3:2d:93:4d:67:0d:
         f1:79:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:38:00 2025 by rpki-client