Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File:                     xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier:          g04lVqp27BnqcInY1xJh3pjkhiMXiCG1CA8TQckVXFc=
Subject key identifier:   66:CE:CF:6B:D3:8F:68:EE:71:B7:B9:8F:9E:8F:96:4C:AA:7D:04:B2
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer:       /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial:       06CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number:          06BB
Signing time:             Thu 12 Jun 2025 21:48:04 +0000
Manifest this update:     Thu 12 Jun 2025 21:48:03 +0000
Manifest next update:     Thu 19 Jun 2025 21:48:03 +0000
Files and hashes:         1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: QI3x/vve1xUEevaECkYZDABiluHq2rteRjmOfvduL0I=)
                          2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=)
                          3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
        Validity
            Not Before: Jun 12 21:48:03 2025 GMT
            Not After : Jun 19 21:48:03 2025 GMT
        Subject: CN=684b4b13-10ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:71:a1:71:bd:70:5e:a0:d2:38:f1:90:e7:8d:
                    15:d6:6b:a9:c9:05:84:4b:e2:f0:19:3a:98:20:bc:
                    76:c3:31:3e:54:05:2e:3c:1a:4e:44:0c:3a:46:bc:
                    9c:16:ea:6c:e1:e3:4d:0e:7a:6f:9f:97:da:e3:e1:
                    6f:03:c6:2a:dc:20:70:d6:bb:1f:ff:f9:5d:53:48:
                    30:94:3c:86:32:65:d1:dc:39:97:07:6c:a8:41:66:
                    c6:ca:51:34:79:5b:4e:7c:ea:29:0f:da:21:c4:5d:
                    73:f8:ff:88:fb:5f:8c:90:5c:ea:cc:0c:ba:e2:95:
                    ed:c8:94:52:c0:c2:ca:cf:43:02:13:90:03:3b:66:
                    b8:0d:8a:e8:13:f7:af:42:ff:5f:cc:5d:bd:15:bc:
                    0e:e5:1a:46:ca:d4:f6:b5:b9:8e:f3:3f:45:ea:c1:
                    9e:0d:07:bd:98:2c:bf:41:f5:f9:a2:74:7e:ce:72:
                    bd:51:f7:a2:12:56:bb:08:af:6a:3d:61:ce:ff:3f:
                    14:12:2d:a3:e4:e0:7d:1f:96:f5:a9:6e:9d:22:05:
                    2b:c9:8b:c0:b2:2f:c4:42:a5:31:f8:60:83:a2:d9:
                    af:54:1d:63:d8:f0:75:cf:58:3c:1d:09:5c:48:d1:
                    90:f7:a8:2c:c7:fd:68:a4:a7:31:92:1b:05:a6:e8:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:CF:6B:D3:8F:68:EE:71:B7:B9:8F:9E:8F:96:4C:AA:7D:04:B2
            X509v3 Authority Key Identifier:
                keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:17:f3:1f:19:d7:76:03:4d:8b:42:c1:79:36:03:63:71:f6:
         70:5c:ed:47:a3:e1:b5:5f:bd:2e:82:41:b5:4f:7f:0b:58:cd:
         87:b4:6b:47:64:8d:e8:c6:33:e5:76:a4:91:10:87:b1:28:1d:
         ec:5f:f6:a7:30:43:ac:70:02:18:9f:97:a5:1e:11:52:32:45:
         4a:2f:dc:a4:f6:98:20:63:51:2a:99:9e:18:2d:1b:99:95:97:
         45:18:cd:18:46:52:84:ac:8c:3c:6a:34:64:36:d9:be:68:f6:
         48:f6:53:50:a9:5a:12:b3:91:bc:97:38:01:35:ff:b5:0e:6a:
         36:0e:97:62:b2:45:70:ec:35:d5:d5:43:77:6c:c0:b9:95:a7:
         e2:14:72:76:3d:c4:47:26:ec:43:bf:05:f6:09:50:5c:5d:d0:
         8a:49:b5:6a:86:51:76:8d:5a:71:3a:1b:2e:ce:e5:7c:b9:eb:
         61:58:ed:55:4b:26:69:59:6d:4f:23:24:23:9a:88:a9:b6:b1:
         0d:87:4d:b9:53:f5:4f:18:b2:cb:e3:61:bc:ee:2d:13:f9:14:
         12:fe:2f:24:4c:a8:ff:ee:b8:54:2d:95:a3:3b:f5:25:f5:8d:
         dc:db:f1:3a:4e:a3:d4:fb:0c:ee:4f:03:b1:dd:be:6a:4a:c8:
         bd:0b:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:37 2025 by rpki-client