Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          nB2xWMiDA9jIeeLGBniYQbaxzauPy+Fk2kBYkHEkdvU=
Subject key identifier:   7B:93:73:AC:3D:8E:E8:55:A9:6E:EB:57:1F:95:EB:6C:74:A4:42:6D
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          FC
Signing time:             Fri 13 Jun 2025 04:15:12 +0000
Manifest this update:     Fri 13 Jun 2025 04:15:11 +0000
Manifest next update:     Fri 20 Jun 2025 04:15:11 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: vbHMmYUkSW9MevBxwHmEpG5oy9/gxtZxQ6npi6fPoKE=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Jun 13 04:15:11 2025 GMT
            Not After : Jun 20 04:15:11 2025 GMT
        Subject: CN=684ba5cf-897a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:0f:e4:ec:c4:9e:b3:dc:e7:7c:ae:eb:54:
                    f5:9d:55:77:5b:89:b3:0a:c4:3e:a7:59:35:b8:52:
                    ee:cf:ba:e1:60:f5:75:bb:f4:98:d9:90:5f:c9:a5:
                    70:08:69:15:8b:2f:e6:6b:f9:4a:e6:7d:06:d5:2e:
                    7b:7e:8a:80:3b:c5:4c:83:29:21:b4:0a:f6:2f:d1:
                    bf:cd:e1:e3:25:42:89:43:e3:48:c9:08:ea:32:0a:
                    04:f8:7d:cf:48:df:44:ae:5f:3b:23:f4:c6:36:e5:
                    48:dc:4a:34:fa:a4:08:38:69:66:26:e1:cd:a5:b9:
                    7c:09:20:e3:9b:ea:db:59:9a:81:1a:25:41:85:c1:
                    87:3e:78:db:31:df:2a:2d:5f:9f:ff:92:83:a0:dd:
                    32:99:4e:b2:30:07:f3:dc:07:1e:f4:59:25:32:31:
                    51:ae:2e:06:6c:c8:18:87:ac:5c:47:5e:02:33:74:
                    33:ff:47:e4:53:85:6b:e4:e8:09:50:e4:ca:b9:95:
                    3f:18:fa:98:78:a6:95:74:23:80:e9:52:30:2a:d9:
                    8a:8f:35:0c:56:63:30:15:dc:49:a5:68:ce:10:cf:
                    1c:cd:75:6f:40:a2:29:a2:98:bd:b6:01:8a:05:3b:
                    4b:c8:3f:26:0f:34:68:63:15:70:11:cc:05:3e:55:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:93:73:AC:3D:8E:E8:55:A9:6E:EB:57:1F:95:EB:6C:74:A4:42:6D
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ce:e5:c3:0e:22:4f:ba:52:6b:69:9b:35:3a:e9:02:8d:ad:
         63:00:29:fd:f6:e9:a5:7c:6e:d6:1e:e0:86:72:8c:18:06:04:
         00:1b:a5:43:a4:61:ca:67:d7:0c:92:6d:79:3a:91:84:a6:67:
         89:81:59:f4:07:52:d7:cd:94:5d:a9:ac:64:5d:04:2b:c5:62:
         bb:72:9c:ac:e6:27:66:52:ea:6a:42:fa:72:ac:08:38:79:f2:
         0d:68:d7:7f:dc:49:e1:92:57:ee:8b:7c:c3:fc:b9:a5:9e:71:
         44:6d:fc:83:cd:50:d8:40:54:ba:80:cc:5e:92:c3:87:f0:f5:
         ff:18:09:ee:c0:c0:d7:58:d7:42:8a:6f:ac:7b:11:fe:c7:58:
         b1:7e:f4:78:67:fb:16:22:91:4b:29:4b:4d:17:d3:51:b8:01:
         fd:55:38:ec:7a:60:dd:86:26:d1:04:30:9f:57:75:a4:87:49:
         e6:7c:1a:bb:1a:cd:89:71:d6:64:c4:28:dd:41:6f:31:c5:96:
         3e:4d:fe:f6:d4:da:ee:c7:df:c7:d4:95:90:36:81:bc:63:03:
         d8:fc:50:8f:2d:06:8a:9c:0a:b3:98:31:ae:01:cc:74:80:0e:
         a9:04:50:54:95:b0:9a:9e:5e:14:0c:37:87:24:9b:35:13:72:
         eb:9e:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:38 2025 by rpki-client