Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File:                     h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier:          TTuGZ1KFGxlDxEplCrMXbiEUnzueNgnXsQn/lsJzGxc=
Subject key identifier:   8A:EE:ED:A7:5A:85:6A:47:52:69:7D:B0:7C:AE:AD:74:B2:E0:13:50
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer:       /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial:       0509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number:          04ED
Signing time:             Thu 12 Jun 2025 23:24:15 +0000
Manifest this update:     Thu 12 Jun 2025 23:24:14 +0000
Manifest next update:     Thu 19 Jun 2025 23:24:14 +0000
Files and hashes:         1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: ZIsox/Ws9GZuQ20kb64a/1GlphpBprxhzQxXDpbrcrU=)
                          2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=)
                          3: 9B528A5AB7D611EDACEDEC79C4F9AE02.roa (hash: o2ReRLcJlulFpKfpdWmE6u0f7G1G3KpQA2ac4wDJgWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
                          rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
        Validity
            Not Before: Jun 12 23:24:14 2025 GMT
            Not After : Jun 19 23:24:14 2025 GMT
        Subject: CN=684b619e-3d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:44:3e:e4:42:70:fc:64:49:31:f6:46:f1:
                    dd:3c:2a:79:89:62:90:43:3c:5f:1e:99:75:57:15:
                    5d:f0:ad:85:b2:f7:9a:ef:7e:64:2b:6b:eb:74:44:
                    c7:33:49:b1:7a:01:d7:38:25:4e:9d:7f:28:6c:e2:
                    9b:6a:53:03:89:11:d2:d2:66:ef:a7:13:a5:eb:ee:
                    5b:e2:d5:12:bc:a8:fc:0e:3f:96:e2:d1:7a:b7:7c:
                    46:80:5b:23:61:8e:34:20:33:78:48:e6:2b:a1:e6:
                    27:d7:47:84:bc:15:73:6e:25:df:c2:fa:2b:c7:69:
                    9b:a6:9e:2e:c3:86:6f:f0:dd:6b:69:72:3a:34:f2:
                    19:eb:08:45:11:04:f6:8d:fe:ac:73:dc:47:11:bc:
                    f4:4f:27:16:a5:84:c7:ed:f7:b9:b8:71:40:a9:06:
                    3d:f6:27:ee:d9:fb:70:a3:1e:df:db:c3:ec:16:9d:
                    b4:8a:b0:04:35:52:09:9f:ec:61:7a:79:34:92:70:
                    f9:21:56:28:10:ba:9b:42:20:8a:89:a9:f0:5f:9a:
                    fe:e2:b6:6a:fa:43:5b:cf:8f:07:f1:af:95:bb:48:
                    90:2d:c8:f5:09:76:fe:bb:0e:e0:e1:79:76:04:0e:
                    d9:c7:2f:19:32:19:88:26:bb:ff:cb:06:93:10:91:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:ED:A7:5A:85:6A:47:52:69:7D:B0:7C:AE:AD:74:B2:E0:13:50
            X509v3 Authority Key Identifier:
                keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:10:11:f9:85:3e:63:3a:d2:01:50:1a:8f:d8:3e:1a:52:
         3e:af:57:9f:b9:cb:d4:ce:23:f1:cb:c7:63:b8:8c:77:66:63:
         a8:77:99:ec:03:b6:74:f4:e4:85:9e:7b:3e:af:86:1a:c9:aa:
         cb:a1:0b:2a:e5:5c:f4:29:86:20:d2:df:69:ee:ad:ec:36:fd:
         7a:50:a4:c6:c7:eb:49:8e:6d:6f:b4:02:5a:16:fc:f1:bd:a4:
         60:4b:55:43:d1:10:f3:cb:50:e9:d7:75:cb:34:0b:de:33:92:
         31:08:e5:b9:9e:8d:cd:32:7f:64:b8:9f:ac:77:b6:33:88:49:
         49:2a:7c:2d:0f:8c:aa:6f:27:b1:ff:ea:2a:83:c4:dd:28:0a:
         ff:30:cd:31:ae:8f:e5:ab:a1:6f:42:7e:76:8d:a0:7d:18:a9:
         11:70:fc:94:03:80:58:9b:5f:aa:29:77:f4:7a:df:99:e0:d5:
         02:17:05:b7:bc:61:5d:cd:3c:4e:28:c2:4c:1b:90:c1:4a:e1:
         0d:39:c6:47:55:c4:de:23:9f:8a:53:1b:ec:c2:07:7d:2f:d4:
         f2:7c:b1:20:f8:0c:c4:ff:f1:0f:e5:31:83:19:a6:88:15:ad:
         cc:e0:ec:f1:ef:52:33:20:55:1e:04:e2:bb:d0:98:02:47:7b:
         1c:56:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:15:26 2025 by rpki-client