Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File:                     vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier:          GduFL8e8mVZjvOuEJUwK5aPMODRqf3XSQ1pVFSVep+U=
Subject key identifier:   86:9D:09:95:80:60:13:3C:6A:B1:74:50:73:92:CF:B4:A8:98:85:8A
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer:       /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial:       0C6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number:          0C66
Signing time:             Thu 12 Jun 2025 18:07:46 +0000
Manifest this update:     Thu 12 Jun 2025 18:07:46 +0000
Manifest next update:     Thu 19 Jun 2025 18:07:46 +0000
Files and hashes:         1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: LTDPgFIrlB6jaDQ0qNDVH3arel4pmK6ukUMzMMg2nWQ=)
                          2: 87B023F2FF9E11E998D7BF77C4F9AE02.roa (hash: wgxBqTOXaVBqDTXi3QmSfIMhu4UE3inSSK8gOm0zVzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
                          rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3181 (0xc6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
        Validity
            Not Before: Jun 12 18:07:46 2025 GMT
            Not After : Jun 19 18:07:46 2025 GMT
        Subject: CN=684b1772-821c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:be:3e:74:7b:79:6f:c2:0f:d4:e3:c7:df:
                    e4:eb:0d:4a:d6:8a:66:25:88:af:78:d6:30:fb:ca:
                    7d:d9:a0:d8:cd:c0:5b:bc:88:06:64:2d:c4:c1:6b:
                    39:77:1a:a7:34:1f:6d:4d:f2:7f:1f:72:e4:c7:30:
                    29:5d:cc:69:87:2e:bf:c0:3e:73:ca:a4:ac:1c:fd:
                    dd:42:6b:aa:35:8c:a3:70:64:79:2d:20:de:cc:15:
                    dc:b8:2f:c6:53:70:ed:36:e9:cd:c4:89:d2:5a:ed:
                    1b:df:d1:fc:a9:e0:1b:df:06:5c:53:13:70:95:55:
                    c0:f0:d6:c2:64:80:d6:a5:9a:16:da:93:3a:cf:32:
                    5d:ae:31:cd:b3:7c:ba:5b:83:88:34:37:b5:ba:0c:
                    01:b6:67:c6:90:5f:46:15:b7:63:68:4d:e2:3f:a1:
                    90:0f:f8:b5:c2:93:a3:88:4b:bb:6f:bd:b9:8b:fc:
                    41:77:83:10:70:cf:4a:ae:cb:f0:05:ad:32:9d:19:
                    85:53:96:64:b1:80:11:30:b2:ec:6d:1b:7a:fc:42:
                    d1:47:f7:ac:9d:39:6f:46:3a:86:a8:8d:f9:46:a5:
                    99:12:f5:5e:f8:12:4a:f6:4e:09:ce:c9:f7:8e:fc:
                    fb:f9:70:5b:db:34:43:1a:c2:10:6b:71:ff:6d:39:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:09:95:80:60:13:3C:6A:B1:74:50:73:92:CF:B4:A8:98:85:8A
            X509v3 Authority Key Identifier:
                keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3c:c1:39:ad:f7:9e:a9:80:9e:cb:cd:1a:97:5a:28:bd:10:
         23:e0:a1:ed:83:c6:39:37:94:b0:b7:12:a3:0e:8e:9e:21:cf:
         b5:05:16:92:70:66:d0:ce:70:6b:b8:b9:a8:2e:49:fc:47:56:
         1a:50:11:16:ad:cd:0a:a6:a1:ef:17:0b:70:be:46:c1:8b:be:
         ff:0f:25:19:91:bb:1b:01:61:72:33:df:54:22:8d:ca:de:db:
         1a:a8:a0:09:81:e3:30:ac:ba:e7:38:2c:e5:69:16:80:f3:a9:
         37:05:56:a7:f3:e4:7a:72:39:90:d8:30:24:20:b9:15:a9:5c:
         d6:fc:2f:7a:8a:d3:f7:e4:94:0e:c2:bf:39:80:6a:be:db:bf:
         65:8d:83:68:c7:bc:89:c1:e1:3c:8c:ec:4a:b3:72:7c:0c:87:
         84:a0:9b:4e:f8:c6:01:5c:3a:a8:37:61:07:90:e7:43:bb:bb:
         bf:9c:42:d5:ab:de:54:14:81:4a:10:df:2d:ea:22:f9:97:af:
         bd:f5:e2:c4:cd:a3:14:d9:1c:3b:29:4c:05:26:88:d1:15:d4:
         7b:7d:84:ee:c4:2e:85:bd:49:66:c7:0f:93:69:14:5a:64:77:
         5d:5e:18:7d:a7:1a:2f:ac:de:d5:b2:65:f9:07:d1:11:9f:2f:
         5c:23:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:22:45 2025 by rpki-client