Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          ruitlQAz6ltLSBn90ykM0PW8ri8SLU5EIdZTUFENab8=
Subject key identifier:   2D:F8:95:F0:FF:F3:2C:C0:21:B4:7B:A3:13:F0:D3:8E:9F:6B:DC:9D
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       0706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0A9B
Signing time:             Thu 12 Jun 2025 19:20:19 +0000
Manifest this update:     Thu 12 Jun 2025 19:20:18 +0000
Manifest next update:     Thu 19 Jun 2025 19:20:18 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: F4WBSQl0k7o74trTRojhZiS7sFl31AWaHppvYOK5Znk=)
                          2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=)
                          3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Jun 12 19:20:18 2025 GMT
            Not After : Jun 19 19:20:18 2025 GMT
        Subject: CN=684b2872-9cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:a3:40:d7:c6:3f:68:f5:4e:64:6b:81:bc:
                    f9:d0:09:95:ff:60:65:0a:9d:cb:d2:cd:ba:18:df:
                    d6:7a:06:0d:2c:da:ed:12:59:71:c2:44:97:02:5d:
                    21:80:b7:23:f1:3c:c4:32:fa:b0:95:37:83:cb:f6:
                    aa:e7:0d:2d:f8:c7:d9:e7:1f:40:5d:88:68:ac:a3:
                    5c:08:5e:9f:0b:87:41:a2:bb:a2:6d:63:61:00:f9:
                    0d:05:45:cf:65:08:2b:c9:a6:6a:78:78:6a:7d:f6:
                    3f:e7:b5:65:bc:5f:6b:f7:5f:c3:eb:fd:94:d1:95:
                    ac:df:22:2e:41:e4:bb:da:d5:b4:e1:00:b0:5b:63:
                    01:d4:a0:ab:b1:ff:1d:41:72:36:68:b2:dc:32:5e:
                    f9:42:9c:23:30:41:e0:9f:a1:66:26:14:4e:bc:25:
                    38:ce:9c:58:f0:aa:ed:21:d6:54:fc:f4:9d:c7:fd:
                    69:4f:db:7e:8c:bf:3d:1a:46:19:b3:a3:be:5b:ab:
                    bc:20:01:ef:ee:7d:7c:12:bd:48:d6:9f:bd:34:f5:
                    71:7a:81:99:c2:ca:3b:0e:1c:ff:bd:b2:50:7e:e5:
                    67:f5:cc:fa:60:73:96:3a:fa:59:59:11:18:b1:89:
                    85:d7:0e:44:9d:c2:a9:bb:7e:65:05:31:85:f5:2f:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F8:95:F0:FF:F3:2C:C0:21:B4:7B:A3:13:F0:D3:8E:9F:6B:DC:9D
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:36:4d:a0:91:a1:f0:7e:db:95:e8:5c:68:39:41:01:ea:
         19:65:64:81:64:e6:bb:ed:bb:99:cf:04:c6:d4:79:57:b5:f9:
         1a:3a:4d:fe:74:35:60:27:0b:32:bd:b1:56:12:46:14:be:8e:
         65:6f:e9:e0:e3:52:54:5a:47:09:22:1d:74:77:be:69:5e:1d:
         eb:80:87:a7:4d:93:79:ed:ea:d6:8c:d3:0c:90:3b:6c:11:72:
         7f:8f:c5:56:ed:f6:ed:09:cb:e1:92:a5:f3:80:35:a7:fd:19:
         b1:d9:17:1e:46:e1:f0:12:01:fb:9f:f6:79:05:68:7e:38:9c:
         6f:68:48:70:9a:9d:40:e6:c5:46:8e:3a:86:54:ae:8b:65:28:
         3d:a9:8e:c7:f4:dc:08:e0:11:7e:4e:59:03:61:62:af:50:11:
         70:a9:26:28:20:4d:29:04:c6:57:16:f9:e0:1e:b7:49:69:3a:
         44:f9:92:d3:10:a0:85:c6:9f:b0:50:89:1f:18:98:07:3e:f0:
         26:af:96:1b:73:1e:2d:3b:8b:23:5c:7d:1d:d8:32:69:e6:5b:
         ef:d5:63:a4:49:6a:b3:27:65:92:66:e4:0a:be:3d:8e:1a:3c:
         11:2b:f2:e9:b5:8f:ba:2e:0f:74:62:da:15:bd:6f:f8:cc:7c:
         13:27:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:09:12 2025 by rpki-client