Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          XRdoTWRtegJmP55HFY7tqobPNgw9ckWTiGst4RExfWM=
Subject key identifier:   7A:27:8F:A7:C4:8E:5D:54:8F:18:4E:CB:07:53:7D:16:F6:78:BA:08
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          0172
Signing time:             Thu 19 Jun 2025 03:14:34 +0000
Manifest this update:     Thu 19 Jun 2025 03:14:34 +0000
Manifest next update:     Thu 26 Jun 2025 03:14:34 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: AOB/mUvU6pkZA+EX8gl3F01bduEQfMbc7gztpeapyrY=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
                          4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 03:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Jun 19 03:14:34 2025 GMT
            Not After : Jun 26 03:14:34 2025 GMT
        Subject: CN=6853809a-12a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:fa:6e:60:d9:a7:4f:f6:72:cb:71:63:cb:
                    d4:5a:d6:2f:e9:3d:c7:d8:05:7f:27:93:6c:05:fc:
                    94:28:35:dc:02:44:c0:2c:d6:7b:eb:36:f9:26:f4:
                    ba:7b:3a:c4:31:c3:00:10:01:fd:34:e0:33:5b:ac:
                    cb:61:48:c5:1a:99:88:c5:c4:c1:b8:a6:25:ca:bb:
                    3b:58:63:84:db:21:bf:8a:ae:0f:93:b4:72:63:a5:
                    68:8b:89:18:75:dc:db:21:6e:33:c4:e7:c2:a3:9e:
                    fd:15:b3:c3:91:f5:a2:64:88:87:54:24:a0:05:e2:
                    82:a4:cb:e5:36:64:e9:b3:45:fb:13:62:08:3b:ea:
                    c6:5b:94:a2:44:b1:96:6f:fd:0a:ad:07:46:8c:99:
                    41:e0:d2:35:f1:b6:80:c7:80:39:04:03:9f:1f:b6:
                    37:61:15:4a:3e:2e:90:e6:d4:72:57:f8:16:30:25:
                    63:7b:a8:83:f5:21:0a:99:59:b4:11:c5:0d:15:92:
                    75:23:2e:f2:ff:9f:d8:71:ed:96:f2:96:a7:e9:3f:
                    a9:6c:68:5e:a1:d0:e9:cb:c3:8d:8b:28:63:57:ab:
                    7d:4d:56:ba:8e:c4:50:84:ca:a3:62:a8:40:0b:4e:
                    27:14:2a:98:cd:0c:6b:dd:fb:2a:18:c3:74:00:d8:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:27:8F:A7:C4:8E:5D:54:8F:18:4E:CB:07:53:7D:16:F6:78:BA:08
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:d7:2e:6c:9b:5c:77:17:7b:4e:5d:16:a5:39:4e:34:59:
         c8:9f:18:b5:45:a6:01:87:3b:5c:79:6a:c1:cb:2b:31:8c:33:
         d2:2e:1a:f3:d4:de:44:a2:19:0e:87:fd:9f:ed:a0:7a:65:c3:
         9a:be:f5:2e:fe:e0:c8:e0:5b:8d:51:42:fc:58:20:68:18:8d:
         62:b6:a8:d2:b6:e8:87:95:9d:63:2b:82:dd:33:a5:fc:30:4e:
         9f:d8:3e:cb:fc:15:5d:7e:5e:7a:e7:d0:94:08:f2:b1:bc:c0:
         b1:64:0c:36:87:17:47:dc:a5:5e:66:35:30:d1:b5:4b:32:65:
         91:37:5f:5f:09:6e:54:39:f4:de:17:6b:18:de:cc:c9:c6:ed:
         d8:43:d1:80:b4:4e:39:f9:66:08:24:3e:ac:ce:2f:67:81:02:
         c4:19:8e:97:6f:69:4f:fc:63:cf:e8:40:51:4e:4f:be:fb:e6:
         04:4f:18:a3:d3:d6:e3:48:da:00:9e:a3:71:b4:7f:4b:56:ed:
         ab:56:a1:ce:ae:e5:4c:53:7a:72:0e:56:72:c0:b8:7f:a4:32:
         29:45:5f:4a:fd:6a:78:d9:f0:7d:a3:f6:a6:56:e3:a5:a7:31:
         b3:d0:e7:49:f5:5f:65:97:c4:a7:0f:17:02:f7:6b:eb:19:6d:
         44:dc:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:24:54 2025 by rpki-client