Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
File:                     xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json)
Hash identifier:          IffdiyZcrT7cmRx9j63gDSPYhbL8AwjxcnrYUTigfUU=
Subject key identifier:   0B:DD:92:2A:B7:AF:B6:C2:93:D1:E1:DE:F9:68:90:50:E8:BD:C7:3A
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Certificate issuer:       /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial:       06DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
Manifest number:          06D9
Signing time:             Sat 14 Jun 2025 21:46:41 +0000
Manifest this update:     Sat 14 Jun 2025 21:46:41 +0000
Manifest next update:     Sat 21 Jun 2025 21:46:41 +0000
Files and hashes:         1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: pamDjmCm+WZTIhve8YUVstjX9HibQutg7Ku8dLvNjyU=)
                          2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: +cH8RmJhdymM82G2tjdg2T5wIUQwcB/rD1A615a7HRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
        Validity
            Not Before: Jun 14 21:46:41 2025 GMT
            Not After : Jun 21 21:46:41 2025 GMT
        Subject: CN=684dedc1-dc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:ef:bb:ca:be:5e:d1:05:16:9c:cf:92:ee:
                    bc:0b:78:19:53:82:42:fc:21:20:0b:98:a0:1b:0a:
                    49:ab:0e:57:16:ef:e6:1f:bb:dd:a5:36:71:66:71:
                    d1:55:15:88:d5:fb:87:b4:de:af:85:3f:c9:45:0e:
                    fc:21:e0:58:9e:38:b5:67:8f:63:70:46:ae:67:db:
                    eb:25:0a:40:ba:89:48:2f:b6:81:47:98:cb:25:a6:
                    c2:5c:f7:fe:f6:67:f5:4c:ba:95:0d:8c:74:be:67:
                    9d:01:5c:e7:b1:e8:f4:e6:75:2f:90:42:77:11:a9:
                    cd:6f:65:7c:48:0e:fa:24:b9:c7:0d:60:b5:4e:ec:
                    91:af:3d:21:da:9b:f2:e6:cf:40:2a:d1:01:0c:dc:
                    f9:d9:29:45:d0:b8:fa:96:1f:2b:68:23:e6:21:70:
                    e6:34:92:7c:25:b1:ff:b9:03:1d:1f:c3:af:a1:9d:
                    3f:a4:50:59:c1:83:88:c2:98:bc:bc:27:fc:a2:38:
                    8c:c5:d0:24:41:a7:d0:36:2f:6e:f1:25:59:6f:5a:
                    d2:11:c1:ba:8e:bc:b0:99:d6:cd:bc:25:62:9e:c4:
                    e9:a0:1a:83:0b:0f:99:4b:49:d8:e2:52:73:c5:8e:
                    c8:d9:7b:72:8c:25:9b:cf:f0:62:56:c1:71:11:59:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:92:2A:B7:AF:B6:C2:93:D1:E1:DE:F9:68:90:50:E8:BD:C7:3A
            X509v3 Authority Key Identifier:
                keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8f:ae:ae:7f:52:ed:f0:68:da:25:61:37:96:a6:b8:aa:51:
         02:eb:e9:87:d0:1b:3e:d8:22:9b:5f:48:f2:f0:5b:57:39:da:
         cc:22:4f:13:7d:9c:aa:e9:e1:fc:5e:84:0d:9d:3f:9f:fc:80:
         f8:95:36:78:93:02:ee:3a:f8:d6:99:27:5e:94:c3:aa:03:27:
         c8:07:c9:b4:c0:e3:8a:79:f0:d1:f7:54:14:70:34:45:52:65:
         14:e3:f9:4c:94:04:6b:83:f9:f7:78:4b:6f:5f:fe:2c:5d:35:
         4f:6b:f5:0b:55:20:7c:63:98:85:db:d9:06:7e:54:48:91:4b:
         6e:5b:36:59:5b:4b:52:2e:70:37:d2:2d:86:de:0a:c1:cb:4b:
         31:57:33:3f:4e:1c:2a:69:7f:dd:ea:14:f5:da:56:0d:46:66:
         44:82:01:b0:11:4e:7d:0c:52:a0:b0:22:3e:06:48:4a:8d:01:
         33:87:68:77:1e:16:46:66:aa:57:eb:8d:09:fb:77:37:c6:1d:
         a2:d0:19:44:50:67:1b:77:85:dc:8d:df:8c:93:be:5b:31:38:
         8a:59:71:be:b8:ae:a5:58:96:28:82:09:da:a3:69:0a:46:e5:
         b7:e9:d7:75:57:8e:d2:45:f8:d0:d8:57:7a:62:dd:d3:72:f7:
         a5:b4:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:34:10 2025 by rpki-client