Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          H3tVYogbfx9BLQ82P9f8E5Gmqnw/qGgm6pN+xD6iiRQ=
Subject key identifier:   FE:DC:34:A8:7B:64:15:89:F4:7D:6E:A7:D3:A2:1A:61:0A:AE:54:CE
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          0174
Signing time:             Wed 18 Jun 2025 15:09:10 +0000
Manifest this update:     Wed 18 Jun 2025 15:09:09 +0000
Manifest next update:     Wed 25 Jun 2025 15:09:09 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: iJRwRlM1MRb1DhMketNUaP+RpEI66oix5iLkrC5Duzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 15:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Jun 18 15:09:09 2025 GMT
            Not After : Jun 25 15:09:09 2025 GMT
        Subject: CN=6852d696-9298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:fd:a8:1e:c2:73:89:a4:e0:49:07:0a:a9:
                    49:6f:c4:65:a5:2d:bb:b2:fc:7c:49:7f:80:50:34:
                    ca:82:af:88:63:e3:37:7f:df:c0:9e:46:11:5f:19:
                    02:3a:79:55:71:0a:6e:cf:36:92:96:5a:5c:cf:4c:
                    06:4b:0c:1b:36:ed:e1:8e:f3:35:00:a9:41:da:9d:
                    be:58:b6:3d:af:47:9d:29:00:27:64:93:b5:9d:6e:
                    c6:79:77:c2:e1:89:43:20:8a:be:24:47:de:84:f6:
                    64:a2:20:8c:30:9d:10:34:37:c1:38:20:1c:76:1d:
                    35:c9:71:14:49:a2:80:76:f0:c1:22:7a:d5:35:24:
                    1a:a9:f3:44:fa:51:8f:a0:ce:ae:21:02:96:5c:65:
                    fe:a0:07:05:19:95:97:14:2a:5c:1c:29:63:bf:ec:
                    04:21:b8:a3:3f:98:2c:51:a9:86:c8:b3:2a:3e:49:
                    d0:da:04:61:50:83:a1:bd:8d:b7:52:2e:04:38:2e:
                    99:cf:c1:43:7d:42:e2:4d:56:91:4c:cf:9c:f1:61:
                    a5:3f:f7:f5:28:b4:b5:9b:cc:52:ab:8f:bb:97:04:
                    82:c6:93:57:10:36:9e:12:24:5f:d9:81:eb:fa:3c:
                    74:19:66:b9:10:81:b1:2c:1a:1e:27:45:01:a6:2e:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:34:A8:7B:64:15:89:F4:7D:6E:A7:D3:A2:1A:61:0A:AE:54:CE
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:05:16:30:f7:f1:b2:98:e3:19:1f:23:8f:56:fe:87:56:d8:
         ec:3d:64:52:ef:fc:34:2a:1e:f3:ca:3f:26:8f:cb:bb:52:88:
         c7:99:65:33:9d:d3:f6:a0:08:fc:59:2e:a5:67:3c:56:9c:ef:
         3a:b5:5c:1a:c2:46:65:7f:c3:85:19:9a:10:7c:2f:b0:77:a9:
         ff:64:3a:df:1c:8d:ef:ad:20:bc:e5:43:f8:14:dc:ce:ac:96:
         08:a5:28:12:79:b0:94:f7:d8:00:73:2c:fe:96:4b:b1:88:8e:
         99:c1:d2:7a:3f:66:ce:5c:30:0a:58:f5:0c:59:4f:14:34:61:
         fd:4b:af:d8:ab:38:ca:fa:60:63:e6:ec:fa:a3:5a:af:69:d9:
         e9:ec:80:c0:27:17:4e:77:8f:58:d5:01:e3:b1:b9:52:40:92:
         8e:79:5b:0c:e9:8a:fb:c4:6c:f4:21:56:38:b5:2c:99:48:e7:
         90:66:6b:9d:db:fd:64:fc:a2:b6:8d:92:75:d1:72:5b:03:23:
         90:69:d7:e5:f9:be:ec:f8:d1:ad:fb:2e:26:20:d3:ae:f4:16:
         73:82:e3:ef:4c:5e:51:dd:94:55:99:a2:9b:e7:5a:eb:03:b2:
         6d:4e:14:6d:81:ce:2e:d0:6c:d1:bf:6a:e5:54:65:a0:0e:e4:
         21:ab:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:29:20 2025 by rpki-client