Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File:                     KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier:          eoCPoqB9xQ62Vrdpxz0VD6GP4TJYlSJImw46Kt1VYqc=
Subject key identifier:   60:5C:F1:0B:17:18:C7:84:52:54:F5:A0:4F:87:DF:09:B9:F1:89:7F
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer:       /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial:       02E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number:          02D6
Signing time:             Fri 13 Jun 2025 00:52:45 +0000
Manifest this update:     Fri 13 Jun 2025 00:52:45 +0000
Manifest next update:     Fri 20 Jun 2025 00:52:45 +0000
Files and hashes:         1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: S0cg4LilQ4DyZqUu6ZYX3X5S46/6hZMWIOjDlBDoDY0=)
                          2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: 3t64o2UXNsxTNPIx1fcvAHHTrkMYu5vuFZ50YkMkLZI=)
                          3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: HZusuoH1up8FDoOQyhT/1qoC+ff/aBBAonRcZ28YjMI=)
                          4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Eku/YHWxKxpsRX6ogTNh3LDNRp5rXVLPBXYqCNfR56g=)
                          5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 3ncZT46pze+jMf4M4LYzFO82k2evN1uShAP1OkhdIKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
                          rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
        Validity
            Not Before: Jun 13 00:52:45 2025 GMT
            Not After : Jun 20 00:52:45 2025 GMT
        Subject: CN=684b765d-75c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:12:f2:63:aa:03:d4:d1:7a:ba:43:fa:47:c5:
                    6b:b4:97:03:91:f8:2b:81:c5:f6:37:73:15:98:41:
                    d7:af:21:45:c1:43:ae:cb:a9:94:21:a7:15:cf:ad:
                    00:c3:0b:b3:2f:2e:40:ba:16:71:60:90:7f:ba:b6:
                    13:c6:07:7b:1c:f1:85:fa:e8:24:09:91:41:bf:87:
                    99:74:2e:5b:75:e0:83:fa:bc:f3:d4:0b:3b:ad:fa:
                    c2:1e:bb:97:e4:07:30:9a:a1:48:91:61:00:c4:61:
                    2d:07:7a:9f:97:e6:3a:90:eb:39:67:1f:5c:53:4a:
                    56:7f:1c:91:4b:42:1a:16:86:bd:30:d0:53:f5:de:
                    1a:da:fc:f4:b1:d8:fd:ea:5d:44:17:5c:b6:a8:57:
                    bf:05:0a:c6:d3:fe:1a:e2:4d:db:d5:f3:dd:3a:25:
                    60:ca:b3:34:fb:b8:c2:0e:5f:31:87:92:19:de:83:
                    29:07:7a:04:82:b3:3b:60:10:86:27:0d:dc:ee:bc:
                    89:a8:7f:e7:4e:64:14:63:ef:16:b1:3f:01:3a:cf:
                    f8:9d:a5:1f:65:2b:7b:52:21:c9:a5:2c:03:f4:ef:
                    69:e8:ef:15:af:32:e4:d3:71:f6:f9:52:f9:6d:13:
                    40:18:d1:37:6d:74:13:90:7f:d1:35:b6:bb:46:04:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5C:F1:0B:17:18:C7:84:52:54:F5:A0:4F:87:DF:09:B9:F1:89:7F
            X509v3 Authority Key Identifier:
                keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:76:2e:56:90:0e:28:91:2c:2c:59:bf:f8:46:7f:ff:ac:
         af:3d:fa:7d:6f:48:fa:d3:61:bf:cb:62:a9:d8:1d:39:3e:3e:
         e4:85:49:2e:5d:e8:38:f3:ec:92:fa:c6:37:d7:76:4f:3d:67:
         ad:6e:d0:6d:7b:91:ff:c9:0e:80:f5:cd:0e:34:45:28:be:04:
         06:27:f5:13:82:60:4e:17:48:70:48:8c:ac:74:27:46:81:0d:
         46:0b:15:71:cd:df:74:eb:f3:8e:3b:08:06:83:9e:7e:41:65:
         6e:04:7e:20:5f:27:16:09:e1:3d:1a:fd:e4:81:82:fa:eb:1c:
         74:5a:08:b4:e6:8f:98:97:bd:16:87:58:9d:63:f9:76:8c:be:
         34:3d:0e:20:95:7a:34:48:a6:13:ad:84:3e:a1:48:32:42:32:
         45:54:d0:88:01:73:29:01:ca:06:a0:46:48:a0:86:69:4f:38:
         3f:aa:87:22:85:9f:00:07:30:3c:4f:b1:f0:ce:4e:db:8c:b3:
         3d:5f:6b:23:08:01:ba:cf:c0:26:cb:60:df:42:7f:7d:c8:23:
         ac:85:65:02:bd:0c:f9:60:66:9e:bf:cb:df:e8:01:f3:ac:93:
         2e:b0:84:dc:29:6f:bc:a2:12:50:e1:48:05:da:70:16:61:f4:
         11:58:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:39:18 2025 by rpki-client