Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File:                     4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier:          7Fk4Ezjs3P50ayfRjDHBpMuVCunHDX247OABG2HIptY=
Subject key identifier:   0A:49:7C:C6:1F:7C:4F:D1:6D:F4:C0:EA:A4:C0:26:AB:EB:40:73:9C
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer:       /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number:          0101
Signing time:             Sun 15 Jun 2025 04:15:27 +0000
Manifest this update:     Sun 15 Jun 2025 04:15:26 +0000
Manifest next update:     Sun 22 Jun 2025 04:15:26 +0000
Files and hashes:         1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: qtxonsIUM1Uc94bVxtpsmvfcbrEhdSF4eDO1g7o7PCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
        Validity
            Not Before: Jun 15 04:15:26 2025 GMT
            Not After : Jun 22 04:15:26 2025 GMT
        Subject: CN=684e48de-cc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:77:91:d0:6e:4e:0a:7b:62:a4:9f:89:d6:
                    11:9a:77:66:db:e9:6a:95:79:89:f0:c0:f9:2f:5e:
                    c3:5a:73:53:e3:61:cb:be:8f:78:c4:15:be:82:05:
                    8c:07:78:78:00:16:31:64:c4:c0:20:85:93:68:07:
                    d0:36:05:ea:ed:c6:29:f7:10:5b:5d:1c:9e:ff:1e:
                    bf:cc:51:07:07:55:a0:36:a2:06:20:3e:ef:6e:b0:
                    20:e2:35:a3:42:a8:b0:f5:48:5e:da:43:ef:f5:a6:
                    1e:88:52:71:68:2f:2f:29:3c:11:23:f4:38:1b:5a:
                    8f:92:f4:2e:45:90:cc:66:92:ca:df:88:ae:55:b1:
                    19:1a:98:63:b0:ff:5e:7c:89:50:dd:a0:d1:58:1c:
                    fc:a7:81:70:97:44:9b:62:6e:4e:fa:a7:f1:ae:72:
                    99:b1:91:50:29:48:3c:8c:95:68:62:52:33:56:bf:
                    a5:ee:79:a3:51:61:8d:5e:9a:96:0f:8b:f8:b9:5c:
                    e2:6b:57:73:a6:7c:30:9b:26:82:8e:be:15:9b:7b:
                    09:18:e2:ac:d8:59:14:e7:86:4b:79:c2:ee:8b:34:
                    f4:f3:c1:93:b9:d8:5e:48:91:dd:d0:6c:3c:e6:f0:
                    f3:7c:9c:cc:c2:0d:74:da:14:44:77:d9:cc:17:7e:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:7C:C6:1F:7C:4F:D1:6D:F4:C0:EA:A4:C0:26:AB:EB:40:73:9C
            X509v3 Authority Key Identifier:
                keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:f4:d5:98:0a:93:c7:b6:84:2e:aa:46:96:77:75:c0:a7:
         6d:28:85:8c:3f:17:91:3d:37:42:ea:ee:3c:a1:44:99:9a:18:
         3d:27:b8:93:e5:a8:ca:07:f3:c4:7a:b7:46:74:d2:59:52:a9:
         2b:04:4c:3d:08:e9:bb:38:60:fa:45:67:0e:af:f5:9d:02:6f:
         d9:26:de:da:a3:af:ce:96:af:93:e5:0e:d5:75:f3:43:44:1c:
         08:b5:19:5a:d4:c7:40:b6:16:5c:98:2f:a6:13:c0:a8:73:c4:
         ed:d5:ea:e9:f1:d4:ad:c8:73:35:4f:91:fb:b3:b1:3b:17:e7:
         18:d3:10:8e:b5:70:49:7e:6a:82:5b:6c:da:91:2e:ef:ea:69:
         15:76:51:0f:dc:e8:96:e3:bf:0a:dc:44:9f:2d:a0:00:f0:ce:
         da:73:d4:fb:64:fe:c6:16:39:29:8d:bf:0c:df:70:5b:aa:0a:
         29:eb:ce:13:29:3c:d9:e8:7b:4b:cf:96:00:26:2c:96:be:88:
         4b:0f:ff:84:e9:ee:d1:3c:9e:a2:c3:43:22:43:23:f5:b6:6f:
         cf:52:ee:58:e1:eb:80:9e:aa:d5:67:2b:f8:c4:28:e6:d3:9d:
         fc:c3:f2:6e:72:18:52:dd:1c:7e:21:06:6f:a0:22:7b:06:b2:
         22:ad:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:06:18 2025 by rpki-client