Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
File:                     1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json)
Hash identifier:          wx4uJtSQEhdPIpYgMwO9xAybMXv2MyBCowHW8ZlDNoE=
Subject key identifier:   FE:3B:F9:E0:2A:84:10:D7:1A:EA:B5:E9:83:68:C5:C7:6C:9B:D3:B0
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Certificate issuer:       /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial:       0741
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
Manifest number:          072D
Signing time:             Thu 12 Jun 2025 21:31:19 +0000
Manifest this update:     Thu 12 Jun 2025 21:31:18 +0000
Manifest next update:     Thu 19 Jun 2025 21:31:18 +0000
Files and hashes:         1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: CM79J1FC3UDEkhhqFkMGDAt1rk5BkKQIVmwqp23X+Pc=)
                          2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: U4a8o1KXqQZowZ9aJ6tXOocb6xkGyoj65dTRVzeEvrE=)
                          3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4ckscgD2BUTAR0THvAEvfsoW09ZipVLLJmm4EZ3VF2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
                          rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
        Validity
            Not Before: Jun 12 21:31:18 2025 GMT
            Not After : Jun 19 21:31:18 2025 GMT
        Subject: CN=684b4727-b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:f5:47:c1:13:0b:64:ac:c6:cf:f6:a5:25:
                    29:34:14:1c:b3:dd:5c:b4:40:7f:50:0f:64:3c:67:
                    c2:6f:27:d3:29:9e:91:60:ae:86:f9:df:2d:8c:ea:
                    fb:5d:c5:99:5c:bf:b4:fa:ad:90:47:24:cb:7d:2b:
                    e6:e1:53:6c:02:01:52:a9:33:8f:07:be:8d:71:f8:
                    19:5f:2f:54:a3:fd:58:a7:ee:c7:b7:68:34:ad:c2:
                    a1:e4:fa:de:43:7b:6c:40:13:68:c9:f6:90:2b:3e:
                    af:05:fc:59:d7:bf:e1:72:43:d8:bd:3a:2e:d2:ad:
                    6f:85:d1:90:4c:72:c6:d2:4a:b9:1f:b0:b7:0a:aa:
                    da:a3:14:a6:24:df:15:5d:ce:8e:37:2c:37:83:10:
                    dd:ac:42:13:4b:8a:4f:99:16:92:f4:fa:a5:0e:8b:
                    74:58:d4:d3:18:16:a4:5a:0e:fa:00:b8:a1:ea:a0:
                    9b:df:a1:32:35:b4:16:d7:d1:80:90:03:00:76:3b:
                    3b:6d:02:34:05:2c:dc:2d:bb:9a:60:67:b1:2b:be:
                    f2:78:08:11:3e:29:20:d8:05:be:99:76:d5:ee:57:
                    d9:ee:b1:8c:63:5f:a0:86:40:9e:11:55:b2:21:92:
                    c7:21:c8:d9:08:34:02:ad:a4:a3:c2:3b:d2:77:c6:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3B:F9:E0:2A:84:10:D7:1A:EA:B5:E9:83:68:C5:C7:6C:9B:D3:B0
            X509v3 Authority Key Identifier:
                keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:08:14:8b:50:13:42:11:c1:6a:87:7e:62:49:11:6d:17:cc:
         a4:86:99:0d:c3:ff:6b:7f:2c:f9:b1:4d:2d:ee:c3:f5:70:a9:
         96:04:e4:99:cd:62:63:2a:25:4e:09:d9:02:3d:88:9e:1d:88:
         b5:06:b8:5f:1d:ce:32:b2:a4:f7:07:63:69:fc:1c:76:49:ca:
         33:a3:57:18:c1:95:0f:8e:8c:d4:e8:e1:ba:76:02:15:74:34:
         38:f9:0a:08:a5:42:b8:1c:45:df:f9:14:72:ac:f7:31:07:7c:
         4a:a8:24:39:8a:5d:3b:74:a9:26:9e:d6:b1:8b:af:f3:6c:4a:
         31:ad:78:a3:cf:83:74:2c:d6:54:ef:b9:44:8e:a6:77:51:5f:
         a1:fb:be:ff:43:ea:45:91:23:e1:d3:f1:79:5a:64:d0:a5:93:
         24:d2:f6:7f:a1:f9:14:1b:6e:a3:4d:12:b9:b1:c3:93:bd:a3:
         5a:21:d6:6d:67:fe:7b:28:ee:69:fc:27:4f:8c:87:e9:8b:54:
         5c:80:d8:55:e0:7a:d3:e3:62:d7:02:dc:75:76:c0:8b:c1:58:
         d0:ba:07:16:21:66:4c:24:93:34:6e:17:48:a3:ab:36:96:89:
         e6:7a:b0:c0:a8:90:eb:7b:87:6c:7e:05:43:5e:af:0e:22:a5:
         55:ee:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:13:45 2025 by rpki-client