Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
File:                     RCP79BrZ8Px008FVWLjQmhZLJhs.mft (raw, json)
Hash identifier:          prEW1nP1bez2nAJJmZp8MilLzRVEPM4sn80+fRetE0I=
Subject key identifier:   90:FB:00:B5:3C:A3:B9:15:6B:62:AD:1B:C9:44:A0:35:91:62:59:F8
Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
Certificate issuer:       /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Certificate serial:       0645
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
Manifest number:          063E
Signing time:             Fri 20 Jun 2025 20:33:38 +0000
Manifest this update:     Fri 20 Jun 2025 20:33:37 +0000
Manifest next update:     Fri 27 Jun 2025 20:33:37 +0000
Files and hashes:         1: RCP79BrZ8Px008FVWLjQmhZLJhs.crl (hash: wmwYIheBqo5UbjV+5L5yUt7Ul629UYFyyuLRQIJDd6g=)
                          2: 061C3362985911EBA5F39B54C4F9AE02.roa (hash: 58ITnOEIWhsg3VC5900dxvG6wKzEJQmdtWvJjNGVUdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
        Validity
            Not Before: Jun 20 20:33:37 2025 GMT
            Not After : Jun 27 20:33:37 2025 GMT
        Subject: CN=6855c5a1-685f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:ed:1f:cc:ff:92:f5:7f:eb:60:ee:69:c1:
                    af:1d:c8:be:dd:0c:56:59:c5:fc:81:d5:75:6b:95:
                    57:e3:fe:87:75:7f:29:50:77:08:34:a1:27:24:ce:
                    b3:1b:ed:24:e4:ff:90:34:44:53:d2:07:aa:75:f7:
                    bf:b9:32:07:01:47:50:00:b3:c6:42:2f:0d:ca:37:
                    c8:06:0d:29:a6:c0:49:b5:17:81:56:d2:5e:ab:6b:
                    7e:6f:42:1c:16:d5:1c:96:f6:d1:30:56:ea:fb:19:
                    f9:ab:80:15:3f:9b:65:6c:4d:a2:3d:f6:4d:f4:e8:
                    98:86:66:06:08:ea:9e:01:71:bb:b5:55:87:b3:6a:
                    43:bb:c3:e9:47:7a:c9:31:9f:b8:72:19:0c:e0:74:
                    d2:f3:01:fd:2f:0d:fb:2e:92:bd:0e:0f:db:6b:de:
                    a0:65:09:f9:fb:e0:66:3d:f5:46:89:af:3b:8f:c8:
                    8a:52:bc:fd:94:46:2c:77:45:9e:eb:f1:2c:ca:c5:
                    cd:cf:e1:51:d3:45:83:ab:e6:81:5c:c7:36:20:c2:
                    31:5e:29:4e:c3:1b:41:cf:81:7e:60:1b:c9:10:7f:
                    3e:e6:92:e8:9f:d3:ad:6c:ef:76:97:23:c3:f7:51:
                    b0:f7:97:3d:c4:3a:70:f7:da:1c:a7:19:c7:21:d9:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FB:00:B5:3C:A3:B9:15:6B:62:AD:1B:C9:44:A0:35:91:62:59:F8
            X509v3 Authority Key Identifier:
                keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:62:fe:e6:7a:e3:40:db:43:bf:8d:b6:95:c6:8b:bf:2e:
         60:45:67:f9:03:70:5f:2d:a4:05:e2:9c:58:39:a0:05:38:87:
         b1:d1:b7:e6:04:3c:4e:bd:94:cb:f1:09:78:ea:c9:f7:9f:52:
         b3:42:27:32:9c:84:3d:6c:6c:a5:93:a8:f0:d8:b7:ad:a6:a6:
         80:40:e2:a5:96:64:b3:78:44:46:7e:36:b9:22:c8:d0:66:35:
         89:ac:34:3c:2a:bf:3d:cc:a7:97:0b:65:36:18:ff:9d:ec:57:
         95:38:ee:12:6d:14:75:08:5f:f6:7b:0d:4d:ad:9a:13:1b:e8:
         bc:e0:d0:45:f8:35:dd:f3:1b:43:92:49:c1:8d:81:a3:57:41:
         70:ea:bb:c0:d5:31:a1:ac:74:fa:08:c3:cf:62:a6:5b:25:5b:
         b7:e2:11:c6:6c:7e:4d:33:ac:be:ed:97:d6:ee:ad:9d:e9:20:
         2e:77:14:3d:f0:c4:62:2c:25:a1:f9:cf:f5:8c:39:53:ae:84:
         8f:2e:c9:c7:e1:99:44:ee:e0:42:20:d4:d4:52:ff:82:74:c5:
         cb:e1:0d:01:f1:89:b2:cf:50:1b:5d:65:85:1b:46:d0:c1:b6:
         68:1f:90:00:8c:b8:5b:2a:86:85:db:3f:48:9e:91:2d:49:e9:
         ce:42:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:59:33 2025 by rpki-client