Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
File:                     r48M-0f7_MfEkzxHPNs2RCtQUc4.mft (raw, json)
Hash identifier:          St8tFtXlSH1p6sRjB2zsK/nPwlHAE7bUB43+5dLDJS0=
Subject key identifier:   FF:BB:3F:07:99:5C:06:26:61:20:80:FE:C3:AB:39:D4:B0:D5:28:DD
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       37FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
Manifest number:          3642
Signing time:             Sat 14 Jun 2025 14:22:24 +0000
Manifest this update:     Sat 14 Jun 2025 14:22:24 +0000
Manifest next update:     Sat 21 Jun 2025 14:22:24 +0000
Files and hashes:         1: r48M-0f7_MfEkzxHPNs2RCtQUc4.crl (hash: IMBPbmktT+ork3E2YwHSCXtIBfRQo6uga9FGd8nhsHk=)
                          2: 94AE247A879B11EF9B78224EC4F9AE02.roa (hash: hv2RYqVpxuh4SK74ViwhD3t2KOzBxqukusca7dCQ3IQ=)
                          3: 1514A670A47B11E9867CBF58C4F9AE02.roa (hash: lTtCRn/BibW7ndFU9Nc5oNZEl+5Hf7PmDYXZp+Nz4tE=)
                          4: C22C630A142511F0B4847123C4F9AE02.roa (hash: wb/aJSYfXUghCBxmEbmxnEE2JyRw9wslQQme1Qx+Kdg=)
                          5: A62428E820B211F09941D114C4F9AE02.roa (hash: Qa0crR5dlgzjF3DjMjCQKjn/vjGqj044uoa40WUkRDY=)
                          6: BD30E870F62711E9AC18E63BC4F9AE02.roa (hash: 4KKDWz5BLcMHhZLwSR8R8Y4rY5GzmiGzw87NNV6QdTg=)
                          7: BC187B74F62711E9AC18E63BC4F9AE02.roa (hash: 7aAuqtC29hzav+bw8l6s+4Sz/NtX59EW2GUY8BRn6X4=)
                          8: 24AC829C476311F0970DF567C4F9AE02.roa (hash: 75se0ej2yScjzZdjrczazL2Olzuj0hWAzv6IZqIX440=)
                          9: BC94C436F62711E9AC18E63BC4F9AE02.roa (hash: zl8I1nLXVEMXy4xPxHVaxiTzKWrGzc5RbUQuJSuZOc0=)
                          10: D486345A476411F08DFC5E0CC4F9AE02.roa (hash: 9ukyifcDesxnWzKy8vTishGUROl+5D77I0CvWCv5TEA=)
                          11: CF09016006A611EAA8819441C4F9AE02.roa (hash: KHNLT838WyNkjsWq7rgOnQXbrzOIWI56kiUt7itJ3/o=)
                          12: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (hash: TyCt3u20snbUr9ZugwsDoJ78BUxe6j6OvDquQDy+bJw=)
                          13: 8513C77AF62A11E9A6941C46C4F9AE02.roa (hash: pZxpQBFGLOsvOgYSVP6xF/aBovvBxRpO/JhRK9vtHlU=)
                          14: C2C631C8A47911E99DBEDD52C4F9AE02.roa (hash: zbVd4r8+yDb5a0Mbw61ZGzSogFoSbPCNdNi83lNrSnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14334 (0x37fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Jun 14 14:22:24 2025 GMT
            Not After : Jun 21 14:22:24 2025 GMT
        Subject: CN=684d85a0-03c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:9e:ec:84:2d:04:92:4a:56:27:d6:ca:d5:
                    4e:fd:90:02:bb:e7:eb:b6:5f:42:84:9f:70:6c:b3:
                    09:1d:8e:d6:f3:21:59:67:fd:42:e0:05:34:ca:39:
                    bd:26:ae:c6:fd:ac:05:96:95:9b:89:aa:4b:3f:71:
                    c3:3a:fc:06:78:24:6e:3e:27:62:50:85:0c:39:d8:
                    0e:63:b4:07:dc:fb:c5:b0:d7:00:25:62:5c:c8:c9:
                    59:de:a0:2a:24:19:25:17:f6:14:3d:ab:d7:a9:1e:
                    95:db:d4:59:f8:13:72:0e:62:34:f3:36:5c:af:5a:
                    80:d9:5b:1a:51:43:10:cb:15:3e:00:39:74:12:fd:
                    b2:58:95:96:5b:ce:65:64:1a:c9:99:25:34:5a:f4:
                    c4:6a:f0:5f:63:58:93:5c:f5:ee:d8:8f:d6:d0:94:
                    07:bb:ac:20:f6:e5:74:4c:c3:b3:ee:40:4d:53:36:
                    19:04:a1:06:51:95:2a:87:d7:b6:d2:ab:5b:c3:23:
                    a2:2e:9c:76:a6:12:50:a0:16:c2:1d:44:4f:0a:a7:
                    8d:b4:68:ef:51:c8:e6:a7:92:2b:f5:74:63:80:d0:
                    53:5b:3d:4f:32:fd:bc:2e:3a:eb:56:98:9d:38:f8:
                    aa:39:10:81:51:a7:ad:a9:28:61:bc:f7:03:39:8f:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BB:3F:07:99:5C:06:26:61:20:80:FE:C3:AB:39:D4:B0:D5:28:DD
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2f:53:fd:61:ec:6b:60:aa:6b:64:a0:13:f2:fd:a8:58:43:
         6d:cb:4c:d1:96:43:b3:33:a5:bf:4e:e0:5e:e3:99:74:f2:81:
         92:f6:72:4e:19:9d:b1:8b:47:65:25:45:23:8a:c6:f7:bb:d6:
         6e:6d:fa:e5:c0:40:fa:8d:24:cc:07:4c:b3:8c:00:06:0e:c9:
         fe:b9:61:dc:cf:79:a4:a0:97:ef:56:ff:9c:21:8e:68:fe:e7:
         4b:51:32:dd:39:cc:06:11:34:fb:05:a4:cd:1f:de:4c:f3:e4:
         f8:7b:35:06:87:92:39:7b:16:2b:a7:04:84:36:61:6d:32:01:
         f7:81:da:b5:b8:b1:b4:ec:25:86:db:64:e0:95:a7:72:0f:4e:
         a7:3f:be:02:8a:3c:7e:7b:78:3f:f5:21:39:42:65:52:dd:a7:
         c9:af:6a:63:f1:9c:de:a4:24:95:28:a3:96:08:27:1f:4d:1f:
         00:a3:ea:86:f5:2a:8a:8b:5f:22:2d:4d:76:d5:34:35:ac:fc:
         f7:0f:3c:4d:87:a2:e4:61:ba:67:4f:7c:5a:7e:77:fd:8c:27:
         6d:2b:41:a7:4d:29:4a:15:61:ff:6b:66:5d:5c:d7:22:38:12:
         c2:d7:51:2d:50:84:b3:bf:95:d3:9d:98:21:38:4c:a4:cb:f9:
         79:bc:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:34:46 2025 by rpki-client