Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File:                     Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier:          7Is49vGyiDQBoz5cExYk/p/vasYL8aEIIGxxfhpZf18=
Subject key identifier:   2F:79:94:67:E4:75:79:EB:A2:23:8E:AF:4A:5B:9F:E3:1D:E5:5C:0F
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2C0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number:          2BEC
Signing time:             Sat 14 Jun 2025 15:31:11 +0000
Manifest this update:     Sat 14 Jun 2025 15:31:11 +0000
Manifest next update:     Sat 21 Jun 2025 15:31:11 +0000
Files and hashes:         1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: aJGr+1dj77zUDyLdHIHQ2kGAYaZMl9qTBmEOoF4nmhM=)
                          2: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: T0b8C7d4bWsc3EyPhNVtAAt07MQZYtmIX9CE+cnW0sk=)
                          3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: JeRljMwzQH3/92nSWVH5RymJInEM50zHuR37MlUO73U=)
                          4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: wKTcwQ/I5JRFgJ3BEd5QarAu/YHgWoWcx44Njrdtc4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11278 (0x2c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Jun 14 15:31:11 2025 GMT
            Not After : Jun 21 15:31:11 2025 GMT
        Subject: CN=684d95bf-7bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:86:a4:ef:38:2f:a8:44:21:de:87:82:e1:
                    f0:34:b0:19:cb:54:8d:3c:65:38:97:f6:93:9b:b4:
                    8a:7f:26:d7:bb:e6:8a:fd:9b:1d:57:d7:82:b5:7b:
                    7f:00:57:ea:ef:43:db:4e:68:47:a6:ab:56:0c:64:
                    8d:3a:6a:b5:00:e1:93:df:a8:bb:13:5c:32:54:dc:
                    b9:90:61:41:ef:b3:6c:b7:59:45:76:41:40:6b:7f:
                    ed:8b:e9:99:2e:48:eb:40:ab:d2:ca:de:ca:33:b7:
                    38:b7:ae:49:c4:d1:11:b6:96:77:93:b3:f0:da:a2:
                    d5:6e:c4:4d:29:e5:33:a6:58:5f:5f:11:a4:80:09:
                    81:07:41:f7:ab:ae:6d:0d:e3:93:a4:9d:d0:cc:95:
                    7a:0c:7a:d9:be:64:19:a3:3e:61:55:e3:1e:2f:be:
                    12:09:6c:69:de:b2:1f:5b:9a:b3:19:3d:b0:b5:a5:
                    45:82:b0:c8:3a:f2:d2:80:dc:59:82:15:10:7b:90:
                    e3:dc:d3:04:59:18:5d:b4:ef:a3:60:a5:0a:0d:a4:
                    17:9d:2a:f6:ac:3a:54:8b:65:f5:02:48:bb:ab:cf:
                    1f:02:40:7d:74:b4:8c:0c:1a:e3:54:ce:5f:41:63:
                    c5:3e:d3:ef:74:ec:d0:b8:0b:9d:5b:c1:b5:35:9d:
                    62:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:79:94:67:E4:75:79:EB:A2:23:8E:AF:4A:5B:9F:E3:1D:E5:5C:0F
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:5a:9d:77:26:05:c6:11:d4:6e:a8:5e:7f:42:91:4a:c0:
         80:1d:64:6b:32:da:27:9a:09:30:d2:d1:46:f1:ce:86:09:2e:
         27:15:3e:d2:cc:54:ff:a9:cd:6e:b2:48:22:3a:cd:a7:bc:35:
         49:38:b7:5a:89:53:bb:09:fa:fd:a8:00:9b:f6:c3:a5:b9:9d:
         cf:96:c4:d5:9b:0c:9e:fd:8e:9b:5b:d2:9b:f8:ec:b0:29:24:
         18:61:3d:25:83:c8:97:bc:57:eb:d0:76:4b:7a:65:23:5a:9e:
         65:3f:7b:bc:b9:d5:19:54:66:fd:79:6f:3c:7a:11:29:b0:9f:
         8b:4d:c6:4c:31:e3:09:82:62:d0:f1:05:f3:67:9a:8d:b3:e1:
         bd:1e:cb:ef:1d:e4:5b:7b:7e:71:bf:e1:33:ad:68:28:6e:6e:
         01:4f:f6:b6:49:1b:2a:3f:72:3b:8b:b5:ce:8f:85:82:3b:8e:
         cc:24:11:61:12:0d:5d:95:97:7b:7a:68:66:df:6c:d2:ed:a2:
         98:54:eb:df:f7:97:8e:c1:b7:45:6a:59:aa:59:9b:cc:f0:eb:
         9f:f9:ae:24:1d:ba:28:f2:2e:af:2e:a5:bf:0c:a0:c7:2d:91:
         e9:83:86:4f:32:1b:66:47:c8:6e:98:59:07:c1:5d:05:d3:e3:
         70:06:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:37:51 2025 by rpki-client