Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          HnZkJ5DyNISojttGFqjW4uNHc6r4+tiZHv1SMe2OCz0=
Subject key identifier:   A8:79:B6:88:3A:AF:B6:7A:B8:8C:6F:6F:6E:42:B9:81:17:16:B9:6D
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       3510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          34D2
Signing time:             Sat 14 Jun 2025 14:39:55 +0000
Manifest this update:     Sat 14 Jun 2025 14:39:55 +0000
Manifest next update:     Sat 21 Jun 2025 14:39:55 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: Na0tKFZv21LcvXUbv2JWw7+5YYnChFRIFOKPQnxB7Qc=)
                          2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=)
                          3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=)
                          4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=)
                          5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13584 (0x3510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Jun 14 14:39:55 2025 GMT
            Not After : Jun 21 14:39:55 2025 GMT
        Subject: CN=684d89bb-14e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f9:90:de:7d:40:9a:b1:06:ad:85:82:8b:8a:
                    a9:e2:36:f4:64:2c:75:ca:48:40:f9:dd:03:69:6f:
                    f5:f9:91:fe:ba:9a:40:0d:67:e7:1b:15:66:25:88:
                    2c:5b:35:77:e8:1b:ed:27:1f:88:7c:d9:e4:af:4a:
                    bd:a5:e3:6a:de:de:b8:84:ca:be:99:a4:32:bc:92:
                    a3:60:34:c8:22:05:2f:e8:d3:34:07:d3:b4:92:70:
                    e4:ad:f9:a9:e7:e9:5b:b0:a5:cc:e6:85:96:7a:20:
                    2e:68:c2:8c:6e:01:28:6d:42:72:52:76:d5:73:bb:
                    b8:7a:57:01:18:f8:33:d3:d3:1c:ee:3d:b4:8d:68:
                    a1:de:c8:de:7f:9d:84:12:0b:5e:d2:cc:7c:0e:12:
                    97:a9:6d:44:90:5a:f9:98:01:dc:c1:2e:26:d3:40:
                    02:e7:c3:81:20:8e:d7:d7:82:d1:25:8b:04:a6:9f:
                    b6:75:7e:12:ab:fa:c1:13:f9:ca:b9:df:a6:0e:5d:
                    de:d6:9c:1f:25:47:ce:39:cf:bc:40:1c:79:b1:e6:
                    52:68:ed:b5:c7:57:90:5f:e4:8d:46:a9:56:ac:12:
                    e6:b4:23:0d:db:52:fa:3a:c3:be:2d:8d:d9:a0:9b:
                    0f:ca:8c:b1:58:cc:c9:20:9b:27:47:67:89:39:71:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:79:B6:88:3A:AF:B6:7A:B8:8C:6F:6F:6E:42:B9:81:17:16:B9:6D
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a3:68:5e:b1:c3:ed:0f:0a:b6:12:20:60:20:6e:f5:4b:7d:
         4d:d0:49:60:d3:92:ed:77:89:34:40:e4:e6:e0:0f:68:b2:93:
         a8:91:9a:3d:68:46:86:dd:c8:1c:c2:e4:42:67:d2:6e:b0:0c:
         f9:c9:a9:36:c7:9d:68:93:7a:fc:20:98:cb:68:15:7a:61:43:
         8b:69:05:bf:1e:56:2a:84:d5:fe:1a:b7:d8:6d:44:66:31:2a:
         13:69:2f:92:3d:d1:c2:12:1f:5e:dd:3d:d5:ba:8e:66:8f:cf:
         89:0d:4a:63:3c:a2:f8:f9:53:8b:95:82:29:75:d9:d0:22:e6:
         8d:d3:22:83:f3:8f:f3:50:ca:ca:83:5a:e1:63:20:13:57:88:
         35:2a:6e:b5:af:86:d3:dc:a6:d2:9e:84:99:9f:cb:7a:b5:89:
         07:e0:d3:4c:4f:2e:a5:d6:91:7a:11:01:e3:6d:2e:af:f5:4f:
         c0:d4:ab:f7:c4:8a:ce:48:7f:83:e7:38:f0:71:5b:e6:e3:6f:
         78:52:9c:86:22:18:1e:5f:1a:4c:52:2f:5f:ee:b1:db:a1:f4:
         cf:fe:5c:0a:70:89:50:87:42:f4:a1:c5:11:d2:f4:14:02:64:
         f6:c5:5a:29:7e:40:9b:11:bd:9c:b6:8d:46:48:42:07:d3:18:
         e4:50:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:31:33 2025 by rpki-client