Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File:                     4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier:          wGAXk3uuSpU901j3NAsjlpM1h3L0Kb3Iu/58x8oB5N8=
Subject key identifier:   1E:12:0B:C4:0F:DB:8C:FC:DC:22:36:A1:4C:06:A1:99:E3:D6:67:D3
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer:       /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial:       1807
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number:          17CD
Signing time:             Sat 14 Jun 2025 16:31:52 +0000
Manifest this update:     Sat 14 Jun 2025 16:31:51 +0000
Manifest next update:     Sat 21 Jun 2025 16:31:51 +0000
Files and hashes:         1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: hlD1yaFrL1RIpM1Bpcq9HMVbftHYBVq+kbNNh8fdoQ0=)
                          2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: wcQu6qDmYL8RSwTWQdHq8swDuqsLZ/b+WksTXiVZeUI=)
                          3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: ukI4z4ZMWUWet1XkTlAm00Pda4+ffxxraVEq+pStj8k=)
                          4: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: mm0VJeRGh/+0foB6ENfn+0Td2KUkG+rfML9gCL5EGhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
                          rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6151 (0x1807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
        Validity
            Not Before: Jun 14 16:31:51 2025 GMT
            Not After : Jun 21 16:31:51 2025 GMT
        Subject: CN=684da3f8-2198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:46:21:b2:ce:06:5c:9e:aa:04:63:65:ae:
                    4c:a4:a7:68:75:8a:a5:43:93:bc:a9:90:a9:ad:a5:
                    55:79:bc:cc:0c:36:54:c8:36:67:b8:96:98:71:0b:
                    27:2c:4e:32:f1:2c:c8:29:94:13:e3:dd:91:d8:b6:
                    34:6c:97:f9:aa:04:d4:54:51:4f:02:08:8d:48:38:
                    eb:c4:fd:2f:85:e0:54:0a:21:14:c9:00:20:f5:20:
                    b5:03:bd:20:a0:5b:b1:9e:80:f4:45:6a:97:25:4f:
                    65:e7:43:80:7a:a5:1b:bf:45:9d:c0:a7:93:a9:f2:
                    ee:a7:e4:e8:1a:5f:da:1c:f9:30:31:a3:c0:84:01:
                    2a:27:05:a4:59:68:24:d3:fc:c3:a0:b9:bd:a2:e4:
                    a5:4a:f0:c9:76:5b:20:ad:6d:de:0e:e5:56:d5:a9:
                    4b:4a:df:ec:a5:29:92:15:9d:7c:02:18:67:c5:20:
                    13:22:bf:28:32:48:77:ca:8f:64:f0:b3:61:f8:be:
                    2d:b8:61:ef:46:e7:65:63:36:c7:c4:3e:19:d3:81:
                    07:88:0a:f3:1c:f8:36:ff:fc:eb:14:ab:e3:47:d8:
                    3d:96:de:64:89:e3:67:46:e3:02:84:7c:ff:65:41:
                    53:37:57:6d:f9:22:25:19:2c:e2:f2:0c:a1:4f:cd:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:12:0B:C4:0F:DB:8C:FC:DC:22:36:A1:4C:06:A1:99:E3:D6:67:D3
            X509v3 Authority Key Identifier:
                keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c8:46:c6:69:b6:e2:34:da:6b:24:6f:87:18:a5:2c:8e:c4:
         9e:b8:6c:cf:46:46:22:a6:e3:2c:b2:93:04:6f:84:6b:a2:2f:
         d1:b3:26:83:91:4d:6f:bc:4c:40:54:45:a1:c1:92:99:ca:c5:
         5a:cf:26:53:50:be:90:82:0b:42:28:a5:b1:da:e2:1b:30:a8:
         d3:35:6e:71:51:89:f1:30:e0:06:69:48:cb:cb:ed:18:a1:2c:
         1c:c5:1c:ac:33:52:ee:ab:33:9a:ea:0f:8b:d6:a6:8d:2a:d1:
         23:10:f3:44:95:b9:be:7c:49:05:8b:d4:ef:ec:cf:6f:b9:3c:
         16:ed:d4:87:6e:02:09:20:57:ac:7a:2b:2a:92:97:59:9a:d3:
         c4:e8:da:ec:d8:b0:da:ba:70:4e:f1:e8:a8:ef:58:a4:f8:7f:
         28:1e:28:a3:90:1f:04:7b:43:71:59:3d:1c:79:e1:a1:c2:0b:
         f1:25:c3:d6:32:7c:9e:c3:2a:99:be:50:3f:97:17:e3:6b:98:
         e2:f5:de:bc:80:35:db:50:83:5a:cf:86:da:99:9b:c9:3f:c8:
         ec:78:e1:39:c8:47:ac:b8:3b:0a:51:7f:ff:e5:e2:89:c3:43:
         86:86:2d:80:07:df:e4:de:f2:63:7d:0a:32:8a:fd:31:e5:5d:
         46:14:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:41:14 2025 by rpki-client