Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
File:                     lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json)
Hash identifier:          yIbfMgYaIwNZPyUpxxk26shZZcu60tqwKXCRp6VvGjc=
Subject key identifier:   33:C7:44:E6:EB:6E:5A:B8:F6:AB:F6:60:49:BE:3A:DF:29:51:63:24
Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B
Certificate issuer:       /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
Certificate serial:       048F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
Manifest number:          048A
Signing time:             Sat 14 Jun 2025 23:46:22 +0000
Manifest this update:     Sat 14 Jun 2025 23:46:21 +0000
Manifest next update:     Sat 21 Jun 2025 23:46:21 +0000
Files and hashes:         1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: qbRQGjhLq4lPMW841757nFU0bIeZ3ThQBx5BQANncnI=)
                          2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: pWVT/yLPwS8QXceP4ztZ/aw/Myzun+GPcuksVrgOEUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl
                          rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
        Validity
            Not Before: Jun 14 23:46:21 2025 GMT
            Not After : Jun 21 23:46:21 2025 GMT
        Subject: CN=684e09cd-e39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:17:fa:21:a1:0e:fa:ec:6a:c8:1f:a7:e8:
                    50:7e:77:93:c9:10:2b:78:54:f9:1b:25:dd:22:5f:
                    dd:a4:eb:60:ec:48:35:55:5c:74:56:47:59:53:56:
                    41:51:4b:d7:ef:f7:0c:ce:a6:b1:14:c8:e2:b3:6b:
                    c3:6e:a5:eb:5b:15:0f:14:1b:ae:16:8e:eb:4e:86:
                    b3:58:bd:b4:00:8b:90:f6:96:73:a6:81:51:79:bc:
                    83:31:02:e2:94:84:1f:f8:8c:af:f3:23:9e:6b:94:
                    13:5c:af:a4:d8:88:56:f5:36:65:70:ed:ff:a6:f6:
                    f8:5f:96:56:d4:94:a3:e3:ba:f3:f2:d1:10:9f:a2:
                    cf:cc:9f:97:28:57:41:8d:88:f4:9b:28:3a:e0:17:
                    07:42:99:1a:7f:6f:9c:16:a9:de:d2:4f:34:4a:d0:
                    f1:8e:dd:47:c2:47:dc:2d:b0:49:54:d8:30:19:7a:
                    96:95:4b:cb:ce:b9:57:eb:11:f7:c6:b0:a8:fd:9c:
                    64:f2:65:18:05:23:82:05:d2:d7:9b:0f:96:8c:b2:
                    a1:9f:32:b4:8c:0d:b4:ab:38:c8:63:dc:35:96:8e:
                    9f:dd:75:40:b0:83:dd:49:59:7d:8a:31:63:27:82:
                    a2:89:50:7e:0e:8f:3e:60:93:d0:bb:16:49:b6:a3:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:44:E6:EB:6E:5A:B8:F6:AB:F6:60:49:BE:3A:DF:29:51:63:24
            X509v3 Authority Key Identifier:
                keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:dd:32:e0:36:c4:13:33:0c:ad:92:99:39:21:2e:cc:18:a6:
         5a:e2:26:a3:dc:53:2d:f4:35:32:27:90:85:b1:5d:9b:29:94:
         09:f3:a7:3a:76:38:51:ab:5c:e4:c7:79:50:3c:66:5d:14:07:
         e0:df:b6:50:7e:ea:53:ec:44:5c:b4:28:1a:c3:65:1b:f9:cc:
         3c:b8:9c:d4:2b:46:a0:2a:41:9a:8e:4e:d5:52:0d:26:02:47:
         90:77:47:f7:99:97:0f:17:92:5b:e0:a1:91:d4:39:d4:ad:22:
         b5:cb:d1:6f:1e:4c:ec:26:ad:ad:4f:cb:cc:54:8c:50:a3:a9:
         9e:47:66:73:33:59:45:1f:f2:67:93:fa:85:cc:2a:a0:62:0c:
         7c:c4:59:6a:cb:73:43:46:24:66:31:72:2e:45:82:17:48:8b:
         af:55:3d:d1:f0:8f:f9:67:0c:b0:e4:f7:d2:ad:5b:23:e3:ae:
         34:e1:c2:a3:ca:9b:7b:7f:4c:21:34:54:32:2c:95:e0:d9:69:
         a3:14:d5:48:04:04:f6:e0:52:fd:ef:0c:d7:5a:dd:09:3b:2d:
         ee:09:0b:c2:03:7d:f6:94:eb:7d:f6:11:3c:66:69:f1:7b:e9:
         94:32:7d:61:61:42:d1:b3:50:da:c9:67:44:f0:bc:6f:42:4e:
         c8:5e:a4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:23:09 2025 by rpki-client