Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File:                     AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier:          iDZSB7edu+mOj1hBi0h1UhQUR71avMN5KsUusA5sk6A=
Subject key identifier:   F6:E3:78:A8:E3:0D:95:F1:E2:C9:BB:24:05:55:DA:F0:02:49:C2:D2
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer:       /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial:       0B59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number:          0B50
Signing time:             Sat 14 Jun 2025 18:57:22 +0000
Manifest this update:     Sat 14 Jun 2025 18:57:22 +0000
Manifest next update:     Sat 21 Jun 2025 18:57:22 +0000
Files and hashes:         1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: 7+53W1yeaLFbzGh6Kp+jvZnNzGT+ZWNXcLPPRBekSCs=)
                          2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: KCGgayyIaV9bw3+jN02UdfN4476+RHEdK89wpH03TIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
                          rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2905 (0xb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
        Validity
            Not Before: Jun 14 18:57:22 2025 GMT
            Not After : Jun 21 18:57:22 2025 GMT
        Subject: CN=684dc612-cf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:1b:dc:af:ac:e8:f6:e6:ae:f7:a6:fd:aa:
                    70:de:4a:af:bd:3c:c6:2f:b7:f7:d5:82:ae:b4:2c:
                    5a:82:fa:2c:6e:83:5c:79:d4:13:77:b6:cd:69:7f:
                    0c:29:e0:32:c5:23:24:dd:7d:6e:f0:db:b2:48:6f:
                    26:00:7f:90:4f:79:85:09:3f:c8:24:d7:73:a5:37:
                    99:c5:e4:40:e4:be:b1:67:1a:b6:ff:72:8f:a0:52:
                    6f:f3:2f:48:53:33:6d:24:19:a3:c4:78:ba:fa:5a:
                    a7:ca:4e:c2:6c:04:68:ad:aa:69:ab:15:16:2f:ac:
                    85:0d:05:c5:96:01:8c:30:52:6e:f2:ce:de:ed:c5:
                    0e:f0:2c:dc:c2:6f:8e:85:c1:3d:ff:72:f8:b7:30:
                    cd:3b:92:e4:20:ff:f9:e0:60:66:88:ae:aa:40:e8:
                    74:30:dd:b0:01:cf:c7:8b:ec:88:58:19:12:50:61:
                    69:ce:74:72:38:46:6b:65:71:72:7d:4b:81:0f:8d:
                    03:8e:f2:6f:62:9e:c8:77:e9:c6:0e:49:4b:be:98:
                    9b:cb:40:46:a4:0d:ae:f6:93:e8:b1:63:f9:af:03:
                    e6:10:9d:ca:f0:2c:22:76:ca:7a:e5:1b:2f:b6:a7:
                    82:4a:71:54:f6:23:d0:3b:4c:76:47:09:43:a1:01:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E3:78:A8:E3:0D:95:F1:E2:C9:BB:24:05:55:DA:F0:02:49:C2:D2
            X509v3 Authority Key Identifier:
                keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:70:9c:b8:d6:eb:e6:9c:2e:30:79:0d:8b:11:aa:82:48:fc:
         69:77:f8:57:37:ce:b3:4e:1a:71:04:e8:15:f6:51:74:02:b2:
         a0:33:66:70:7a:d8:3f:15:27:ca:e5:81:1e:e1:aa:44:da:06:
         b8:2d:cc:16:27:9c:7a:9a:85:8f:a2:a6:9b:d2:9b:74:b0:29:
         8e:16:ee:17:50:55:a3:63:c9:fc:5a:82:88:0b:53:ad:84:72:
         fd:17:50:a1:7d:af:c3:66:38:2c:79:93:13:4b:d8:96:5c:5e:
         c4:d3:70:4b:db:cd:6c:6d:7d:7e:b7:99:e3:0d:27:90:88:ef:
         2a:bc:4c:f7:1b:c5:68:f8:76:05:ae:d2:60:03:28:3b:49:3d:
         50:d3:b9:6c:f7:4f:55:1e:17:0b:d7:8b:52:3e:e0:de:aa:b7:
         79:66:ef:81:25:50:ba:00:b4:6c:7e:25:d2:60:91:16:aa:f5:
         b1:b6:0b:01:d4:24:64:17:78:51:13:3a:6a:ee:09:1a:37:9b:
         68:98:eb:5e:26:3d:7f:56:d9:d4:d6:cf:c9:f8:18:3d:17:cb:
         a0:dd:cd:5c:28:77:26:d3:c6:ee:bd:be:3b:a6:59:c2:d0:0c:
         df:bb:9b:37:01:c4:db:62:21:fc:c0:6f:bd:3f:38:b5:4d:bf:
         3a:02:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:37:35 2025 by rpki-client