Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File:                     N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier:          cUNV/1ccLrP4QeS/Jg++3iVnpQwcWF/BH6gdGtT2Y/0=
Subject key identifier:   4C:8E:95:BC:51:94:41:4F:15:EA:FA:04:89:C1:A8:C4:60:4F:1D:44
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer:       /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial:       03B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number:          03A8
Signing time:             Fri 13 Jun 2025 00:18:23 +0000
Manifest this update:     Fri 13 Jun 2025 00:18:22 +0000
Manifest next update:     Fri 20 Jun 2025 00:18:22 +0000
Files and hashes:         1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: u7s2vsue83S6hwHw1O6TS2V+Lrd7FGVVNyrbR/fJ0UI=)
                          2: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: BrxJSBI7Q6Tw0excD7qGChxBI2yuS7vr/0+QLL4MRIg=)
                          3: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: MnBCnb88Lb1soYhMr2JBZDZOHnyxIxINjkfdJ2fBlW0=)
                          4: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: f8XNdnN9MpGjh5uhvA20BgKfLLbWC1Eb3g7qFqX+uVY=)
                          5: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: qYKHA79o/QNNLBRngvTLprJN4A1dHBhKA8ix5QbqNOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
                          rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
        Validity
            Not Before: Jun 13 00:18:22 2025 GMT
            Not After : Jun 20 00:18:22 2025 GMT
        Subject: CN=684b6e4f-e19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:fc:e0:fb:d8:bd:59:c5:27:43:a1:62:41:
                    38:d7:e5:ce:67:0c:8c:27:d8:5a:b9:23:ca:88:e7:
                    7d:86:f1:35:c4:e4:e8:d2:32:50:f8:8d:b0:2c:91:
                    f3:3c:09:c2:fa:11:ea:ac:6f:b9:a4:82:32:93:27:
                    54:a5:54:27:e3:46:c5:92:09:d2:42:7a:68:79:da:
                    0e:10:2e:dc:79:5f:57:60:c0:98:88:8b:8c:67:79:
                    fb:80:d6:d6:88:4e:59:40:e8:ad:64:54:0c:d4:19:
                    32:96:f0:05:10:a2:87:d4:86:14:b5:fe:23:93:53:
                    7f:a3:fe:70:95:5f:7a:87:61:07:2a:c2:dc:3f:79:
                    1c:be:df:17:d1:f7:00:35:ae:cc:28:78:c4:e6:dc:
                    da:98:35:05:2b:c0:07:74:89:9a:c9:64:1c:e8:39:
                    d5:20:2d:50:d9:e2:78:1b:96:72:0a:e9:8a:14:33:
                    bc:14:4b:c0:3a:00:a1:6e:6b:82:6f:46:90:26:c8:
                    61:80:b3:f4:a4:a0:80:6a:19:1a:54:b6:36:2a:14:
                    db:b8:34:04:38:b4:41:b8:d9:28:ac:84:b8:25:21:
                    49:28:55:ff:0c:a3:2c:fd:0c:01:9a:47:16:7d:d1:
                    7b:10:6d:f9:ee:39:88:c2:e6:aa:ca:58:71:1e:68:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:95:BC:51:94:41:4F:15:EA:FA:04:89:C1:A8:C4:60:4F:1D:44
            X509v3 Authority Key Identifier:
                keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:43:0f:45:6f:48:93:bb:42:cd:97:e7:6f:61:f3:24:35:
         d8:4f:7d:c1:d4:6c:22:45:4d:39:7d:22:3d:17:d6:c5:19:db:
         2c:31:66:87:c6:44:e1:3b:d7:3e:50:dd:f9:29:7f:b6:96:19:
         65:39:e5:75:3b:4d:f2:a3:85:bc:4a:52:97:63:12:e3:71:71:
         09:f5:a1:d5:84:f5:b3:53:56:c0:d8:8e:0a:aa:9a:96:0a:b4:
         e1:de:d6:c5:57:89:de:f1:b0:f9:b3:da:d5:49:17:9b:68:5c:
         8e:6b:df:b3:20:98:41:b8:06:89:d6:ad:63:d3:7a:d4:5d:f0:
         d9:a2:5f:6a:63:f9:45:d3:a8:bd:bf:5b:c2:a7:10:25:d5:a1:
         5d:5a:b1:21:7b:43:d8:20:11:b6:c9:a5:e0:fb:f0:b8:6d:2e:
         7c:53:c7:63:6a:a1:92:d5:4f:44:da:6c:4d:76:7c:aa:01:83:
         8d:20:70:ac:7e:e7:ee:f2:00:e2:d2:f5:1c:2e:36:78:25:cd:
         ce:39:79:95:28:2a:50:8e:fe:3c:d9:ee:4b:b8:9f:bc:b0:73:
         8a:07:bd:75:68:4e:d5:09:d4:12:90:5c:21:d6:a0:c4:6f:67:
         29:15:45:50:c7:d1:fe:c4:ee:56:1c:ee:7c:5f:fb:24:4d:b4:
         c6:80:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:48:08 2025 by rpki-client