Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          x9c1CYiTSjLL3SBjA+hJ8KuJNJ2jvHehQ5qV2zTT/1s=
Subject key identifier:   F5:A9:65:67:04:E0:C9:36:31:9C:D9:64:C0:B1:75:1C:18:36:70:83
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       1497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          148B
Signing time:             Thu 12 Jun 2025 16:49:37 +0000
Manifest this update:     Thu 12 Jun 2025 16:49:37 +0000
Manifest next update:     Thu 19 Jun 2025 16:49:37 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: CbuB6SsJNqYMA/FNOyL/tjTYNLIxhz3YaJqAqkatUEg=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: FG61AEeBt/KwKh7Rq7GtmQk5iB1zq03M8kwTThCsmIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 16:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5271 (0x1497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: Jun 12 16:49:37 2025 GMT
            Not After : Jun 19 16:49:37 2025 GMT
        Subject: CN=684b0521-9120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:66:a1:3f:1b:36:6b:6a:c6:41:6a:d9:1e:
                    f8:0d:27:1c:ad:9b:ea:bc:67:16:3e:a3:7e:2e:9e:
                    f5:2b:e3:34:b4:b9:9f:2e:00:46:06:ff:4f:57:35:
                    b9:5f:ed:7d:b7:f4:2a:84:37:fa:8f:f5:c8:23:7e:
                    6c:5c:3c:cf:5c:48:3e:d6:98:0b:6c:b3:3b:af:f0:
                    07:d4:8d:ac:85:54:30:ab:40:fe:14:2b:93:40:b7:
                    49:17:77:c6:80:5a:53:fd:21:46:47:53:ba:c6:d9:
                    29:96:e9:31:55:59:9a:34:9e:a3:12:b6:a8:3f:5f:
                    ea:5f:91:bf:df:0b:85:6d:1b:b3:24:8a:83:1b:72:
                    11:76:b5:5b:08:d6:0b:cf:ec:9b:14:06:1f:4d:25:
                    21:16:4f:04:97:fd:fa:61:26:c3:e5:e2:9d:47:72:
                    98:78:d0:6f:7c:40:cf:d2:0e:75:91:95:e0:d5:9c:
                    59:a4:98:98:71:5f:0c:1a:e9:87:1c:5c:1a:ee:8f:
                    2a:9c:32:ca:26:4f:d4:44:8f:b9:dd:8a:d8:16:01:
                    fb:42:f4:dd:b6:60:92:91:b9:de:e7:54:66:20:bc:
                    20:3b:46:bf:3e:97:a2:4b:eb:32:5d:03:f9:b6:f1:
                    92:b5:c6:58:9e:aa:f7:7b:5e:9e:6a:f3:a1:5d:40:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:65:67:04:E0:C9:36:31:9C:D9:64:C0:B1:75:1C:18:36:70:83
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:6e:3d:18:20:6e:04:36:2c:43:ec:d1:54:d9:59:98:dd:8b:
         be:48:1d:8e:f5:0d:88:d1:80:5d:f5:71:89:ed:c6:3e:eb:08:
         80:85:bd:cf:65:cd:16:30:c6:6b:78:7a:5f:5a:e4:4f:0f:d5:
         e3:2c:60:9c:36:0c:9c:e4:9a:5d:11:9b:50:c3:90:95:f3:72:
         02:af:0f:32:91:ac:41:e3:7b:5b:2e:18:77:3d:46:b5:de:b1:
         5a:6a:b1:c7:46:8f:56:a1:a8:96:d3:c6:cb:a9:fd:95:51:90:
         f1:08:0f:0e:eb:7d:d7:55:ca:3e:0f:71:c1:22:83:95:df:1f:
         20:8a:08:f4:bf:a4:32:36:f4:4b:21:ed:e6:56:d6:d1:a9:7e:
         7f:71:76:3b:0d:5c:3a:96:19:2d:75:e5:9c:a5:a6:0c:04:a4:
         8b:1e:97:3c:3d:45:98:19:fc:42:4b:d0:e7:f8:92:eb:45:61:
         69:fe:85:22:56:a8:89:7a:98:8b:85:c2:41:ea:dd:d2:6a:ec:
         f5:39:c2:88:89:03:5a:18:3e:77:40:60:74:c0:69:9f:02:cb:
         65:3b:36:77:37:f9:5a:87:3a:59:0d:12:bd:69:a2:a8:ee:fe:
         71:e2:f6:c1:f0:4b:0b:0b:60:18:c3:93:d7:08:dd:43:67:42:
         20:23:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:12:13 2025 by rpki-client