Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File:                     if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier:          3V+zVFGbcM9FUyMEc9NGFDOLnDLBmX20Wa6eWeHjxG0=
Subject key identifier:   8D:CE:60:C0:92:0C:B8:37:9E:17:DB:81:D4:5B:FE:9D:32:1B:E5:90
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer:       /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial:       34AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number:          3499
Signing time:             Sat 14 Jun 2025 15:04:15 +0000
Manifest this update:     Sat 14 Jun 2025 15:04:14 +0000
Manifest next update:     Sat 21 Jun 2025 15:04:14 +0000
Files and hashes:         1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: 9jjF9Gndc5di4vrikmWLVwJZfctSxTn0EgJFVozHs7U=)
                          2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: zDQWuqCZIhUi8QY/I4kch58V8XHnqGl1lQQctTfprP4=)
                          3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: l8ghcFMDKwWn7mEoy2VKp7tzKqBu2ry3hOlnwXhnj7Q=)
                          4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 4Cfi8enYLubX2wFBBV7Fm3xiJ/Lbq6nGpawgJqzCyB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
                          rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13483 (0x34ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
        Validity
            Not Before: Jun 14 15:04:14 2025 GMT
            Not After : Jun 21 15:04:14 2025 GMT
        Subject: CN=684d8f6e-8ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:e1:83:b7:ac:58:70:d6:81:9c:f7:62:2a:
                    a3:e4:0e:34:fc:22:c0:66:a0:9d:45:37:51:90:26:
                    ac:2b:7c:eb:8f:2d:dd:20:7e:d6:2d:0e:fc:74:55:
                    40:07:9d:7e:d3:f0:7a:25:44:fc:9c:a8:58:27:ee:
                    e5:2d:de:7f:9b:3a:16:45:50:ed:db:34:d4:d2:c3:
                    57:a2:53:15:4a:3d:56:fe:ff:22:e9:dc:ab:c2:7a:
                    71:5a:7d:8c:56:db:32:33:74:c4:55:37:e5:0f:16:
                    d4:b6:11:18:72:a7:98:47:fd:3a:66:b7:e7:3e:96:
                    d5:7b:7f:c3:5c:69:8c:ab:60:33:8a:f2:d5:35:67:
                    5b:25:06:14:a7:b5:d3:eb:0a:f6:7c:48:f6:83:0c:
                    b6:86:f6:45:3f:73:1c:f4:a4:72:b9:9f:d6:3d:d1:
                    20:4c:23:fb:22:c4:5e:90:00:a0:51:d0:2a:1c:cd:
                    fb:eb:ff:bf:ce:36:50:42:b4:08:b5:3d:81:42:34:
                    52:90:cb:4b:fb:f5:4b:2f:67:61:c4:4e:9d:ad:77:
                    58:d3:cd:ae:e1:56:2f:09:6c:3c:57:e9:0b:0f:ed:
                    d7:04:ec:82:f5:aa:4c:df:9e:74:cc:77:54:44:29:
                    b6:37:05:fc:55:0a:79:78:61:ad:2f:42:8d:99:66:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CE:60:C0:92:0C:B8:37:9E:17:DB:81:D4:5B:FE:9D:32:1B:E5:90
            X509v3 Authority Key Identifier:
                keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c0:13:af:ec:b7:ce:6f:56:01:fa:66:6a:8b:74:07:ab:ba:
         55:81:b1:88:a4:d4:7c:25:f4:e2:89:9e:95:41:46:63:8d:8b:
         fa:84:d6:f3:7f:54:43:6f:ec:af:db:b4:00:4a:67:3d:35:8d:
         9e:43:d5:0f:01:82:8d:ec:d0:33:d8:cb:f5:a1:36:15:ff:21:
         7c:eb:ea:f2:ed:13:07:d9:6e:98:65:d9:e2:b6:74:55:d0:d0:
         16:cd:4b:47:b6:d7:f2:c4:41:13:71:de:d0:f1:b6:4e:d5:84:
         ad:4a:80:82:f8:34:15:ec:7f:6f:9f:cb:5b:78:4c:e5:8b:30:
         22:60:e4:61:10:34:ce:ad:6d:3c:17:d7:c5:11:63:46:de:1b:
         c0:75:cf:c0:57:b4:1f:01:ae:b1:f1:76:6c:ba:ee:57:19:67:
         0d:41:ab:4f:2d:79:42:26:45:d1:66:a8:df:e4:1c:81:50:4e:
         4a:3a:51:1f:47:28:3c:e7:52:c5:62:be:c8:7b:06:db:f1:7b:
         75:d5:88:90:3e:55:cd:75:ba:b9:96:37:cc:ac:57:64:87:66:
         b7:e7:de:53:31:24:48:69:73:da:1e:d1:9a:1d:29:a1:33:d7:
         e2:e3:ba:51:be:f8:c9:47:49:00:5f:74:51:67:cb:a7:c9:c5:
         5d:d2:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:46:02 2025 by rpki-client