Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File:                     j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier:          C6tnHhcRSATbRqyRBJBbtSxEuJbD/nq8vMaCEzxxqk0=
Subject key identifier:   EC:12:6A:74:FF:81:1B:D8:F1:5F:DE:EC:72:7C:D3:A6:19:06:A1:55
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer:       /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number:          0175
Signing time:             Fri 13 Jun 2025 02:48:28 +0000
Manifest this update:     Fri 13 Jun 2025 02:48:28 +0000
Manifest next update:     Fri 20 Jun 2025 02:48:28 +0000
Files and hashes:         1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: JJEwCn8kB7ri666O6w+e1iDz2yKfbNQTNJ4YJssyeMw=)
                          2: 87695D32591811EE973B1058C4F9AE02.roa (hash: dzvekpBIKEZcV3J3iTc2a3q9pWoOoEEAik7qmwT7yrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
                          rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
        Validity
            Not Before: Jun 13 02:48:28 2025 GMT
            Not After : Jun 20 02:48:28 2025 GMT
        Subject: CN=684b917c-1920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:c9:d0:23:6e:24:50:02:e7:36:fd:b6:d3:
                    7e:2b:41:6c:b2:a7:27:82:3a:a1:14:c7:6b:27:20:
                    7a:b2:10:57:fb:8e:2c:77:67:4b:a4:25:d4:bb:03:
                    98:7e:c7:5c:71:86:c3:be:35:10:89:16:81:1b:88:
                    39:98:57:5e:f6:de:c6:b1:10:4c:b7:05:e7:9f:bf:
                    2d:f5:84:ee:eb:1a:12:0d:62:6b:e6:70:cc:27:eb:
                    1c:0b:c5:dc:90:28:7a:91:1c:a1:51:11:29:0a:18:
                    32:cc:73:f8:f4:da:38:35:c4:24:b8:4d:0e:c7:2b:
                    c2:a3:b4:3e:cb:fc:bb:68:54:00:60:01:0f:c2:02:
                    2f:2c:3c:d7:6b:3c:4c:36:4d:08:28:bd:9a:76:07:
                    9a:b4:aa:80:91:27:ee:4d:62:79:7e:9e:00:ed:6d:
                    4c:56:ce:71:18:fe:10:2c:26:9b:6b:d5:2a:03:22:
                    13:47:14:eb:33:77:25:bb:0f:44:98:72:62:51:de:
                    67:8b:a5:d6:8b:b9:72:15:a8:0c:ed:93:99:e4:8d:
                    30:d9:4e:4f:38:66:07:b4:2d:37:63:4f:77:61:46:
                    e1:9f:8a:75:78:b5:78:e6:73:42:ad:77:f1:f5:c3:
                    ae:f5:97:66:20:49:dc:41:42:a1:6b:d5:9f:ed:1c:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:12:6A:74:FF:81:1B:D8:F1:5F:DE:EC:72:7C:D3:A6:19:06:A1:55
            X509v3 Authority Key Identifier:
                keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7e:a9:b8:b7:a7:52:a6:d9:41:b2:07:20:a8:ca:2f:43:dc:
         09:a8:ff:66:6e:cc:1b:2d:5d:cf:60:f8:75:e8:b6:6a:fe:cf:
         a2:68:1a:47:62:5f:36:69:51:15:be:dd:09:c4:47:c4:a4:66:
         62:d0:5e:04:f2:85:41:3d:af:29:26:1f:41:12:0a:e5:06:91:
         7f:ec:f5:e5:fb:70:2b:bb:ab:58:02:af:26:e0:75:f3:e6:55:
         75:05:3b:dd:68:9f:dc:b1:ac:9d:47:e9:e1:10:fb:c1:2c:ed:
         4f:e2:55:1d:2e:a1:45:5c:e9:2e:82:e5:85:0a:e7:81:31:f1:
         c2:f6:56:42:06:ef:d9:2c:20:e5:85:b0:bc:dd:91:24:60:32:
         4d:8e:fd:93:39:fc:21:7d:66:15:6d:35:4d:bd:21:a8:0a:2b:
         a0:3c:86:c4:96:c8:c3:5b:98:a6:99:ea:fa:ca:44:ff:7c:2e:
         0a:fa:8a:a3:9e:32:92:28:db:63:f8:67:9f:07:0b:a4:ad:ea:
         1d:6a:39:70:f7:63:7a:47:6b:bd:96:5f:dc:85:6d:f8:44:f8:
         ca:da:f8:c9:ca:54:06:da:3f:93:07:2a:8d:90:86:9d:40:b1:
         21:4b:ea:e6:d7:1a:00:49:7f:47:80:b3:42:c6:80:26:da:41:
         72:e0:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:46:56 2025 by rpki-client