Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File:                     dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier:          5lr9AZtQPdll4ydcPTevIZ159inH/rRcwL2jvqgZYg8=
Subject key identifier:   3B:58:7C:45:E2:1A:D7:7F:5B:C4:9D:A5:A7:F2:78:59:87:F6:F7:91
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number:          03B3
Signing time:             Fri 13 Jun 2025 00:16:07 +0000
Manifest this update:     Fri 13 Jun 2025 00:16:07 +0000
Manifest next update:     Fri 20 Jun 2025 00:16:07 +0000
Files and hashes:         1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: ZcpyJYl7mCv1UEW+j3ljEdLld7Wb0CG7S+oBhTc4RIM=)
                          2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: qw+A+BnLOmGwGidGoi7dHOK2xbb/S+TCMScy/km8BDQ=)
                          3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: n+2sXe4f0iVt9C4wbyP1cXDc9FlPGl6NGcrzJRe+w7U=)
                          4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: u6+Gbtl2iv9JRXTumN5Ye5SMQrPpCaTXinSOYRqNVkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: Jun 13 00:16:07 2025 GMT
            Not After : Jun 20 00:16:07 2025 GMT
        Subject: CN=684b6dc7-8035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:00:38:72:e5:0d:2a:78:de:18:f7:73:77:ee:
                    55:2f:ee:b6:7c:3c:11:ad:6c:c7:5b:a6:ec:9f:6b:
                    85:84:ea:69:94:f2:26:51:d2:03:e9:a8:9d:a2:ad:
                    4d:15:bd:78:91:21:0b:35:78:ab:df:6e:3b:28:4f:
                    ef:9f:ce:46:a4:6d:f5:40:3c:4e:23:ff:e0:27:ef:
                    0e:0e:df:06:30:67:76:80:7d:89:cb:d3:e2:97:e1:
                    c0:5c:99:4a:5e:42:41:87:aa:8a:e2:6b:17:d7:9d:
                    23:93:72:a6:8b:7e:b9:6e:7d:ac:6e:09:fe:b2:03:
                    4e:d6:74:f5:b9:e1:00:d9:79:bc:34:b2:a5:44:d9:
                    34:03:cb:ee:0a:9a:09:28:87:ed:9d:46:5d:9f:a2:
                    d7:70:90:4e:dc:60:42:cd:9a:8f:ef:a7:a5:f2:81:
                    86:ad:26:bc:cb:59:fc:11:2f:a8:68:5a:86:13:30:
                    db:9b:de:24:2d:ff:0c:8e:72:2f:91:da:30:b1:61:
                    ca:93:da:08:57:92:40:16:cc:d6:10:d4:9b:d2:63:
                    d9:a0:fa:3f:15:a4:52:1a:7e:8d:86:64:c6:e2:2f:
                    9e:fd:03:1e:c3:e8:cb:2d:3d:74:62:fb:90:97:d6:
                    4f:90:e0:78:01:60:75:29:af:b1:0e:19:73:6c:8b:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:58:7C:45:E2:1A:D7:7F:5B:C4:9D:A5:A7:F2:78:59:87:F6:F7:91
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:08:3a:77:1c:85:e7:4d:e0:8f:57:57:c4:e7:54:e2:cc:
         92:fa:b4:ac:dd:cf:6a:f2:1c:d9:ce:20:e0:7f:a4:8d:5f:83:
         bf:5a:14:27:29:30:0c:4a:a3:31:11:35:36:11:45:ab:57:e3:
         d9:88:15:6e:17:a4:7f:4a:da:76:1d:30:12:53:86:89:46:c3:
         ef:ec:cd:51:d9:77:ba:16:80:81:33:61:83:87:6c:e6:67:cd:
         f3:67:83:fa:08:21:04:d1:92:7b:81:23:79:92:12:e9:f4:4f:
         30:8a:03:e0:6f:b3:80:43:11:4e:a4:b8:41:69:35:d5:f6:87:
         4a:fe:97:6a:b7:27:28:44:a7:95:06:00:62:25:53:be:96:2c:
         8c:19:fc:c6:ae:9f:6b:8d:12:ac:3c:72:d6:58:31:52:9e:b9:
         b7:9c:89:86:78:e4:34:e2:74:ec:eb:7d:30:d9:8a:81:1a:50:
         96:89:b0:81:cc:0e:3c:38:d6:37:7e:6c:47:18:1b:6c:6b:bd:
         2a:68:a0:a0:f2:3b:21:44:c7:b3:62:8c:ae:c9:1e:63:18:83:
         fc:d6:f2:0f:57:e3:f0:da:60:e9:e7:81:d7:46:14:7c:85:8e:
         f0:53:26:6e:4d:26:93:48:db:33:48:bc:76:a5:33:d4:f6:58:
         f0:68:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:30:06 2025 by rpki-client