Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
File:                     -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json)
Hash identifier:          0NW2YEllBIephZgDDZx25k3pfkT9bEywKcB8xqCswgc=
Subject key identifier:   BB:57:95:E9:CF:F9:76:8B:D3:EE:EC:11:BF:DD:87:77:97:2F:02:CD
Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
Certificate issuer:       /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
Manifest number:          01DC
Signing time:             Sun 15 Jun 2025 02:05:11 +0000
Manifest this update:     Sun 15 Jun 2025 02:05:10 +0000
Manifest next update:     Sun 22 Jun 2025 02:05:10 +0000
Files and hashes:         1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: MxgRCwAMqEYz5GjepiQbaAVrXCiIs0amA7CJcREVqR4=)
                          2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: P1cDwO0JwMVyMvSRcaDGiISLVg7IuTCLj2a8HaJzNI4=)
                          3: 69349714157D11F0876A4D62C4F9AE02.roa (hash: spR6GzQsviRpE5kB1PAg1GtPij2DNf/T1fZFU8oARv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
                          rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
        Validity
            Not Before: Jun 15 02:05:10 2025 GMT
            Not After : Jun 22 02:05:10 2025 GMT
        Subject: CN=684e2a57-dbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:9d:a0:e2:c2:28:ee:53:43:4c:9e:f1:6b:
                    c3:1f:d4:6d:33:80:b2:39:a4:23:52:48:48:1e:d5:
                    ac:39:11:ba:15:64:20:81:60:50:89:38:5f:5e:1a:
                    a6:84:bb:f5:e5:e6:d3:48:7c:1e:b9:6f:b6:e8:36:
                    95:95:04:54:ca:bb:80:1a:3c:7b:b0:f7:e9:81:f3:
                    4e:d0:e7:7e:ea:6c:55:83:56:5c:66:9d:f1:83:a3:
                    4e:01:30:75:7e:3d:fe:e0:d7:0c:ea:78:00:f7:ea:
                    03:b7:c5:cf:f8:42:eb:d8:d7:33:d8:26:15:61:86:
                    6d:a6:d8:8c:74:f5:71:de:2a:9e:c8:8c:1a:8a:7c:
                    e3:7e:34:b0:65:44:9b:ea:cc:d6:c2:47:0a:5c:47:
                    57:45:7b:6e:d1:30:6c:2a:fc:62:14:26:59:12:e1:
                    47:b9:32:40:7c:32:ba:e3:ab:21:ee:18:a6:3c:69:
                    5a:09:2b:25:02:32:42:df:86:69:8d:81:40:fd:3e:
                    20:cd:4c:3f:69:2f:03:8f:b6:b7:74:f3:7d:d4:09:
                    c3:61:29:f7:db:41:cf:73:29:15:f3:85:e1:22:76:
                    0e:70:f1:84:18:e6:6c:f7:da:72:ec:0a:c2:0e:cb:
                    78:64:03:79:20:8f:74:d1:b9:7d:6d:14:0e:67:3b:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:57:95:E9:CF:F9:76:8B:D3:EE:EC:11:BF:DD:87:77:97:2F:02:CD
            X509v3 Authority Key Identifier:
                keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:30:d3:5b:d6:0d:c5:e2:b4:86:d5:d8:c1:b8:ba:c3:fd:c7:
         61:22:8e:50:46:a3:7d:92:63:a6:53:cb:74:f8:23:4f:a3:44:
         e1:2a:4c:f3:29:27:da:10:c5:a2:58:a7:ff:d5:d6:e2:4f:ea:
         0e:4b:01:05:b3:1a:52:1b:d1:1c:41:17:d2:3c:b2:c0:c5:19:
         5c:6b:73:5b:91:e6:47:ff:49:b3:2e:17:e1:44:2c:7c:ad:4a:
         ad:fc:7b:52:5b:d9:aa:06:be:8b:4a:8d:86:ce:76:ab:5b:1d:
         bb:f3:69:8a:8b:4d:db:5e:85:c8:50:58:df:83:ef:15:e4:19:
         b3:ab:7d:0a:a9:a9:da:7b:eb:8e:e9:cf:d8:09:bb:42:b8:e9:
         23:12:6f:a6:71:7f:19:71:80:d4:53:06:7f:a3:06:df:c6:98:
         4d:88:fc:b7:24:06:f7:a1:ed:b8:04:6a:89:67:1d:f0:76:db:
         bb:4a:1a:04:ff:7b:38:79:4d:dd:d2:af:f2:3d:e3:2a:02:e4:
         67:6d:ae:b5:c3:74:d8:ef:cf:77:8d:74:19:53:5e:1f:66:8c:
         4b:fd:2e:ea:d4:dd:c9:f0:0e:76:72:ab:d7:90:38:bd:e2:34:
         a3:fe:36:a9:35:79:9d:58:6f:94:c4:37:55:3a:f7:a5:85:da:
         c8:eb:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:26 2025 by rpki-client