Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
File:                     a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json)
Hash identifier:          729xeQVmVhXw3Y+jniFc36r84up0h7KVV9Q07uIgnOw=
Subject key identifier:   E1:1C:22:7A:59:70:A2:F7:89:FB:07:2C:19:E5:C5:43:17:5A:F6:E0
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Certificate issuer:       /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
Manifest number:          01D9
Signing time:             Thu 19 Jun 2025 02:19:52 +0000
Manifest this update:     Thu 19 Jun 2025 02:19:51 +0000
Manifest next update:     Thu 26 Jun 2025 02:19:51 +0000
Files and hashes:         1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: z3DxI9A0i1o0dgEuePdhl4VKJOiCy2CC49yA0aaL9gk=)
                          2: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: vKLf2rHEIG3SZoTwG/5Mh6FH3VoQv1z4rOoGSmOI4Fs=)
                          3: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: h/qcaSqjY8kiFIGM/MMPsHobkpAe/EdAmdDLkkpjgjM=)
                          4: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: LcCehnLIRoCgjwwcDQ7TUr2n1e7iAgFU0iCoo79xeiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
        Validity
            Not Before: Jun 19 02:19:51 2025 GMT
            Not After : Jun 26 02:19:51 2025 GMT
        Subject: CN=685373c8-45a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:74:2b:d8:0a:2e:14:43:ca:2f:35:af:04:66:
                    c1:bb:97:ae:ef:23:83:d9:85:da:08:d5:20:d7:c3:
                    95:5c:1f:ea:69:25:a2:ce:72:ba:c3:8d:68:e4:8c:
                    aa:94:c5:0a:4c:2d:36:32:bd:7b:27:47:48:53:db:
                    b5:40:d2:11:27:85:7a:9d:01:b4:9b:65:81:dd:0d:
                    50:56:79:55:78:76:a6:61:d3:4a:5b:6f:a9:18:07:
                    de:c6:62:ac:0c:78:1c:db:05:fc:f6:e0:d5:f2:be:
                    5c:73:f0:ca:bc:cc:65:cb:04:4a:65:7f:be:f6:58:
                    69:69:01:93:c5:b5:eb:36:5b:12:9b:4d:fb:4d:26:
                    3f:88:a0:48:85:cd:de:8b:1f:c7:27:b1:70:65:65:
                    c9:bf:c9:9b:8d:84:7a:81:7f:4b:68:a2:f5:f3:cc:
                    9f:60:7e:4f:a7:52:39:2a:f9:64:ea:9a:a3:0f:11:
                    98:7c:5f:6a:71:a8:1f:b7:9b:d5:6a:c4:d7:ff:4d:
                    7e:81:4f:a1:e8:28:33:e4:c6:5b:0b:5b:94:79:67:
                    da:f7:dc:61:af:f9:9f:dd:3f:c7:19:a3:5d:e8:56:
                    e8:86:c2:6e:98:7c:13:fb:6d:d4:5e:b5:48:4a:c3:
                    a2:41:f3:24:2f:e9:3b:a6:60:f3:23:a3:a3:cb:44:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:22:7A:59:70:A2:F7:89:FB:07:2C:19:E5:C5:43:17:5A:F6:E0
            X509v3 Authority Key Identifier:
                keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:3c:78:c9:02:28:5e:d1:ca:78:38:3a:9a:bd:a0:02:ff:70:
         05:31:65:51:a0:af:cd:a9:9d:96:37:21:14:36:23:7c:ea:2e:
         ff:08:0a:99:f3:5c:27:91:9f:95:c1:50:25:a5:66:17:30:9f:
         63:90:c1:b4:97:12:5b:44:1f:18:e0:0a:33:3b:4d:e8:d8:de:
         64:c7:36:43:59:08:11:6a:c7:87:92:49:6c:c7:d0:b6:7b:8a:
         da:70:f8:63:b1:7d:fc:8b:c9:4a:d2:3a:38:88:31:35:b0:4e:
         08:da:0d:22:64:d7:ee:8e:9a:ac:2c:74:d2:2e:3b:18:d7:2c:
         6e:50:7d:57:94:c0:a4:ff:db:b4:b9:e4:b0:40:de:2a:22:33:
         3c:63:32:b4:b6:73:e1:32:73:dc:e4:29:b2:a1:6c:c6:b0:cd:
         fb:25:ec:16:08:5f:fb:29:23:14:6b:41:ac:5c:9d:d1:27:e9:
         17:ac:61:a0:79:20:26:4a:c1:d4:79:c3:21:bd:41:6f:4a:61:
         ec:24:b6:89:29:76:68:d9:ee:2e:31:e9:e5:14:b2:3a:73:54:
         3c:a9:e6:ad:a9:9a:b0:a3:21:18:c1:38:d6:31:32:38:a3:b3:
         1e:c8:fb:2d:25:6e:7e:1c:b6:4e:eb:c6:c9:c1:93:60:f8:73:
         4f:7a:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:17:30 2025 by rpki-client