Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File:                     rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier:          VrUlhA1Sf3CJSDFrBuw/ucDaZcjMfmGSqsmy08UeDKQ=
Subject key identifier:   B2:89:49:A7:41:CF:27:36:37:E1:F9:30:3D:3A:DB:8D:37:F5:AB:AF
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number:          07C4
Signing time:             Sat 14 Jun 2025 20:53:35 +0000
Manifest this update:     Sat 14 Jun 2025 20:53:34 +0000
Manifest next update:     Sat 21 Jun 2025 20:53:34 +0000
Files and hashes:         1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: a9EFdM2RCIb2dMynfgnJ+2+Dm2Nx9l6e+4qhElN+Rf0=)
                          2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: Jun 14 20:53:34 2025 GMT
            Not After : Jun 21 20:53:34 2025 GMT
        Subject: CN=684de14f-e68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:da:c4:76:db:d5:97:a8:8a:1f:cd:9c:cc:
                    5e:e2:08:38:4e:3c:ec:94:e6:18:1d:f0:86:f0:9f:
                    a1:84:df:12:5a:1e:61:a6:d2:21:21:5c:21:d2:a2:
                    d3:3d:0d:48:7c:ae:23:93:62:27:c3:4a:fc:db:e3:
                    f3:89:65:41:1d:cf:f4:d3:a7:ec:70:4c:43:fe:06:
                    5c:46:4f:51:29:84:4f:17:c0:95:9f:d6:0d:fc:c1:
                    e5:3c:aa:cb:ae:fe:61:69:eb:b7:27:a1:5f:38:c5:
                    82:e6:0c:eb:61:9d:7f:5f:d4:0f:85:a5:39:5a:99:
                    d0:f7:f1:b1:0f:c3:8b:df:64:bb:9f:ff:e3:6f:60:
                    e3:ba:27:5f:26:e5:fe:87:c0:39:98:0d:1b:13:6a:
                    2d:08:22:4e:13:2c:6a:ad:cf:ca:fd:aa:5c:60:d3:
                    fd:e9:88:20:1c:f9:6c:b5:71:99:cd:82:83:60:1a:
                    8e:c3:c8:68:81:82:83:c6:ca:69:ab:ec:73:7a:78:
                    b1:83:14:7b:1e:ec:33:90:5a:77:d5:fe:f0:6c:98:
                    62:f4:23:ac:e5:7f:19:2a:3b:07:a6:d1:53:65:d8:
                    67:cd:19:99:be:64:cb:b0:7c:80:9f:85:92:42:e5:
                    7c:c5:8f:3d:b3:83:e4:91:b8:88:27:e3:ba:15:08:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:89:49:A7:41:CF:27:36:37:E1:F9:30:3D:3A:DB:8D:37:F5:AB:AF
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:21:4c:38:87:63:52:f1:08:ca:a8:44:95:97:f6:ef:0f:80:
         bb:29:dc:a5:19:25:d2:92:c6:da:73:ae:0c:b3:46:a8:e8:09:
         2f:f4:5b:98:82:3c:ef:d6:36:90:ce:ea:38:5a:88:6e:6c:d4:
         4d:4a:0d:d3:db:42:5f:44:ab:5a:eb:d0:c2:87:f1:56:68:83:
         a3:0d:b1:6f:44:5a:89:bd:58:4a:74:f0:e2:58:05:17:99:33:
         1f:56:b3:25:a8:88:fd:ee:39:28:00:ad:cc:ba:88:35:e5:80:
         9a:2e:a4:1a:b9:41:96:70:4b:fe:e8:33:34:f3:d6:61:2e:8d:
         6b:55:eb:08:16:40:4b:02:58:d1:a1:d5:65:e2:fb:08:29:50:
         7d:8a:92:55:59:82:fa:3c:84:b8:a7:ea:71:c2:23:43:8a:2c:
         06:0d:cc:8b:3d:c0:20:a3:b2:17:56:25:36:be:8d:21:69:e5:
         74:6b:54:62:3a:0c:41:cd:37:00:8b:4f:71:db:fe:31:1c:b2:
         37:57:88:01:9b:6f:2d:13:b8:80:3e:bb:a5:ca:6d:50:f5:3e:
         b0:72:9c:d0:3a:f8:36:ed:2b:f2:37:ca:09:d8:71:30:11:5f:
         de:ea:26:f8:b0:6a:83:88:a7:d7:ea:2a:a4:f2:c0:43:f8:7b:
         b4:46:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:43:44 2025 by rpki-client