Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File:                     RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier:          1I3w63itpW1EXxmN6IPJS0OFL64CRdADqIKJad83A6E=
Subject key identifier:   F6:8E:B4:5E:AA:94:D6:CC:D3:3E:DE:59:38:6A:46:C5:58:7D:5E:C6
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer:       /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial:       129B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number:          1294
Signing time:             Sat 14 Jun 2025 17:02:11 +0000
Manifest this update:     Sat 14 Jun 2025 17:02:11 +0000
Manifest next update:     Sat 21 Jun 2025 17:02:11 +0000
Files and hashes:         1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: QzTFrwF81NLqWyRdIiUz8tIyXW0/BdJiyLwIN6SGZIk=)
                          2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: 4z3M5HiueuxSghgC74Ahy0/LyTUAqKseWIGsOSeClyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
                          rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4763 (0x129b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
        Validity
            Not Before: Jun 14 17:02:11 2025 GMT
            Not After : Jun 21 17:02:11 2025 GMT
        Subject: CN=684dab13-1a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:04:ba:c5:c8:b7:82:99:21:ce:8e:03:eb:
                    e0:91:57:ae:2c:f6:6d:1d:4a:86:92:32:27:10:95:
                    42:82:74:11:dc:63:08:f1:0a:9d:da:23:1d:77:60:
                    57:6e:2b:10:59:d8:06:d2:af:3e:06:61:59:29:b0:
                    fa:e3:99:86:7a:86:3d:db:d1:d3:1a:c7:f1:b6:80:
                    f2:65:0a:ff:c8:b3:45:af:24:61:a4:e3:2e:57:55:
                    47:6b:98:6f:b3:07:ce:ad:23:90:e6:7c:c7:db:15:
                    ce:d5:40:a6:93:62:ed:6b:bc:e4:99:3d:be:35:35:
                    98:d9:08:f8:6c:81:aa:ed:db:5f:73:06:aa:4b:12:
                    c7:7e:37:aa:05:19:0f:0b:20:27:54:bc:73:5c:bf:
                    be:45:c8:cd:ad:3f:69:94:38:85:5f:c7:2f:78:04:
                    97:9b:25:15:4a:4e:44:da:b7:f1:d9:75:b3:c9:70:
                    91:ac:1a:72:fc:65:5b:ac:d7:42:78:7a:d2:37:58:
                    23:d7:e9:aa:77:09:d9:bf:1c:a0:6e:97:4b:c7:fb:
                    ab:e9:63:15:15:56:22:37:c7:87:71:6b:53:79:0a:
                    1a:55:c3:b6:95:33:09:d2:d3:4d:8d:5b:5f:26:cd:
                    a4:b3:c6:3e:6f:bc:46:05:9f:df:fe:db:54:de:c1:
                    75:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8E:B4:5E:AA:94:D6:CC:D3:3E:DE:59:38:6A:46:C5:58:7D:5E:C6
            X509v3 Authority Key Identifier:
                keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9f:77:d2:20:df:2b:ea:ab:6b:9b:2d:6d:77:a2:5e:ea:69:
         31:6d:89:a6:a0:68:df:2c:35:d3:a4:e7:cc:e9:c5:35:43:6e:
         37:61:0f:d9:24:f9:1b:b7:17:0f:df:fb:c1:f6:77:a5:45:18:
         94:9f:4d:2b:33:06:15:1b:5f:5a:af:28:d3:e6:3c:6b:db:43:
         c7:52:2a:ea:b8:bb:ad:6c:89:cd:af:6f:0e:22:55:b1:5e:d7:
         c1:d8:f0:5e:d0:1b:ae:86:29:52:3b:02:de:50:e8:b1:84:78:
         b1:5d:84:8c:9a:1f:69:c2:a4:36:39:21:73:44:e1:f1:5c:90:
         39:9c:3e:9d:98:e3:85:b6:11:5b:43:c5:0b:cb:6e:5c:9b:3b:
         4b:b0:cc:ac:4c:d8:73:b3:30:70:91:9a:84:f4:8a:d9:57:11:
         ce:1b:26:7d:5a:8c:f8:9a:b3:4b:25:bd:4a:10:6c:a8:23:2e:
         e2:a5:48:97:70:c1:40:16:3c:e9:8b:71:a4:23:60:ab:df:c0:
         21:83:3b:e9:21:88:c5:ce:de:89:cf:0c:e6:73:f4:4f:7f:1b:
         1d:48:fa:ac:2e:44:4a:f8:8c:37:7c:bb:07:ea:e8:bd:3f:ee:
         02:17:e6:78:38:ce:ef:a5:0f:29:81:a9:07:9a:92:3c:d0:d9:
         ca:b0:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:13 2025 by rpki-client