Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File:                     cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier:          5oBnhKUdhb1LBGerydGmnYBmrHdm99AwSKKgTM21mfI=
Subject key identifier:   BE:3B:78:FB:49:7A:B7:3F:63:34:09:D4:B3:73:2E:63:BE:70:C9:3A
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number:          013F
Signing time:             Fri 13 Jun 2025 03:23:24 +0000
Manifest this update:     Fri 13 Jun 2025 03:23:24 +0000
Manifest next update:     Fri 20 Jun 2025 03:23:23 +0000
Files and hashes:         1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: UkV4/cg19PajLcpSMp1c84ncEsbSYk5TsXbW6ydHKqc=)
                          2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: YwXGuIwLbAOZzPiPRemoc11a6IYzMpgzJQrMI7kN5fw=)
                          3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: NFu6vOIdrlQETQmdi2ziHOwoF9spOq/YA6DUc9jHTPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Jun 13 03:23:24 2025 GMT
            Not After : Jun 20 03:23:23 2025 GMT
        Subject: CN=684b99ac-e544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:06:18:41:67:8c:41:1c:c2:9f:27:f3:92:
                    54:5a:9b:63:f5:85:45:0f:dd:16:7b:d5:7a:b7:87:
                    7a:aa:2f:a3:3a:46:22:74:ad:71:7d:6d:fd:01:be:
                    54:74:f7:69:32:be:28:ab:76:7e:10:47:7f:db:87:
                    38:2d:75:62:2a:a7:73:7b:d0:47:e8:0c:c5:97:94:
                    14:62:35:5d:09:f0:e6:9e:1c:8f:f8:04:36:c6:fa:
                    41:f2:3c:20:a8:2b:34:7e:83:90:21:cc:95:e7:50:
                    c4:22:a3:7c:ee:11:96:ee:ef:95:fb:56:c6:5f:60:
                    bd:44:ed:a9:43:ff:ee:a0:29:ff:f6:0f:1c:49:8c:
                    b4:1e:fb:d6:f3:af:97:78:ce:34:dc:17:e1:db:cb:
                    68:b3:d2:ac:39:a7:d7:27:84:b6:cc:07:3a:1a:26:
                    83:a1:c2:75:52:03:f3:f1:c3:54:d7:e0:ce:b4:00:
                    61:b3:4e:db:ae:66:96:53:2f:7d:b7:c5:a7:26:bc:
                    4e:c3:62:ef:18:c0:9f:4f:50:01:a5:84:c4:45:8e:
                    16:b5:87:43:5b:be:01:49:a1:94:78:5a:6e:61:20:
                    41:9a:a3:4d:5b:a0:16:10:6a:48:56:9d:cb:cc:17:
                    55:d3:eb:ee:bd:aa:45:88:4d:bb:fb:07:0e:6c:a1:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3B:78:FB:49:7A:B7:3F:63:34:09:D4:B3:73:2E:63:BE:70:C9:3A
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1f:c7:b6:46:60:cb:cb:02:86:57:a9:c5:d2:7b:d3:0a:91:
         9a:e7:d1:bc:53:35:f6:94:43:12:64:06:85:5c:65:dc:26:1e:
         3c:27:f3:23:c7:4e:52:be:3e:34:f7:5c:ef:5b:cf:66:96:ad:
         82:8e:6e:8d:17:e7:44:f5:1d:fc:2f:0c:e8:3b:3d:91:4f:ee:
         fd:38:99:5e:c4:5d:3e:9d:14:ad:81:ef:2f:7b:92:2f:35:75:
         40:45:d0:54:38:7e:38:24:d6:10:61:1c:ef:1d:e3:d7:67:b7:
         bf:29:51:02:44:bc:02:82:33:3c:9d:42:4c:f3:ca:43:e7:2b:
         08:25:d9:0e:0e:1c:e4:d9:11:02:ff:37:af:86:c6:9a:41:5e:
         e9:58:97:a2:98:85:e6:04:72:e4:9b:91:b1:26:ef:88:9d:cb:
         c9:7c:c0:67:fe:13:a0:e7:01:ea:32:99:e7:11:29:d3:42:fa:
         cf:02:21:b8:1e:73:ef:7f:ac:23:14:96:b8:d5:bb:af:a8:ab:
         b1:be:3e:6d:aa:a0:95:03:83:bf:18:f3:58:4a:6a:57:16:ef:
         90:24:fe:90:1f:0c:43:5e:85:41:0c:2d:9c:ba:b9:73:0b:7e:
         ae:b4:8c:4f:6d:98:66:53:27:e3:4a:83:96:51:d6:07:81:dd:
         77:d4:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:41:15 2025 by rpki-client