Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
File:                     81jWhVW6te9ipNz9TzJANe5gJLY.mft (raw, json)
Hash identifier:          DMMx3D39LhYega2zY5e1zIb3s1rBw+VO2oN+VMIqVtw=
Subject key identifier:   FB:CD:A3:99:61:6A:68:8F:70:D2:B0:64:91:F0:8A:AA:37:9E:E7:4A
Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
Certificate issuer:       /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
Manifest number:          31
Signing time:             Fri 13 Jun 2025 06:37:45 +0000
Manifest this update:     Fri 13 Jun 2025 06:37:44 +0000
Manifest next update:     Fri 20 Jun 2025 06:37:44 +0000
Files and hashes:         1: 81jWhVW6te9ipNz9TzJANe5gJLY.crl (hash: OYmqQPATuhTbPTNqCg4eiK3jOIxnP4AfmGjNdBjLOnI=)
                          2: 39E77242050B11F097AB4F3BC4F9AE02.roa (hash: PDiocTjJKaFu9YNf5gjKMiNkfOKqtTVuKhZKfr9ypcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl
                          rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
        Validity
            Not Before: Jun 13 06:37:44 2025 GMT
            Not After : Jun 20 06:37:44 2025 GMT
        Subject: CN=684bc738-40f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:08:e6:df:49:74:b5:a4:fd:7b:7b:ca:49:
                    2d:f8:01:69:64:04:03:5e:8d:e8:46:d9:df:f7:f3:
                    94:4e:08:1a:df:0d:d6:1f:28:49:57:4d:93:87:92:
                    bb:95:05:47:ee:83:cd:c0:a6:89:89:a0:ea:53:f0:
                    ad:3f:10:ef:d4:cf:88:71:92:7d:f6:d9:09:07:39:
                    97:a6:a8:f2:c1:9c:2c:48:cc:8d:2d:a3:55:ae:40:
                    4f:23:58:1f:66:d2:f0:81:f6:a2:7b:83:b4:63:0a:
                    0e:45:4e:9e:d6:43:a4:c1:33:cc:89:17:56:04:89:
                    2f:6f:7b:34:10:59:11:3a:2d:a2:74:9f:ab:e6:8b:
                    a5:2f:6b:92:7e:91:f0:d5:88:7c:40:d9:be:a2:4c:
                    c5:87:fa:0b:5f:82:ea:45:a0:72:65:dc:3e:69:df:
                    c2:84:e6:92:6a:c0:a3:66:9c:87:49:19:c1:61:13:
                    ad:b1:40:34:a5:9c:f3:88:85:f3:59:e9:73:3a:be:
                    16:c4:ae:43:cd:cf:b0:25:b4:96:dd:ed:44:96:c7:
                    de:65:9a:bb:e5:ca:bd:4e:1d:4a:b4:ea:59:69:ae:
                    38:0e:f8:a4:80:15:cc:99:b7:af:a0:76:37:cb:70:
                    cb:f2:b5:1c:64:e3:28:19:50:01:6a:ee:1b:c5:ce:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CD:A3:99:61:6A:68:8F:70:D2:B0:64:91:F0:8A:AA:37:9E:E7:4A
            X509v3 Authority Key Identifier:
                keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f8:d4:fa:6c:73:f4:b7:2d:87:03:a5:55:4e:06:2a:09:f3:
         f4:41:7a:eb:d7:2f:d2:70:4a:15:52:ad:09:dc:05:fd:b5:2c:
         fa:31:a1:ae:db:eb:41:c3:13:a7:8a:a9:62:79:f0:7f:c3:c2:
         68:bb:ab:a7:ab:08:12:ac:b9:31:58:78:33:4b:65:66:bc:76:
         c5:64:d9:33:46:97:7e:7d:49:96:44:21:17:c6:59:81:c6:24:
         e2:24:53:6c:65:da:59:c1:7c:dd:ca:16:b3:33:a4:be:8c:d9:
         be:5c:ae:59:78:19:5c:92:79:a8:74:6e:a1:28:99:c0:04:30:
         c0:55:65:21:4f:71:02:52:ab:07:6b:bb:f5:e3:d5:32:0b:2e:
         ce:13:28:f1:8d:ed:b0:d5:5e:a6:2d:55:7c:9c:8d:6b:f2:5a:
         49:50:c9:de:6c:12:18:50:ab:a0:6c:42:19:17:ff:8a:f5:16:
         a5:7c:ee:59:f5:b6:75:67:c6:d4:d3:26:fe:9f:b3:1e:3e:d3:
         35:a8:20:d0:dc:34:ae:6d:fb:02:41:36:04:87:bb:12:6c:2e:
         1b:2d:6e:55:94:15:2f:02:63:aa:27:56:5c:86:d4:a0:f5:44:
         4d:da:f9:87:19:bf:36:55:55:0b:d9:7c:22:3d:2f:5e:b4:9a:
         aa:c5:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:51:30 2025 by rpki-client