Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
File:                     J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json)
Hash identifier:          MTELgaweHV5YnuKqmcmcvwYtq1pa2W/js7LKxE7ROYg=
Subject key identifier:   F8:48:04:9C:29:2A:F6:89:46:D7:ED:EE:F6:29:15:2F:94:9D:D8:6C
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Certificate issuer:       /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial:       0A62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
Manifest number:          0A57
Signing time:             Sat 14 Jun 2025 19:31:15 +0000
Manifest this update:     Sat 14 Jun 2025 19:31:14 +0000
Manifest next update:     Sat 21 Jun 2025 19:31:14 +0000
Files and hashes:         1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: NbVootOQAEfzIuamgu27INq9q0U97sD7YoqS1ETobzo=)
                          2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: 8qV4xNEzC9YwAyrCmGEDqkkT1vswlJKt6VLA8n7jDac=)
                          3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: nsJgzUwSSMXcZYSBnW8T1s1Gr6R7nDs7M70WL4KuFGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 19:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
        Validity
            Not Before: Jun 14 19:31:14 2025 GMT
            Not After : Jun 21 19:31:14 2025 GMT
        Subject: CN=684dce02-f80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:c4:9e:ac:7b:b6:ab:1f:50:7b:22:e0:9f:
                    5e:91:84:d3:39:e9:15:4b:e7:03:dc:cc:57:5a:49:
                    0b:a0:06:09:7c:88:00:8d:a4:0b:38:1c:b6:81:59:
                    50:97:aa:fd:81:27:86:f7:1b:97:1f:7c:77:62:83:
                    15:54:1e:e4:05:13:fc:a9:5c:00:51:79:c5:15:22:
                    c9:97:86:fa:2f:d7:f3:18:02:94:a1:31:f9:ae:99:
                    ca:59:83:eb:f1:ca:5a:f0:69:b2:76:f2:ec:10:03:
                    b1:66:60:c1:21:94:a0:7e:e0:bc:16:3d:0e:b0:1e:
                    81:e5:42:8e:5a:73:4e:ca:9c:63:30:78:40:a4:d8:
                    b0:7d:71:c8:dc:0e:bb:d5:6c:27:50:6b:73:26:c9:
                    3b:39:e8:40:02:cb:74:0a:07:4c:ad:46:06:ed:4c:
                    00:9e:09:15:78:5f:4b:6c:47:bf:aa:d3:ae:58:69:
                    d4:fc:82:b2:06:f8:5c:b7:d9:03:18:fd:ef:fb:10:
                    f4:f3:bf:2e:97:4e:36:ed:72:99:96:85:9c:66:07:
                    b8:c1:c1:68:02:a6:86:87:e2:2d:0f:f3:85:f1:fb:
                    4a:84:5f:0f:6d:73:47:f6:e8:d8:76:91:37:1b:17:
                    35:05:41:bd:f0:fb:a1:64:9a:40:ad:6f:be:9f:33:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:04:9C:29:2A:F6:89:46:D7:ED:EE:F6:29:15:2F:94:9D:D8:6C
            X509v3 Authority Key Identifier:
                keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:1d:c8:78:d5:76:bf:18:a7:fb:45:97:06:02:62:2d:68:
         f6:ee:25:1a:a0:65:be:51:c4:39:8e:93:4b:a5:f6:c1:ad:c7:
         6e:b9:ae:84:05:ce:ab:de:98:96:35:8f:f6:96:6d:55:53:53:
         a7:50:59:a2:1d:86:29:96:25:e6:74:97:a5:55:19:b1:dd:53:
         d3:60:fe:f8:2a:08:91:ee:01:fa:21:1d:fa:f5:f0:4a:5c:37:
         0d:1f:1c:e8:83:cc:7a:51:9a:8f:d2:f7:f5:58:84:0c:83:d7:
         d2:46:54:f5:99:2a:ea:bf:c0:c0:bf:49:23:66:72:0e:84:30:
         33:d8:a6:ff:b1:d1:59:27:d0:10:66:e9:36:98:3b:31:0d:06:
         d0:99:ff:d7:1c:b5:f6:d3:c3:9e:02:da:51:28:a6:dd:65:82:
         58:44:fb:af:c5:8e:60:88:89:be:19:c2:87:d2:e7:03:1e:0f:
         a1:90:b0:6e:cf:94:7d:ea:d3:39:56:70:66:a9:07:97:e1:f3:
         05:e8:4f:e1:0e:db:ce:41:bf:6c:da:37:9e:76:03:6d:5f:33:
         b5:f7:b1:7e:4f:75:d8:26:cf:36:b1:2c:e5:78:73:05:54:e3:
         8f:88:e4:02:8d:4b:24:6d:75:06:f1:e2:74:45:47:73:68:af:
         c9:82:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:38:50 2025 by rpki-client