Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File:                     u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier:          +zyBwnIZ5uCZ8qC1BDsCEJZQaqXvcelr8QE33BjQps8=
Subject key identifier:   49:BB:68:B9:FC:3F:20:73:1A:B5:21:70:FA:08:96:4F:70:AE:70:C3
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number:          014A
Signing time:             Tue 17 Jun 2025 03:15:58 +0000
Manifest this update:     Tue 17 Jun 2025 03:15:57 +0000
Manifest next update:     Tue 24 Jun 2025 03:15:57 +0000
Files and hashes:         1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: oQ9SqGYJ4Q/R6YXQLmlq0loS+i0l+XGYEvV8nWT6Ylk=)
                          2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: j93vJ2NAnCNQy/x2PjU9v6iPhwn1QcPjRO5LSFsSwNE=)
                          3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=)
                          4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: rOkP4Vb8B8/6UrNv3XnkLOomlf0wseQaO6Jnqbw75S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 03:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Jun 17 03:15:57 2025 GMT
            Not After : Jun 24 03:15:57 2025 GMT
        Subject: CN=6850ddee-a1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:c3:7f:19:0e:76:b8:f6:4c:02:e5:43:9c:
                    59:95:68:33:41:cf:5b:5e:f7:90:73:02:54:38:bf:
                    53:05:07:1e:cd:b1:47:34:76:83:51:67:75:98:ed:
                    21:4a:4a:4c:bb:bb:09:e3:56:f2:c4:0c:f3:0f:62:
                    46:8a:4a:e4:08:47:aa:d0:c0:7c:db:fd:cd:7b:91:
                    da:cc:f8:3d:25:a6:c9:f9:0a:85:74:5e:f8:03:4a:
                    07:fd:af:c3:d1:63:21:32:ca:b8:b7:ae:7c:2d:2a:
                    36:67:97:33:f8:ee:cd:6a:7e:37:b6:23:ad:e7:c6:
                    b7:5e:d7:27:a2:61:88:36:03:fd:b5:79:0c:5c:06:
                    d2:2f:2c:e6:8a:8a:4b:90:55:72:4e:70:fb:a7:37:
                    73:f5:44:54:a6:59:5c:b2:93:a1:40:79:bc:15:38:
                    e5:14:f1:e4:56:0b:53:ee:83:d4:1c:60:c9:3b:f4:
                    9d:f2:e2:6b:3b:2a:61:90:98:99:71:ec:04:39:4b:
                    3f:cc:92:17:73:58:67:9a:67:dc:3b:42:b1:fe:98:
                    c4:5d:43:77:f5:eb:22:6c:27:d7:c9:fe:0b:a2:c3:
                    3a:9a:2d:d2:b6:cf:33:8d:3a:10:79:f5:9b:8a:59:
                    1d:00:6b:0d:85:b9:35:0e:12:a6:a4:ce:c2:64:01:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BB:68:B9:FC:3F:20:73:1A:B5:21:70:FA:08:96:4F:70:AE:70:C3
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:74:e4:71:23:5d:e6:d5:f8:2b:6c:e4:9a:7c:80:2e:ce:da:
         0e:bb:fa:9d:87:d8:b7:0e:7f:27:2f:89:6b:c8:4d:d5:21:49:
         f4:04:f5:b4:27:19:eb:54:8f:de:b5:22:a0:31:3d:83:af:b0:
         b2:1c:60:30:4a:07:42:6d:80:73:d8:70:06:1c:41:c2:c2:dd:
         63:54:36:5d:6c:62:97:9c:64:f2:93:e5:01:1d:d5:31:11:76:
         85:b3:fc:ce:5d:dd:82:53:01:31:5b:53:8b:95:f6:6e:a4:ea:
         60:2f:8a:88:64:af:24:5e:29:8e:16:3e:bb:63:6d:e2:30:2e:
         9b:4a:ec:06:db:63:1e:02:b6:57:7b:35:46:95:49:5a:3b:55:
         bc:6c:f4:95:8f:f2:a5:5b:14:93:7b:1a:b4:05:a7:31:f9:d7:
         9f:02:7d:b8:d4:74:b8:2d:cf:30:11:09:6f:ef:03:79:b8:13:
         38:b5:49:6a:5c:61:af:64:aa:63:8e:85:44:e5:c9:75:0f:cd:
         21:1e:02:3c:68:a9:b9:f7:64:a2:8d:f9:c4:92:ba:ad:4a:43:
         07:3a:c8:e4:21:51:23:5d:8a:0b:1e:f7:0a:db:71:2a:77:77:
         27:15:cd:b5:d9:de:03:28:f0:ab:f5:87:bd:b6:1d:40:2c:8c:
         08:d1:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:58:28 2025 by rpki-client