Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File:                     PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier:          HSwYP/djCgw1v6eyYnFiRhYlUa5pc00xGvLtIry48Q4=
Subject key identifier:   7A:97:CA:37:64:D7:33:E0:08:88:BF:53:64:62:60:77:B1:EF:24:90
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer:       /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial:       064B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number:          063F
Signing time:             Thu 24 Apr 2025 22:26:24 +0000
Manifest this update:     Thu 24 Apr 2025 22:26:24 +0000
Manifest next update:     Thu 01 May 2025 22:26:24 +0000
Files and hashes:         1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: Uj2RFhl/xWuWYqlkYZM19PwUlkW3O8+1UOfV8sQ1ffw=)
                          2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
        Validity
            Not Before: Apr 24 22:26:24 2025 GMT
            Not After : May  1 22:26:24 2025 GMT
        Subject: CN=680aba90-5815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:f5:70:2f:2c:b6:ad:bd:44:50:4f:17:92:
                    b3:05:5c:5d:4f:f9:0b:ee:9f:ed:dc:a9:74:2a:3a:
                    d5:7f:dd:56:0c:cf:9e:4e:2f:84:89:20:d0:3c:8e:
                    31:b5:ef:18:8d:69:91:65:9c:82:29:0c:5d:1e:10:
                    7e:e9:e6:3b:72:26:04:61:0e:36:7d:b7:1f:c5:6e:
                    56:49:46:13:3a:44:25:b0:e2:41:56:7e:54:37:7f:
                    f4:e4:f2:22:49:4a:24:52:40:aa:42:32:d4:33:c9:
                    f5:55:0a:4d:1d:50:f0:09:42:4e:7b:3a:74:75:27:
                    15:24:6b:57:df:61:e9:d0:67:d3:57:2e:16:fb:85:
                    36:37:5d:08:8b:08:5f:97:f7:43:10:c9:b7:b5:13:
                    46:4f:53:74:ad:87:31:9d:03:2a:73:4e:bd:4a:bd:
                    f4:7e:a3:eb:ce:08:ba:e3:fe:2f:b7:43:c4:f8:87:
                    85:34:a6:27:14:7f:ee:0f:ff:c6:4c:13:ed:b1:72:
                    62:68:f8:50:16:68:a7:93:09:6b:71:ff:52:75:d8:
                    89:7c:cf:c2:a0:5f:4a:7f:6f:60:27:89:c8:a2:bd:
                    17:10:be:c2:e2:79:f1:77:ca:8d:75:ff:e4:d6:a1:
                    6c:b7:e6:dc:16:2f:da:d9:aa:21:cf:9d:6c:44:bd:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:97:CA:37:64:D7:33:E0:08:88:BF:53:64:62:60:77:B1:EF:24:90
            X509v3 Authority Key Identifier:
                keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:84:9e:d3:a8:37:e5:0d:e6:e9:d4:11:75:b5:4c:cc:3f:
         ee:78:95:49:8b:bc:c8:1b:47:76:c5:4b:a8:7e:38:fa:80:ca:
         1f:70:25:4c:43:70:e4:1d:0a:96:08:1b:ff:b0:02:6e:cb:68:
         a2:2e:66:93:2d:2b:c1:01:ef:94:72:58:41:0d:65:a6:75:f2:
         73:27:c3:d9:1c:8d:d2:78:44:58:d5:dc:08:e5:52:53:f5:3f:
         35:b5:82:a2:30:cb:1c:6b:ff:79:66:14:3c:38:32:f3:56:6a:
         0f:45:3e:6a:1f:88:04:3b:bc:16:aa:a5:84:7e:a4:3c:af:5b:
         69:38:9e:38:4c:02:1b:e0:50:92:3f:9d:b5:63:16:3b:eb:e9:
         7b:7d:7b:5f:76:fe:56:f6:c6:a9:9d:07:dc:21:ab:ac:4b:5b:
         37:16:04:24:36:2e:5f:c1:ac:cd:8c:4c:df:4f:ff:23:01:13:
         a6:68:57:8a:47:5d:1d:00:1f:7f:4f:e0:2b:f0:be:be:55:06:
         33:af:f1:09:a9:99:94:fe:47:ed:33:4b:60:8c:97:30:f6:ee:
         f0:34:57:6c:a7:04:f6:01:95:2a:46:57:dd:36:a9:7f:7e:56:
         8b:d6:0d:68:f8:66:81:ae:f8:1f:3c:99:3c:a9:41:02:68:b8:
         6e:51:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:17 2025 by rpki-client