Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File:                     E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier:          QG76vOUSm4BT/spBKMl1Kf62ZwZI8Na+5bsG1XQBXp8=
Subject key identifier:   45:98:22:45:72:E8:4E:23:8E:00:58:B2:AC:44:CE:51:D0:E2:DF:FA
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer:       /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial:       0481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number:          0479
Signing time:             Sat 14 Jun 2025 23:48:34 +0000
Manifest this update:     Sat 14 Jun 2025 23:48:33 +0000
Manifest next update:     Sat 21 Jun 2025 23:48:33 +0000
Files and hashes:         1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: R9zXch26C1cyrosannTlDSp2sZPQexxBaI4/3yVTSic=)
                          2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=)
                          3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
        Validity
            Not Before: Jun 14 23:48:33 2025 GMT
            Not After : Jun 21 23:48:33 2025 GMT
        Subject: CN=684e0a51-84d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:f2:1d:d6:7c:a5:8a:69:84:21:59:9a:05:
                    72:1f:af:86:7d:da:ce:7e:17:3c:f2:50:42:ea:f8:
                    ac:61:5a:2b:ea:c3:89:86:e2:e4:e8:1c:03:b1:09:
                    a1:d7:cd:58:68:21:0a:8b:5d:31:7c:c7:19:84:ce:
                    8f:31:91:b3:f5:fb:b0:9b:3d:83:70:c4:b3:66:c1:
                    9f:85:59:6a:4b:de:e5:04:1f:d3:25:85:02:d7:bc:
                    a5:21:45:bc:a1:09:f7:64:4b:dc:ab:ee:69:6d:73:
                    9f:a9:0d:0b:da:b7:d3:69:73:9b:ff:5f:e7:3a:53:
                    9d:bf:6e:dd:b0:1a:45:78:50:b5:7c:ec:e7:1f:c2:
                    48:25:c9:fe:8e:b8:fa:10:09:45:db:2e:d7:70:d8:
                    ff:16:c3:79:15:ed:71:a8:86:13:1e:d4:69:c6:e1:
                    6f:d8:37:6b:59:c0:db:8a:b7:3b:57:74:8f:df:0c:
                    cc:5f:09:c7:09:35:e8:ab:38:90:1b:d3:70:8b:88:
                    1e:1e:a7:64:db:1b:82:b1:14:9d:cd:f8:9e:ad:16:
                    3e:43:c4:32:bf:61:fe:57:aa:1d:db:62:aa:42:e7:
                    d6:b4:54:30:45:ff:20:05:d8:b2:b9:5a:81:cd:77:
                    1a:e9:66:f3:c4:ec:6b:29:5f:6b:56:da:e1:8d:76:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:98:22:45:72:E8:4E:23:8E:00:58:B2:AC:44:CE:51:D0:E2:DF:FA
            X509v3 Authority Key Identifier:
                keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:37:a2:38:b9:2b:ff:4c:58:15:c5:75:83:96:66:80:87:38:
         31:91:96:15:fd:54:f8:e4:22:ae:7b:6c:24:ef:95:11:8e:5d:
         8b:5f:e9:50:21:28:6b:61:9c:10:51:64:e7:80:d6:d4:c0:2a:
         ca:79:0f:f5:ee:a9:93:ee:3c:e8:da:9a:df:da:6a:64:84:df:
         15:2f:f3:7c:8c:b2:85:9f:4b:20:31:47:d8:e5:1b:ef:62:f6:
         41:bf:79:ae:7c:b4:2e:4d:96:a3:d1:78:cd:79:82:f9:4a:18:
         41:7c:d3:f4:57:4a:76:00:5b:f0:c4:72:14:b1:8f:5c:24:62:
         d2:26:a2:40:00:4c:67:13:43:f1:76:b4:48:6f:0c:03:00:46:
         6b:e4:4e:7a:81:a0:9c:de:cc:0f:3b:d0:a2:dd:f1:99:4e:42:
         a7:9c:a1:ea:60:bf:bd:32:8d:e9:23:96:74:25:45:c9:9f:d1:
         91:f6:7f:40:01:b8:6a:5a:d8:ad:43:21:b3:c0:ce:51:47:b0:
         f2:09:1f:b5:20:b6:e9:f7:b4:49:fe:10:df:60:66:1b:a4:54:
         75:1b:13:5c:01:14:4a:ea:55:87:c0:32:48:82:8d:3f:d7:d5:
         5f:34:0b:98:4e:58:a7:f6:6b:47:ae:11:51:b7:cf:de:6a:16:
         ee:75:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:43:58 2025 by rpki-client