Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
File:                     92edhcQsfjk3x9JAjAZ5uVznEXk.mft (raw, json)
Hash identifier:          5s4u8PhdvCPTXqbEI35eordPGhY8s6QcJfNgfvAExSM=
Subject key identifier:   A8:E3:C3:03:A6:52:D0:F2:6D:85:E9:FA:35:26:64:5B:1F:4F:F9:18
Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79
Certificate issuer:       /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
Manifest number:          36
Signing time:             Sun 15 Jun 2025 06:42:43 +0000
Manifest this update:     Sun 15 Jun 2025 06:42:43 +0000
Manifest next update:     Sun 22 Jun 2025 06:42:43 +0000
Files and hashes:         1: 92edhcQsfjk3x9JAjAZ5uVznEXk.crl (hash: rArjNdtk8dzgISphxpEFToqQfEnINlXX7ijRQxc5ta8=)
                          2: 01103988FB5911EF8B32E613C4F9AE02.roa (hash: R1vera/J21wpLzxHOvQ0xtue7DdueGMpTshOHPQT8vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl
                          rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A82F8, serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
        Validity
            Not Before: Jun 15 06:42:43 2025 GMT
            Not After : Jun 22 06:42:43 2025 GMT
        Subject: CN=684e6b63-b420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:c4:e5:9b:38:74:c6:ef:b4:24:b8:e8:f0:
                    3b:06:57:31:ab:65:6f:8c:f1:42:0f:96:29:ae:b4:
                    ff:c8:71:39:33:d4:3f:21:b7:60:b4:55:5e:2e:ed:
                    70:60:86:b2:a2:90:c9:78:d8:54:9f:08:ad:49:b3:
                    e0:34:57:dd:6d:11:7f:64:96:9b:5d:db:08:b0:43:
                    18:d1:fc:ac:be:12:b1:5c:20:8f:86:b4:03:24:4e:
                    ff:c8:91:ba:05:55:51:c5:31:81:da:9f:5f:5b:98:
                    19:79:6e:42:2f:d6:ad:d2:55:15:c2:8e:7a:42:fd:
                    f9:28:10:dd:33:56:b3:c1:46:06:f0:9d:2b:7b:26:
                    90:a8:c7:8c:f7:55:d7:3e:36:14:34:b5:88:d1:48:
                    13:1e:63:27:8b:9b:df:65:7f:9a:93:65:3e:ab:ee:
                    10:d9:75:42:1e:3d:32:22:22:77:70:5d:fb:26:f9:
                    88:7b:0e:3d:12:0f:63:76:36:d6:d0:7c:7e:fd:d5:
                    83:9b:99:83:84:cc:84:2d:c5:69:3b:6a:0e:7e:2c:
                    c0:cb:26:67:95:16:c4:dd:02:ad:02:4b:7e:5c:65:
                    56:8e:2c:23:25:cd:11:1b:6f:9f:9e:35:7f:ad:5e:
                    bb:81:a6:d3:05:b2:2a:14:f6:a5:b4:50:24:7f:a4:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:C3:03:A6:52:D0:F2:6D:85:E9:FA:35:26:64:5B:1F:4F:F9:18
            X509v3 Authority Key Identifier:
                keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:e5:42:5f:1c:55:9c:0a:80:a3:cb:76:19:8d:59:5f:c6:
         d8:54:21:49:7d:45:e7:0d:e6:f3:f1:be:91:03:9d:42:96:d8:
         d4:77:e0:fe:74:ca:fa:ec:08:76:83:1c:3d:3a:e9:d1:93:19:
         95:58:29:99:e3:26:10:90:c9:21:79:7a:5d:e7:af:8a:07:d1:
         19:25:8f:e0:17:6b:11:57:79:c6:13:fc:ab:6b:a4:14:f1:e5:
         a8:fb:ee:f8:1a:81:f9:f1:e4:c2:f9:5d:0f:88:0d:01:2f:12:
         0d:46:03:e1:0b:2d:b0:28:05:cc:e0:bb:bc:f2:81:2f:6b:b9:
         94:67:a1:dc:43:e2:76:b5:46:4f:d9:31:1f:cb:ba:67:41:52:
         a9:01:64:05:2a:48:70:ad:13:48:29:4a:19:e6:eb:a5:25:6a:
         63:1d:cd:bd:3b:42:d4:7c:18:34:e2:d6:14:8e:27:a1:f1:93:
         a3:00:cc:cb:33:1a:3c:f5:23:81:ad:ec:b0:16:9f:65:e0:c7:
         ff:a7:dc:88:80:f5:62:79:d3:1d:26:8c:24:f1:8a:96:58:03:
         f8:04:ee:70:d9:c8:a7:17:0a:c7:68:fa:37:60:b8:7b:ef:41:
         c6:ce:0f:96:b2:b2:9f:71:e5:1b:a2:7b:f7:a1:9b:ab:32:65:
         0f:15:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:45:09 2025 by rpki-client