Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File:                     RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier:          uWJT1ZtaSATKzbbMUmoTWnkXmVq3nSGX+qPsc7elsiY=
Subject key identifier:   52:01:23:9C:26:3F:DE:2E:18:03:67:A1:EB:9A:03:7D:08:74:AC:34
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer:       /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial:       04AC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number:          04A4
Signing time:             Fri 20 Jun 2025 15:54:44 +0000
Manifest this update:     Fri 20 Jun 2025 15:54:43 +0000
Manifest next update:     Fri 27 Jun 2025 15:54:43 +0000
Files and hashes:         1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: cKc/dsAr+ThBnsMxTpdMgz5ou+JfEaXLayInwG9yKcs=)
                          2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 15:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
        Validity
            Not Before: Jun 20 15:54:43 2025 GMT
            Not After : Jun 27 15:54:43 2025 GMT
        Subject: CN=68558443-8f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:77:28:de:78:c3:f6:10:57:5b:d5:8a:61:
                    c4:23:e8:5b:83:f3:cd:8f:cc:91:2d:ff:bc:ba:5e:
                    37:68:70:bc:12:31:8b:bd:4e:30:43:2f:de:81:3f:
                    06:97:a1:16:1f:2d:9c:89:56:10:97:36:14:b6:a0:
                    4d:0c:63:76:29:ff:47:7b:c2:a7:cf:ee:30:06:ee:
                    05:ff:2e:0f:25:f1:62:13:59:de:11:59:0f:89:45:
                    07:7e:dd:35:98:0e:f6:75:20:2b:50:49:09:66:ba:
                    a4:a0:8c:bd:eb:d5:61:38:de:01:d1:99:55:68:f0:
                    f9:08:f4:4c:24:88:f7:20:a4:0f:fa:28:b0:92:92:
                    52:29:e3:26:0f:bd:5e:42:dc:a5:31:52:a1:81:ee:
                    2e:2c:5f:2a:bd:a1:e0:87:6a:af:b5:4b:2a:92:d3:
                    89:ff:67:09:71:87:ec:0d:a6:06:24:25:30:4e:88:
                    f6:7b:a9:3e:2b:59:b3:a2:db:d5:cd:0c:e5:26:7e:
                    45:ee:16:25:e6:78:8e:28:1e:1d:6f:0c:dd:5a:54:
                    ed:0f:57:83:f1:7a:0c:67:66:42:c8:eb:10:71:0f:
                    e6:a4:6d:a3:c4:57:75:8b:98:36:5f:4f:49:68:d0:
                    a2:1a:6e:3e:ca:e4:12:84:07:01:22:fe:a8:44:9a:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:23:9C:26:3F:DE:2E:18:03:67:A1:EB:9A:03:7D:08:74:AC:34
            X509v3 Authority Key Identifier:
                keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:2b:a3:09:a8:a4:e2:3c:d9:d9:ed:30:b6:97:70:80:b8:
         ba:a8:ee:5f:f9:b9:27:83:e0:9f:7f:a0:62:c1:c0:75:3b:dc:
         2c:a0:f6:5c:f4:5c:95:36:d0:8c:7e:f2:6e:e9:74:cf:64:f7:
         4d:a8:29:dc:de:f1:aa:89:99:cc:08:3e:8e:86:75:5e:03:35:
         60:66:24:79:7a:81:c4:68:93:80:29:81:49:57:84:b7:a9:49:
         54:f4:f1:cb:a1:68:49:23:ed:3a:2a:5f:61:39:f4:23:8c:33:
         e7:33:13:cc:21:2d:12:da:11:2f:ba:f8:f1:a5:9c:7f:f5:5f:
         10:48:20:f5:c2:2d:a4:55:8b:df:73:b0:51:df:2f:6e:11:f5:
         65:29:dd:62:57:ac:e3:2d:38:4e:0d:9d:4a:95:99:0d:17:04:
         bf:2e:ed:01:1d:3f:90:58:27:77:7e:0a:6e:b2:2e:c9:4e:fe:
         63:08:90:a8:bb:c0:67:9f:b5:46:fc:b4:c1:af:2c:76:ee:d5:
         4d:c8:a2:dd:82:0e:cc:43:7b:e1:56:6e:6a:40:83:db:94:16:
         44:a1:ee:6a:85:48:27:17:0a:a2:a7:57:7c:8d:c0:0c:26:e8:
         49:48:be:03:78:8f:db:82:cb:84:d0:0c:30:e5:66:4e:ee:b6:
         ef:4e:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:12:44 2025 by rpki-client