Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File:                     AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier:          s5VwK6y344Y6fbiYXlU/U/BUS9Dj8d2YADf3QGfN/ZY=
Subject key identifier:   68:EF:92:44:43:40:FD:34:58:20:10:F8:4E:6C:76:31:2C:DF:91:83
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       032E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number:          031F
Signing time:             Thu 19 Jun 2025 00:59:13 +0000
Manifest this update:     Thu 19 Jun 2025 00:59:12 +0000
Manifest next update:     Thu 26 Jun 2025 00:59:12 +0000
Files and hashes:         1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: IvxrSZT/C8lf/6jChXNH2G4HbYdNdCpnO2xItn1hglI=)
                          2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: r0SdsL2ORVSdYzkbQ5mo+r9WMoDe9Po2V1LCmdg+FDo=)
                          3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: ICAm0K0jbIgavAr0EQMMjLaOL/gZji3RATFqBqpQADM=)
                          4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: /uILdUZ7kShm+RnYwG/kKYiO9gYuOhp2LdX1pGS+VDA=)
                          5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: dBsLOGuzUlSybPcUJi3MpYXDAALVpmkR+ZsEVuraLp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 00:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Jun 19 00:59:12 2025 GMT
            Not After : Jun 26 00:59:12 2025 GMT
        Subject: CN=685360e1-6b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:31:16:fe:1c:ca:c4:d4:74:6f:33:43:54:
                    39:91:22:20:61:63:c7:1a:7b:a0:cd:15:7b:d7:53:
                    2f:56:47:75:53:26:09:65:41:9f:30:67:0c:93:08:
                    a7:4c:b2:34:b4:ee:71:20:89:9a:8c:b9:30:60:03:
                    3c:37:36:4e:0f:05:29:66:ab:45:84:d3:f1:3d:6f:
                    51:54:e2:ec:29:fe:9f:5b:52:ed:6b:c1:ca:b2:e6:
                    5d:d5:df:f1:6b:91:af:54:b7:1a:49:13:7c:b6:ee:
                    de:2a:cd:23:b2:53:77:3c:7a:3c:46:d6:d0:f2:30:
                    1d:10:b8:48:48:14:ca:8c:fb:3c:50:1c:6e:db:5c:
                    7a:22:0f:70:79:eb:4f:53:58:ac:30:f7:78:b8:9d:
                    10:be:53:57:bd:29:58:a3:7c:82:e8:49:dc:6b:f3:
                    d1:ce:55:3e:98:f1:71:ee:5a:2f:9d:94:3f:a3:db:
                    de:43:de:18:dc:04:51:ad:2b:4d:4c:23:f2:ba:15:
                    78:0c:e6:cb:f8:61:22:c9:fb:4b:63:c2:6e:75:91:
                    4c:2f:06:4c:f9:12:f2:07:bb:65:db:08:73:09:82:
                    2f:0f:2d:e3:59:18:71:e5:99:e2:aa:91:2b:52:ee:
                    4b:3b:db:5a:3c:a4:9b:2c:f7:ed:e3:1e:5b:39:77:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EF:92:44:43:40:FD:34:58:20:10:F8:4E:6C:76:31:2C:DF:91:83
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a4:1e:09:2a:b0:bf:f3:a8:0b:ad:72:67:30:0c:12:0c:ea:
         08:bc:18:ee:15:ba:93:f4:bb:df:63:6f:1a:72:6f:59:14:6b:
         67:20:f9:43:25:c2:33:c8:ae:98:a9:05:5d:b6:76:b8:21:6c:
         f1:2e:05:06:71:f0:a5:8c:da:18:f2:8e:24:8e:2d:85:82:81:
         e9:bf:3e:ac:da:53:18:fd:17:e0:f7:0e:7e:01:bd:38:a2:9c:
         74:99:53:23:fb:42:2f:ba:7d:1d:62:a3:f8:ef:00:f0:05:5e:
         01:0b:a3:dc:35:58:28:10:e3:3d:63:a9:7d:e9:9c:7f:d5:c1:
         68:8e:d4:42:2b:ba:71:b8:57:be:71:98:9a:92:cf:8b:39:2c:
         a7:0c:8e:19:a7:0e:db:c4:bc:a4:66:9c:a3:ff:4c:d1:bf:78:
         fd:72:98:fb:dd:fd:8c:3d:29:bc:7c:f9:a5:7c:db:6d:3e:30:
         72:96:cf:89:f9:2d:ce:b3:07:6a:35:34:68:2e:d2:09:b2:4e:
         b4:f5:8f:84:97:5b:95:9a:5e:4f:3a:86:94:45:9d:9a:40:92:
         ff:1c:22:82:50:45:08:62:bd:b0:9e:9e:61:8c:d7:5b:ba:2b:
         dd:5f:c0:c9:82:60:66:6b:e4:40:99:d7:66:26:6f:58:b6:4c:
         e7:eb:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:02:05 2025 by rpki-client