Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
File:                     TeFRsMiiGEElxljjJzHNoaojRwA.mft (raw, json)
Hash identifier:          SiFl/RkqKwLUmJq1yGDuu++0LkEg29MOOjoj/yYOcds=
Subject key identifier:   D9:78:0E:C0:BC:8D:6A:38:14:3D:F4:BE:C8:AD:B3:55:7D:40:D0:36
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       03CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
Manifest number:          03BA
Signing time:             Fri 13 Jun 2025 00:14:38 +0000
Manifest this update:     Fri 13 Jun 2025 00:14:37 +0000
Manifest next update:     Fri 20 Jun 2025 00:14:37 +0000
Files and hashes:         1: TeFRsMiiGEElxljjJzHNoaojRwA.crl (hash: ZJxcuxPID4VOylsZmUCbSdUnNlLyUQpD41aJyktDd8c=)
                          2: 50A8AF54A1C311EC960A4D2BC4F9AE02.roa (hash: 2KtkkHGjYM6B4NJArJW7J81dwWOAgC3BbrS1q16b7zA=)
                          3: 4FED5C22A1C311EC960A4D2BC4F9AE02.roa (hash: o/h9t6dto3RR9iUYCBWuwk5m/sVDjVA7sDNry2jRXMM=)
                          4: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (hash: 23pzBzVb/LUnDvjs9zEX9C14poyur9Xh61CsW7xpwuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: Jun 13 00:14:37 2025 GMT
            Not After : Jun 20 00:14:37 2025 GMT
        Subject: CN=684b6d6e-b0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:2f:68:73:77:e3:d0:a8:9e:86:b5:fc:bb:
                    df:74:d6:94:09:b8:de:25:21:6e:e9:e9:65:af:db:
                    67:cf:e9:cd:26:1a:5b:46:1e:40:10:0b:56:7f:34:
                    52:b5:0f:33:cc:77:ef:a4:67:78:58:39:d5:e5:ea:
                    64:22:bf:a9:09:58:39:6d:0c:de:6c:f5:a8:69:5a:
                    ed:e1:91:75:1d:5a:e6:4f:bb:b0:31:79:4e:2e:89:
                    ee:a2:61:34:7e:06:e8:fe:29:ed:35:f3:7b:d8:b1:
                    e4:01:af:01:b0:14:ac:4e:bd:4e:4f:3c:34:ee:0a:
                    fa:22:c9:5b:6b:b0:55:e2:c6:f2:14:51:a9:c4:0e:
                    4b:16:ff:38:d4:8b:82:2c:2d:26:a0:d6:c4:21:ec:
                    42:4c:d6:bc:93:cf:11:75:be:51:da:f3:9a:20:8b:
                    2d:3b:4a:ff:25:4f:44:ab:a4:cc:7d:88:03:39:fb:
                    13:f0:d1:bb:48:f4:e6:b4:3f:20:f3:84:66:21:35:
                    92:07:03:50:b6:78:b5:bb:99:5b:f4:61:43:8e:eb:
                    92:1b:4f:b1:3c:a9:19:f2:f8:cd:36:23:46:62:98:
                    5a:cd:05:18:36:3b:38:80:f9:56:55:fe:ed:47:4d:
                    40:ab:43:ad:1e:1f:06:5e:af:51:d8:47:2d:f3:63:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:0E:C0:BC:8D:6A:38:14:3D:F4:BE:C8:AD:B3:55:7D:40:D0:36
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:80:ac:fc:aa:10:57:8d:b4:5e:a9:d6:33:0a:85:d6:32:5d:
         f9:8e:99:b6:cb:77:7f:ce:b0:3e:d8:ee:53:d5:c1:17:3e:53:
         96:4d:0a:e2:40:73:c1:a4:3a:14:67:64:48:a3:f8:32:83:c5:
         1d:9b:43:05:3b:b7:b8:fa:20:48:7a:72:4c:ca:88:98:9c:0c:
         85:f8:26:68:3e:89:db:7e:93:f4:07:61:04:a3:a5:55:73:d0:
         f3:5d:8a:43:37:a5:e4:02:4c:7d:9a:3e:e5:d8:38:4e:f5:34:
         8c:71:8f:d2:ff:d8:24:09:d8:97:c6:19:a6:62:6e:23:be:5d:
         6f:db:1c:a6:c1:03:e9:3c:f1:31:e1:c3:7f:9e:e9:fb:83:10:
         9a:a8:2f:5a:43:80:2a:13:4f:88:25:54:f2:4d:1f:7e:7d:18:
         df:00:aa:cb:de:41:c0:0c:42:7c:5c:78:b1:1b:6a:67:d6:e0:
         94:be:ba:96:b3:23:5f:08:e6:21:d9:1f:e9:6d:d8:40:ae:e2:
         7b:9b:c5:fa:52:13:55:69:f1:22:0b:05:34:5b:7e:96:73:f1:
         76:8e:68:e9:57:b1:52:ff:dd:a2:e5:22:4d:df:71:01:27:6b:
         22:e0:1f:13:cb:90:78:b3:f3:0b:c6:1e:76:7d:4d:32:1e:2e:
         ce:b3:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:54:21 2025 by rpki-client