Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          BpZKIDix/R4qrdIYjGkki1GRG5DTFCTaZWpoZ4ogJDs=
Subject key identifier:   98:2D:0D:D9:67:2E:18:CA:42:F0:2D:4E:F9:5D:B2:DF:B9:F0:64:63
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          01CD
Signing time:             Fri 13 Jun 2025 01:57:34 +0000
Manifest this update:     Fri 13 Jun 2025 01:57:34 +0000
Manifest next update:     Fri 20 Jun 2025 01:57:34 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: MvVOtrkaQVBOk3Fu2FO0qRxAUx20O4EcRrMnpJT6HcI=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Jun 13 01:57:34 2025 GMT
            Not After : Jun 20 01:57:34 2025 GMT
        Subject: CN=684b858e-39b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:83:9d:40:12:a2:08:a6:92:a9:0e:43:bd:
                    5d:83:27:53:3d:4e:74:36:d7:e7:81:bc:a3:31:97:
                    d5:73:2c:10:41:85:26:1b:68:cb:8a:6e:ea:97:96:
                    d0:0c:f6:9d:9c:4e:61:cd:fa:25:82:76:e3:e4:73:
                    92:73:0b:6b:f0:2f:bb:3d:60:0f:99:e4:11:b2:89:
                    92:d7:19:1a:90:ad:6b:9f:ca:33:3b:0a:11:89:9a:
                    09:ac:36:9c:46:81:0c:90:2c:81:19:bd:72:65:97:
                    f5:15:b1:34:ff:3a:92:5a:29:b1:91:5f:6c:7a:89:
                    87:a6:27:87:fa:e1:f2:a9:30:2a:02:29:09:12:a5:
                    50:49:38:26:85:19:60:df:a7:69:8c:1f:ed:19:1f:
                    dc:b8:ad:00:dc:f0:1d:c3:c5:df:09:18:77:df:d7:
                    3d:5c:45:68:99:ea:7f:9f:31:ca:b7:bd:50:3b:da:
                    eb:b1:ac:ea:31:31:65:0d:54:05:b2:0e:3d:ee:ad:
                    c4:f7:34:c0:51:17:cc:52:a3:59:54:fe:37:79:44:
                    4c:cc:f2:e3:e8:c0:e5:35:73:a0:55:4c:bb:a6:6b:
                    fa:8c:54:37:20:dc:b3:02:5d:a7:68:00:59:9a:ca:
                    6e:48:2f:8a:86:e2:7e:91:68:a0:f2:93:f3:2f:99:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2D:0D:D9:67:2E:18:CA:42:F0:2D:4E:F9:5D:B2:DF:B9:F0:64:63
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:9d:ed:5f:ae:50:ad:c3:48:78:e5:1e:19:98:9b:71:33:76:
         9f:3c:9a:31:46:f6:60:e5:e0:74:be:2a:37:4c:64:90:ba:4f:
         e4:d3:1e:3a:bb:60:56:5b:59:e3:6b:97:9b:ef:df:7f:c1:06:
         d8:90:46:93:99:4e:7d:26:f9:ab:62:96:e3:d4:06:a7:f6:14:
         bd:06:8e:35:37:96:0a:56:82:d8:15:c2:9e:06:94:eb:41:ce:
         f2:c3:1d:8d:d6:54:13:da:68:41:65:11:9d:e0:d6:fa:26:1d:
         b5:31:6d:87:5a:fa:4a:e9:dc:46:33:26:aa:d6:e2:be:cb:c3:
         18:35:08:93:18:a3:48:83:c4:01:87:e4:2c:53:89:f8:01:ae:
         ea:a5:74:16:4c:12:d9:e5:86:ab:55:42:76:23:15:3b:92:e8:
         e9:af:63:55:85:5f:7f:9c:dc:5e:f2:d9:b9:13:43:b1:4d:9b:
         6d:60:38:ae:9b:69:2f:95:eb:a9:4a:2f:ce:75:4d:33:85:0c:
         9a:52:ff:88:1d:f1:eb:70:3d:9f:c5:db:02:c5:19:66:fc:91:
         b4:ba:f3:ad:23:c3:5a:57:90:f6:51:04:a8:d4:c2:62:21:95:
         31:6d:3c:87:8e:f8:45:a3:c4:da:7a:90:5d:64:c2:8c:80:ab:
         31:36:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:51:08 2025 by rpki-client