Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
File:                     m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json)
Hash identifier:          llp3IyPTN//FFcTRELkB/PZnJTtVzYqOlYz7C+iO6Ws=
Subject key identifier:   68:9D:39:02:52:4C:75:91:CD:6C:A9:95:97:B9:B4:78:FB:24:76:16
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Certificate issuer:       /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
Manifest number:          0A
Signing time:             Fri 13 Jun 2025 07:01:40 +0000
Manifest this update:     Fri 13 Jun 2025 07:01:39 +0000
Manifest next update:     Fri 20 Jun 2025 07:01:39 +0000
Files and hashes:         1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: GtWGk5iHcrHBIB/MM4leif864yi3iSg7uqknJrz2rbg=)
                          2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: pCu6+WJeqtvS7Tcl3+9JWLKb1zyqA9V6h4uJDrGt8GQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
        Validity
            Not Before: Jun 13 07:01:39 2025 GMT
            Not After : Jun 20 07:01:39 2025 GMT
        Subject: CN=684bccd3-224f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:dd:21:80:13:21:69:fa:96:6d:7d:e7:60:
                    99:e9:23:51:66:8a:7b:c5:d1:29:0a:13:90:35:e4:
                    f8:ad:01:4f:b1:03:f7:d7:ca:0a:a9:e0:d6:19:24:
                    39:67:f9:75:87:0a:e7:ba:15:a6:81:09:c1:80:aa:
                    88:34:07:e2:0c:2b:98:03:69:21:b4:2c:d1:10:2c:
                    86:fc:d1:e0:c8:10:21:9b:81:9a:be:59:a5:d9:db:
                    b3:68:ff:21:87:8b:cb:83:45:6f:dd:e2:59:08:d5:
                    57:3f:17:35:95:47:4a:7f:d0:9d:2d:7c:a3:78:7c:
                    c7:09:72:1d:9d:9c:6b:08:ca:8e:95:d4:41:45:63:
                    9d:b2:1e:c0:3b:51:ae:a7:04:23:78:6a:7b:f4:92:
                    61:f9:3e:30:75:45:ec:61:2d:bc:aa:41:66:a7:e5:
                    36:7a:3a:e1:0f:8f:29:56:a9:b8:4f:28:42:e3:62:
                    9f:1b:f3:11:8a:12:82:fc:f2:36:67:0a:f1:30:3c:
                    40:15:02:d8:0e:9d:e8:93:bb:4e:e7:38:67:ac:a9:
                    94:98:50:fd:7b:d8:25:67:d5:f2:fd:19:24:e5:60:
                    3c:c5:8f:8d:e9:1e:b5:c6:a0:2e:48:bc:47:51:bf:
                    6c:3f:c7:9e:67:45:98:00:23:6e:55:34:52:6b:75:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:39:02:52:4C:75:91:CD:6C:A9:95:97:B9:B4:78:FB:24:76:16
            X509v3 Authority Key Identifier:
                keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:94:b1:a3:80:f9:4f:ff:7b:38:28:fa:74:87:4c:df:79:
         ef:de:cd:46:a4:02:c5:35:a7:53:78:9b:19:9b:cf:95:3a:d4:
         7f:47:18:42:9f:db:f8:a1:30:9c:4d:90:5e:5d:ac:dd:78:47:
         6f:20:66:e7:42:d0:d6:e3:cb:ff:84:f1:85:2d:31:9d:a0:af:
         78:e1:5f:02:83:44:c0:5a:24:03:58:d2:8c:ee:e1:db:f2:bf:
         8e:64:b0:67:e4:2b:e6:54:38:03:d1:95:92:0a:54:8a:95:8b:
         af:22:ed:a0:5e:ec:ac:16:59:cc:fc:b6:2b:01:62:93:d1:cd:
         bc:47:d3:5b:ee:85:c4:2d:74:bf:a8:60:87:01:50:d5:b0:de:
         b1:f5:23:9f:a1:dc:87:87:6a:ee:50:29:00:a5:3b:f6:81:e4:
         d4:ea:83:db:4a:5c:6e:65:7b:af:08:69:c4:7b:9c:7f:6d:6b:
         2e:15:d3:76:e3:a7:06:1e:17:00:71:eb:3d:22:5e:3b:ac:34:
         d9:62:13:57:9d:ec:02:54:ce:2c:6f:e9:00:4d:b6:52:6e:26:
         98:16:cd:6e:82:59:c2:23:da:a3:3b:ee:a1:6e:1e:33:1e:f0:
         10:4d:65:85:77:e2:74:0a:01:b1:91:06:9b:e5:22:1c:20:99:
         aa:75:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:46:45 2025 by rpki-client