Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File:                     Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier:          XfwyWkMSP09dgMyM8tJfzNfHJjRaTH7YJNuY6QzsPU8=
Subject key identifier:   AE:6B:3C:01:90:7A:E7:1B:16:80:60:98:9A:A6:77:50:20:4B:49:65
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer:       /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial:       0330
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number:          0329
Signing time:             Tue 17 Jun 2025 00:44:40 +0000
Manifest this update:     Tue 17 Jun 2025 00:44:40 +0000
Manifest next update:     Tue 24 Jun 2025 00:44:40 +0000
Files and hashes:         1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: poIDVBuCdonUf/F2ZQmsXHzwNKmm4RjjdNQYnVOwowI=)
                          2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 00:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
        Validity
            Not Before: Jun 17 00:44:40 2025 GMT
            Not After : Jun 24 00:44:40 2025 GMT
        Subject: CN=6850ba78-8721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:39:e7:24:a0:d4:f5:cd:47:5c:e4:c7:98:
                    e8:bd:60:e2:be:80:08:8c:f6:c4:d5:4a:9d:50:db:
                    0e:f9:f2:f2:b5:b4:d7:e3:76:df:13:b3:50:97:1e:
                    6e:b1:23:3c:c4:d9:81:5f:0d:bf:b9:09:e0:40:57:
                    08:28:e0:b5:62:8a:1f:55:9c:2e:f2:7e:62:c9:e6:
                    a5:86:0f:bb:1b:c6:8e:25:ba:76:aa:27:77:ee:95:
                    fa:7c:c4:9a:ad:5f:77:7a:3b:df:4b:b2:16:17:a8:
                    89:86:79:38:37:fe:64:a9:f9:b6:26:e8:73:db:90:
                    d4:59:ec:f5:35:e2:68:0a:eb:ee:81:8e:d5:23:ff:
                    83:dc:b5:6e:9d:cd:13:23:8d:1f:01:ef:0b:dd:d0:
                    37:70:9d:42:22:f5:e2:a9:41:7d:ef:91:bf:14:8b:
                    c8:99:b5:53:18:28:3f:a5:a3:1d:ba:5d:b9:78:4a:
                    a2:67:8e:55:76:84:8d:d5:32:58:9c:d4:b2:4d:2d:
                    72:7b:7f:f2:2c:fa:a5:0c:1b:1b:e2:1d:1c:d3:e0:
                    30:94:9b:02:27:88:d1:73:8d:e7:6b:a7:f4:6b:a0:
                    f1:15:59:e9:e1:e5:57:2f:70:d6:4c:e6:29:0a:4b:
                    75:84:e1:1f:c1:2f:7f:ab:b8:2a:82:11:87:78:c4:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:3C:01:90:7A:E7:1B:16:80:60:98:9A:A6:77:50:20:4B:49:65
            X509v3 Authority Key Identifier:
                keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:f2:d0:12:fd:c9:51:bb:2a:58:e2:06:11:34:b2:9c:b0:
         73:2e:85:af:72:56:dc:f0:37:95:cd:fd:06:02:ca:01:10:9b:
         c6:52:bf:19:d3:ea:f6:3b:a6:c1:f8:d2:9d:29:54:f7:66:fa:
         b8:90:38:58:4d:38:a4:f2:ba:1d:26:b4:68:05:6d:de:f8:8e:
         f6:9b:6b:c3:c2:8b:43:d4:b9:62:77:9f:d9:f2:30:d4:ca:f2:
         8e:e9:b3:ab:e7:fe:31:86:7b:b6:55:47:d6:69:b8:90:a4:8f:
         b7:27:db:53:8e:f5:0b:13:9d:b5:7a:cd:e2:c8:77:76:c1:05:
         b3:1b:a2:c2:d0:95:f2:b0:cf:84:de:e5:82:65:1c:fe:ce:63:
         dc:61:48:47:7c:3d:d8:36:75:7f:7d:de:28:d5:5e:1b:33:e4:
         ff:7e:be:b9:b2:0f:f0:b6:b0:55:b7:02:90:b4:59:1d:f9:66:
         35:e4:b9:9a:75:c0:08:c8:85:c8:65:d8:be:f8:2e:c4:ea:70:
         86:80:e9:d9:17:09:85:eb:7e:70:f3:d3:43:b2:11:29:4e:8b:
         4b:4a:17:ab:44:dc:73:cd:82:cf:c4:7c:d9:2e:2c:bb:95:4f:
         7d:54:cb:bc:d8:36:f2:ef:69:fd:c4:b6:b7:6c:c9:75:fd:51:
         3f:ca:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:57:14 2025 by rpki-client