Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          Eitwo0SPfuDAXfXcG6Mz0j0AmN84fGKcJydIc6KkzDw=
Subject key identifier:   A6:58:64:62:3B:45:49:A1:E9:61:BD:8D:AE:A2:44:11:77:F0:21:E6
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          0141
Signing time:             Sun 15 Jun 2025 03:33:50 +0000
Manifest this update:     Sun 15 Jun 2025 03:33:50 +0000
Manifest next update:     Sun 22 Jun 2025 03:33:50 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: G/eaaFUv/R8DoZZ8k1z7RXLa4p9d8mcexXZjFK7yavE=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Jun 15 03:33:50 2025 GMT
            Not After : Jun 22 03:33:50 2025 GMT
        Subject: CN=684e3f1e-1540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:e5:13:b5:78:de:f0:44:55:9e:0f:f0:9d:
                    8a:f8:85:b6:0a:57:6e:0c:b0:73:5f:6d:02:41:fe:
                    6c:9e:e6:91:e8:b6:a8:f1:d1:d3:99:61:4c:8c:26:
                    bb:4e:b5:ce:75:ca:df:3e:e8:99:c7:9e:60:d9:e9:
                    ca:a6:2d:0d:04:7c:f5:70:ab:f2:ce:11:f5:94:4d:
                    3f:ba:79:e2:47:0c:9f:dc:b7:10:49:28:b7:a0:f7:
                    43:23:ba:66:42:01:75:f8:c4:f2:c8:cb:04:1d:1c:
                    ca:07:c5:68:9d:f4:cf:b4:2c:6c:87:bc:f6:77:b9:
                    6f:91:0b:1a:38:f3:bf:31:44:47:75:8b:2e:af:a2:
                    b9:d6:26:c3:ca:a8:d3:b6:2b:de:a1:b1:4b:71:b7:
                    7e:a4:37:cc:81:4d:e7:f0:a1:78:96:59:e2:11:16:
                    0f:bf:be:2e:ab:2e:7d:7d:26:e0:67:32:12:be:fb:
                    0d:fb:90:a6:8b:8e:06:06:49:f3:8d:63:94:7f:b9:
                    6e:7c:3a:72:9a:fd:f0:04:e0:15:f8:1f:60:ce:04:
                    0e:ee:36:1f:d5:7a:4b:1a:6c:fd:3d:50:ab:51:15:
                    68:cb:7d:b6:36:3e:82:a0:0c:6c:c8:0e:ca:e1:08:
                    7e:df:2b:52:26:16:a7:0d:b7:3c:79:5d:8d:61:6e:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:58:64:62:3B:45:49:A1:E9:61:BD:8D:AE:A2:44:11:77:F0:21:E6
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:df:c0:8d:6d:2d:da:ea:64:55:22:ab:e9:20:5c:7c:69:7d:
         30:36:f6:2e:b1:dc:01:3f:7f:43:e9:97:21:ba:bc:b3:2e:6e:
         b6:7f:07:83:b5:7a:71:1f:c8:2d:dd:b5:6b:f3:8c:f1:24:0e:
         83:2d:00:da:91:0e:b9:e8:5d:59:e5:1a:b9:68:b7:bb:41:f3:
         ee:c6:98:d2:80:51:2d:ad:f1:77:11:6f:6e:9a:52:3d:bc:cf:
         4a:7d:1d:7d:11:4e:96:3c:c4:5d:c0:b5:10:97:6f:a7:5c:13:
         05:88:53:a1:50:31:bf:07:70:65:db:dd:8c:83:ca:14:18:ec:
         10:04:26:ed:b4:f6:d3:b3:0e:df:80:3d:07:af:3b:ae:44:95:
         18:62:31:63:72:ea:7b:28:83:99:d8:83:4a:10:01:9a:f5:ef:
         ef:97:13:91:a4:a6:8c:1a:c8:38:7b:37:60:18:2d:1f:cf:46:
         a0:3d:a9:ae:96:2f:1c:56:88:b0:d2:5b:1c:96:67:5d:1a:15:
         71:3d:aa:86:aa:9e:c5:ab:a8:53:e2:28:36:28:93:c1:a0:9b:
         18:5a:44:42:98:0d:21:c3:e7:c9:bd:82:a0:0d:a1:64:e9:f0:
         7c:40:e4:72:5b:79:f7:45:70:09:50:07:c1:7e:3c:3a:35:8d:
         20:71:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:13:43 2025 by rpki-client