Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
File:                     e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json)
Hash identifier:          IPTkqCdpfjNipvu58vsjOEhPWjeLiOjnqtbou4tjThI=
Subject key identifier:   33:E2:B6:62:5A:08:20:32:80:30:33:26:D0:50:AD:8B:37:00:AC:83
Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Certificate issuer:       /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
Manifest number:          0106
Signing time:             Thu 19 Jun 2025 04:25:56 +0000
Manifest this update:     Thu 19 Jun 2025 04:25:55 +0000
Manifest next update:     Thu 26 Jun 2025 04:25:55 +0000
Files and hashes:         1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: 3tq/38C/m9AYCl4tomBb59uyotIxQ0IfsLI1h6T+40s=)
                          2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
        Validity
            Not Before: Jun 19 04:25:55 2025 GMT
            Not After : Jun 26 04:25:55 2025 GMT
        Subject: CN=68539153-f54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:3f:b7:01:8a:06:a9:a1:9d:73:31:f2:7e:
                    cc:d5:8c:69:7f:0e:d7:78:37:f9:24:af:4e:9a:a9:
                    38:0c:fa:fd:ae:e4:de:47:a5:ad:57:8c:5c:07:5d:
                    c9:c3:d6:0b:40:91:20:c5:b5:b2:9d:4d:0a:f5:4b:
                    d4:37:86:da:4a:f3:c1:08:a5:e6:8f:0b:a7:55:df:
                    33:f0:a3:64:1a:56:a3:56:92:86:7e:57:17:67:30:
                    de:b8:a6:54:cd:3e:fc:0d:d8:60:9e:67:de:52:ca:
                    51:f4:d6:42:f4:1b:f3:1e:58:9c:76:f0:f9:99:ff:
                    e3:e0:61:bb:81:91:b9:b0:dd:c4:b0:d4:0d:26:b8:
                    93:31:21:d1:f5:c1:da:da:7e:ad:d4:4c:af:93:e5:
                    30:87:65:02:c2:e0:14:5f:10:c1:b1:cf:a8:af:c8:
                    17:a8:2e:eb:60:f7:b6:12:1a:8f:40:30:a9:be:27:
                    42:7f:07:94:ea:03:95:a8:bb:5f:15:76:d6:c9:eb:
                    fe:39:18:7d:1b:aa:d5:a9:df:7c:02:33:98:f6:eb:
                    b8:db:ce:02:93:50:fc:c9:9a:da:7e:cd:82:51:da:
                    75:3c:2a:6f:64:db:f3:8a:60:29:24:72:1e:56:30:
                    01:91:07:ec:81:88:71:ca:6a:d9:f9:be:cf:92:96:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E2:B6:62:5A:08:20:32:80:30:33:26:D0:50:AD:8B:37:00:AC:83
            X509v3 Authority Key Identifier:
                keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ae:7a:9f:1a:09:68:c1:39:bb:cc:69:15:12:68:14:34:ba:
         4e:36:ee:cd:a8:67:d5:28:19:17:ef:65:c7:3c:bd:06:83:f4:
         78:91:f9:5d:c8:42:10:1e:52:02:c3:96:a4:7b:7d:7b:73:7c:
         95:f5:57:36:df:be:2a:09:bf:ab:6c:db:cb:a9:95:ce:26:ec:
         5d:4f:57:71:18:29:ba:22:0a:28:81:e4:6c:07:b8:0b:39:85:
         98:ec:50:7f:d7:ad:d0:9a:9d:2e:13:ed:0c:8d:38:d3:64:7e:
         c6:55:6e:50:1f:3e:08:b3:88:67:9b:a3:10:a2:58:e7:4b:ea:
         4f:16:00:47:e0:f7:10:d1:51:9e:c9:58:7f:18:3e:83:16:32:
         57:1d:1f:6b:4b:3d:3c:af:cf:7e:45:8f:70:47:73:85:a0:8d:
         4a:da:b4:ab:6f:fa:bf:48:c2:fd:ed:d8:92:7e:24:2a:6c:4a:
         25:0c:dd:19:b9:13:53:06:6f:c5:e0:ee:35:dd:c5:7c:e4:55:
         89:de:7e:5f:01:7c:8e:13:cb:5e:b4:d8:8a:66:6c:19:f5:9b:
         c3:b5:92:28:c3:53:ec:5c:4e:c2:16:69:3c:f2:a9:d5:40:9c:
         3a:49:44:f6:5c:a6:4f:ea:8b:46:b4:36:d4:f5:78:4e:34:53:
         6d:1c:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:35:02 2025 by rpki-client